Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D49DE00CC511F09FEC854C762E951A.roa
File: 43D49DE00CC511F09FEC854C762E951A.roa (raw, json)
Hash identifier: v5U0YwemUPNsUIs6xX3ZPVUop6S09k9MxDtW9G5Ty9M=
Subject key identifier: C1:D9:11:1D:09:DD:A6:83:FE:2E:D3:9F:6D:CD:09:64:36:48:29:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D49DE00CC511F09FEC854C762E951A.roa
Signing time: Sat 29 Mar 2025 17:43:03 +0000
ROA not before: Sat 29 Mar 2025 17:43:00 +0000
ROA not after: Fri 09 May 2025 17:43:00 +0000
asID: 14315
IP address blocks: 45.197.137.0/24 maxlen: 24
45.197.139.0/24 maxlen: 24
45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84180 (0x148d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 17:43:00 2025 GMT
Not After : May 9 17:43:00 2025 GMT
Subject: CN=67e83127-3608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:83:76:7f:12:a8:cd:d5:5b:48:55:93:e0:
ef:3c:b4:89:69:b9:b1:b1:f7:0b:f7:9a:c2:d7:5e:
29:eb:50:2a:bd:3d:fa:28:a9:7c:55:6b:0e:50:35:
7d:89:4e:7c:0f:75:7a:5c:35:eb:31:e6:66:08:c3:
2c:fc:5b:7f:a4:80:89:94:5a:d3:59:8a:33:42:8b:
18:72:99:7a:da:da:f3:14:54:65:31:c7:4a:e8:36:
b0:b1:b9:fb:32:f5:14:a5:59:f3:92:45:3e:14:30:
dc:a5:ff:47:97:56:7e:31:18:30:99:d7:0c:66:50:
6b:ff:ab:ce:8c:80:82:7d:ce:54:5a:84:fd:26:36:
87:25:ff:7a:67:2b:41:5d:aa:54:89:a2:b8:09:9d:
14:8e:28:7d:ae:a0:ab:32:be:38:ca:c9:58:78:33:
06:72:34:bc:39:3f:83:b2:3b:6b:24:63:d7:9a:be:
01:9b:4f:f3:35:ea:3f:52:84:75:16:e6:68:33:f9:
1e:a7:da:f3:bc:70:87:6d:78:52:7c:44:18:0e:f3:
16:fe:50:7e:ad:ee:54:34:01:f1:6f:12:78:f9:9e:
06:08:d7:81:f0:c9:ed:80:42:8b:be:02:db:b8:c1:
2d:5c:4a:25:db:01:6d:34:5b:aa:5e:27:9e:2c:bf:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:11:1D:09:DD:A6:83:FE:2E:D3:9F:6D:CD:09:64:36:48:29:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D49DE00CC511F09FEC854C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
45.197.139.0/24
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ef:de:6a:d3:ce:c7:7a:14:2e:a7:3d:f0:81:14:1e:3f:52:
bb:31:f3:30:3b:cb:31:98:05:89:3e:ab:c8:d3:97:3c:c9:22:
81:c9:ea:1a:71:80:5d:1c:df:25:4f:70:43:22:c1:ca:d6:2b:
54:05:9e:04:3e:68:f1:02:84:b7:04:92:94:a9:d8:72:92:54:
36:31:a7:e7:43:b1:44:71:65:84:a8:e2:44:b9:98:23:0a:62:
6d:58:d5:2e:63:20:03:5d:8b:9f:99:27:e1:78:df:c0:21:bd:
4a:7f:e6:8a:ae:6d:8a:90:98:19:20:1b:d2:18:34:ba:a0:28:
89:6b:72:c5:14:b1:4e:90:ed:8a:11:ca:09:3e:74:7e:8a:25:
ab:d6:b8:bc:3e:c7:23:f4:6d:87:fb:ff:9f:db:7a:23:75:60:
f1:8d:05:e1:c8:94:e9:c7:97:7f:33:d5:11:86:f6:bf:f7:8a:
d8:6d:85:84:9e:a1:53:37:3d:02:34:6d:78:84:90:10:83:5f:
a4:3f:89:cb:f2:4c:90:cf:b1:67:b4:11:4e:b1:68:96:06:dd:
3d:53:5a:2a:19:d5:fd:2d:52:6a:41:68:5a:bb:12:75:5b:ed:
ef:73:36:0d:e5:0f:06:86:01:6f:b5:63:2b:ac:d8:e1:eb:35:
2d:f4:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:29:23 2025 by rpki-client on console.sobornost.net