Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0DDB6E152111F090F904066EB8BCC6.roa
File: 3A0DDB6E152111F090F904066EB8BCC6.roa (raw, json)
Hash identifier: jYclacu1vz5FPDNbFjerZoSbn9C5IYYlJTJMDDZLKBM=
Subject key identifier: 74:FC:8B:E8:BE:63:4C:99:93:12:DC:94:D1:E5:BE:E8:E4:5C:A9:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0DDB6E152111F090F904066EB8BCC6.roa
Signing time: Wed 09 Apr 2025 09:01:30 +0000
ROA not before: Wed 09 Apr 2025 09:01:26 +0000
ROA not after: Thu 15 May 2025 09:01:26 +0000
asID: 395793
IP address blocks: 45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84792 (0x14b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:01:26 2025 GMT
Not After : May 15 09:01:26 2025 GMT
Subject: CN=67f6376a-8d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:74:78:65:58:81:f1:49:c1:8b:2d:99:23:
5e:60:2d:d2:1c:b6:3c:ee:07:7c:d5:bc:e7:1c:59:
bd:97:11:f2:b2:66:5f:6c:5c:3e:a3:7e:b2:52:b6:
82:15:f1:56:00:e9:e0:ed:35:ed:8c:7a:4a:f5:c3:
a3:e8:34:c7:2c:25:7a:18:ee:fa:dc:0b:c0:91:bc:
0c:32:41:cc:bf:18:77:22:2f:37:fd:0a:55:fc:92:
bf:fa:09:44:b5:d7:6b:74:84:fa:09:e1:58:b6:b0:
d1:45:49:a3:52:2c:86:35:17:0b:38:04:bf:62:57:
91:fa:92:48:4e:dd:57:fa:4b:af:ca:d5:2b:ef:35:
87:2a:25:74:7d:fe:6c:05:c3:6a:02:90:d3:18:6f:
5c:76:66:a5:02:7f:eb:23:ce:ca:92:19:c6:ec:f5:
38:dc:d4:b4:69:a7:2b:88:d0:3c:ad:d9:d3:4c:db:
14:54:f7:69:4e:01:3d:c4:ba:8b:5c:91:03:af:19:
88:ec:5f:5e:51:40:40:34:5b:a3:62:09:84:80:11:
ee:1e:94:e2:cc:ff:3c:fd:77:99:90:8d:7b:d6:bc:
5f:9a:ee:a7:fb:47:6c:64:72:14:4e:c0:17:a4:a5:
78:9d:79:15:f6:56:1c:da:c2:c4:15:79:d4:be:20:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:8B:E8:BE:63:4C:99:93:12:DC:94:D1:E5:BE:E8:E4:5C:A9:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0DDB6E152111F090F904066EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ab:6c:00:95:36:0d:4a:a2:2e:97:ff:98:ec:b0:93:13:d1:
94:dd:e6:6d:f8:a4:8b:65:8e:36:fe:24:15:64:e5:34:02:6d:
30:4b:1b:1b:2b:58:69:77:c9:12:7a:99:d8:5a:1f:75:ee:57:
26:7b:ac:33:ce:8d:74:67:01:72:88:a8:d8:b3:94:36:53:50:
77:10:7e:85:ef:01:3f:b9:07:28:c5:c5:73:65:52:75:e1:ee:
bc:ab:4a:36:9e:06:ba:b1:10:6d:5a:7a:a3:11:8e:02:a7:08:
15:31:bc:f1:7c:b5:60:8f:07:57:de:d6:0d:a1:da:bc:56:9e:
f9:00:5a:cf:d9:a8:25:26:fd:22:41:d6:54:2e:8a:bb:35:24:
b6:24:f1:3f:47:be:dd:3b:46:23:0f:6b:bb:d2:89:2e:52:3f:
25:19:d4:50:e4:e4:8b:aa:6e:84:12:6a:c7:d8:24:51:47:35:
e9:02:7f:99:23:42:d9:e2:65:bb:4f:b5:94:dc:81:da:1c:84:
34:5d:74:50:3f:50:02:68:e7:a3:9a:10:45:ec:d2:e9:93:8b:
0a:8a:d8:58:e4:c5:20:7a:b5:e7:c8:c8:c3:07:82:90:33:10:
cf:a1:5e:fb:87:64:30:b0:70:8b:41:4b:e3:15:23:d2:8d:17:
67:0b:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:52:12 2025 by rpki-client on console.sobornost.net