Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C06B9219FD11F0B33891FD6DB8BCC6.roa
File: 42C06B9219FD11F0B33891FD6DB8BCC6.roa (raw, json)
Hash identifier: JsL7vchWJUmgrx9f3q7YhRi9NiMDOtR+0raABKh39pg=
Subject key identifier: 44:B0:7E:3A:9B:5F:97:87:94:1D:24:A1:BA:80:8A:05:AA:03:08:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C06B9219FD11F0B33891FD6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:26:39 +0000
ROA not before: Tue 15 Apr 2025 13:26:34 +0000
ROA not after: Thu 15 May 2025 13:26:34 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85088 (0x14c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 13:26:34 2025 GMT
Not After : May 15 13:26:34 2025 GMT
Subject: CN=67fe5e8f-6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:b2:08:ab:6f:26:29:01:52:f7:1b:d0:c5:
1b:31:b6:fe:81:d6:bd:cd:bb:10:bd:59:dc:b6:ba:
d8:b1:e8:49:bf:2d:bb:8c:c1:28:e1:d9:bc:b4:7e:
dd:9a:f6:f2:b0:ad:63:7e:f7:ba:19:92:dd:12:1a:
bb:92:c6:d7:a4:92:06:65:bf:99:a5:39:88:f5:2c:
14:d2:4f:3e:f8:2d:24:db:93:3a:06:07:3b:32:3e:
e9:ff:52:81:21:6d:5e:69:23:38:8a:7b:12:48:33:
43:80:e8:9e:db:f0:1c:fe:81:90:8b:e7:43:1e:f9:
97:4e:2b:cf:c5:28:c0:7e:dd:ce:b2:a2:fc:a9:c4:
fe:9d:da:55:83:5b:35:97:26:17:2c:97:af:e4:73:
28:21:53:5a:72:03:45:aa:f2:04:6d:6f:25:15:99:
97:b7:36:2c:20:d9:b4:5d:09:42:eb:e5:37:0b:5b:
83:d3:b9:44:0d:27:cd:2c:7b:c0:ee:f0:04:da:34:
e8:1b:0e:17:2e:93:f2:5d:8c:88:ee:55:3d:6c:85:
1b:9a:8c:aa:b8:9a:3e:d9:6b:9b:f2:eb:43:2c:f7:
c1:cd:17:2e:e8:64:d2:45:5e:17:1a:e8:e6:9f:fb:
80:c4:a5:fb:75:e3:86:d0:21:bf:75:9a:3a:8a:88:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:7E:3A:9B:5F:97:87:94:1D:24:A1:BA:80:8A:05:AA:03:08:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C06B9219FD11F0B33891FD6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
84:0d:1f:40:c5:30:6b:f5:90:4a:16:37:09:ac:d9:be:f3:10:
18:1e:2b:b4:1e:d3:53:73:3c:6c:a3:3e:a6:2f:e1:7b:7c:66:
58:95:a3:99:dd:f7:35:7b:99:ef:88:77:5c:d0:99:c3:67:de:
51:79:cc:f5:40:1d:52:ae:3d:3e:56:bd:dc:be:d3:c1:07:5e:
99:b5:dc:a7:cc:de:ac:d4:b6:70:5f:2a:d2:88:e2:76:8c:7a:
22:e8:ef:f4:cc:4c:47:b1:56:13:d6:b1:88:9f:1b:5d:c9:59:
fd:95:bb:9f:08:7c:b0:8a:72:50:67:49:a6:ac:df:42:93:30:
89:de:c0:46:3f:34:95:10:32:fd:11:58:6b:07:ee:ae:86:73:
24:5a:cb:f2:22:fd:fd:ec:7d:e1:e6:1c:7d:d8:97:7f:a5:ca:
e4:71:08:59:bb:79:04:60:5d:da:1f:b9:8f:db:7e:80:7d:6a:
1a:2b:69:56:b1:99:13:38:43:27:25:b1:d0:c0:7a:7a:3b:56:
18:2e:d6:66:4a:ff:7a:90:73:40:03:fe:bc:bd:27:e6:93:44:
1d:1c:02:d6:c0:21:b6:8c:7b:c6:8a:85:e8:79:4f:3f:73:3e:
fe:b5:d4:14:3a:cd:60:4d:91:59:e9:91:16:43:c6:e3:df:54:
98:91:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:29:22 2025 by rpki-client on console.sobornost.net