Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/451CDAD8114711F0B6BFE6A7762E951A.roa
File: 451CDAD8114711F0B6BFE6A7762E951A.roa (raw, json)
Hash identifier: 2OgWhD0463jXwSEC9wvH33V5ItVVkts+LXOvIfWCmko=
Subject key identifier: 89:FB:3B:10:AD:7B:FC:64:4A:87:92:0D:8D:6C:F6:8D:47:B9:72:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/451CDAD8114711F0B6BFE6A7762E951A.roa
Signing time: Fri 04 Apr 2025 11:23:45 +0000
ROA not before: Fri 04 Apr 2025 11:23:41 +0000
ROA not after: Thu 08 May 2025 11:23:41 +0000
asID: 205125
IP address blocks: 45.202.193.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.69.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84517 (0x14a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 4 11:23:41 2025 GMT
Not After : May 8 11:23:41 2025 GMT
Subject: CN=67efc141-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8e:75:4e:63:6d:1e:5e:51:ab:f7:74:26:af:
4f:9e:a2:c4:ff:47:76:be:3b:3f:fb:b2:70:bf:8f:
00:ae:da:21:43:5b:77:c1:74:6a:31:1c:22:e1:fc:
5c:b7:15:c2:d3:2c:cd:7b:4f:7f:52:19:ca:f7:17:
00:02:0c:6d:4b:57:8d:9a:c2:86:df:2e:2f:1f:f1:
8e:dd:83:c8:d2:60:7d:a7:ef:d4:b2:05:0c:d7:e5:
f4:f0:bd:fa:5a:09:53:50:4b:cc:d6:2f:13:62:62:
45:b9:9f:f2:73:56:2c:37:e6:15:aa:6b:32:24:9d:
eb:ed:97:a8:04:17:6a:b4:8b:40:dc:71:8f:a7:8f:
61:01:b1:65:79:d5:5f:1c:b5:c3:58:76:d2:78:7e:
30:c9:a7:e2:e9:a0:68:2d:2d:d9:14:30:73:68:8c:
0b:ae:46:ff:1b:84:6e:56:8e:98:2b:7f:c7:49:ba:
bb:35:2f:1e:e8:75:04:65:ea:d4:1d:c1:93:4e:15:
0d:44:9e:61:81:65:fe:d6:a3:c6:2a:6e:dd:f1:57:
2f:75:6d:0e:39:9b:b8:1f:79:68:fc:4d:d0:06:a1:
95:1c:d0:91:d4:80:f8:e1:09:82:d7:cb:ac:0f:bc:
7d:6e:91:e1:24:44:92:31:4d:1c:c7:ac:ff:2f:3e:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:3B:10:AD:7B:FC:64:4A:87:92:0D:8D:6C:F6:8D:47:B9:72:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/451CDAD8114711F0B6BFE6A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.193.0/24
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.69.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
15:f3:35:de:5b:8a:24:01:7f:07:1f:5e:08:b1:db:e9:ce:39:
ad:54:f3:8e:57:88:1b:9c:22:d0:1d:43:ec:c1:f5:e8:99:f2:
ad:4e:0b:38:94:0a:94:65:3f:59:6b:be:01:c8:99:b1:cb:8f:
2e:a4:40:16:4b:85:2f:9b:0b:cf:70:6e:29:40:d3:2c:32:1e:
4c:6a:06:6a:09:2d:1e:33:0b:bd:8a:b9:ca:09:92:f4:82:2c:
32:30:8c:29:7b:7e:37:fc:3f:1a:0d:69:a7:dc:4a:38:dd:9a:
af:bb:d4:11:87:8f:7b:3c:e5:4b:c4:e3:7a:20:f3:c9:98:13:
5f:07:42:2e:ae:2b:10:7f:2c:11:83:3c:f3:fb:23:c1:59:7a:
4e:bd:1a:7c:9f:8e:32:ae:2c:e6:c7:72:b7:f2:21:65:ed:a1:
74:ce:65:ea:66:04:49:00:63:ce:e3:10:5b:16:db:59:ea:1a:
d1:e8:b8:87:27:8f:3e:73:21:cd:7d:ff:7c:f7:ba:0e:0a:74:
18:19:b0:d0:b4:1c:dc:3f:fa:ec:16:e9:7b:d2:e2:06:8c:b8:
55:8b:28:95:c9:81:fd:fa:be:3d:be:a5:57:d3:3d:87:81:7c:
ed:81:b0:36:9d:13:5b:44:be:82:64:87:40:5b:17:75:af:a5:
43:ef:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:38 2025 by rpki-client on console.sobornost.net