Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4749097A210B11F0BB198084DAE4EC9C.roa
File: 4749097A210B11F0BB198084DAE4EC9C.roa (raw, json)
Hash identifier: +dWSxNwjfixDe9TugbQ/WaKGI9Ziy/4X3H8ILGLjGFo=
Subject key identifier: 88:4C:91:2C:67:28:C5:96:60:3B:F9:14:57:C0:B4:48:93:19:D2:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4749097A210B11F0BB198084DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 12:54:38 +0000
ROA not before: Thu 24 Apr 2025 12:54:33 +0000
ROA not after: Wed 30 Apr 2025 12:54:33 +0000
asID: 138910
IP address blocks: 45.195.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85592 (0x14e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 12:54:33 2025 GMT
Not After : Apr 30 12:54:33 2025 GMT
Subject: CN=680a348e-abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:65:8d:eb:7c:4a:bb:af:15:84:c6:c3:1b:
4c:ea:31:6a:71:f9:15:27:2f:0b:95:19:99:ea:7e:
5c:b3:6d:16:99:ce:af:01:6f:55:26:de:dd:a0:f4:
d3:6e:7f:a5:c8:0e:d5:a1:3f:c6:23:9b:64:2c:5c:
ef:c2:c9:a3:5f:09:70:04:5b:85:5d:44:14:19:7c:
9f:6f:8e:24:b3:1e:ce:0b:54:b5:1b:ba:70:11:b2:
11:59:21:58:38:35:7e:2a:21:fb:bf:14:f5:c1:55:
11:f7:a4:42:66:b0:b6:c1:f1:9f:d9:d8:cc:dc:71:
23:1a:06:30:1d:da:27:77:9f:90:0b:ff:44:3e:62:
5a:7c:23:e8:f0:20:5c:be:6d:23:e0:11:04:0f:b3:
5d:1d:26:43:2c:0b:ef:99:49:fd:51:88:22:24:85:
18:ee:13:36:79:1e:aa:2c:86:ee:1a:aa:59:44:dc:
80:a7:89:19:0a:b4:73:a0:9e:46:16:5f:3b:d2:d5:
ad:62:c8:13:49:bb:14:0e:de:e6:b5:35:35:3a:e7:
b0:01:42:fd:65:20:8a:a7:4f:b7:70:11:c4:d3:dd:
17:d7:6e:9a:b3:1d:7b:8d:bc:70:59:f1:1d:8c:b2:
f6:03:90:c6:6e:14:46:7a:82:dc:42:16:84:44:45:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:91:2C:67:28:C5:96:60:3B:F9:14:57:C0:B4:48:93:19:D2:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4749097A210B11F0BB198084DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:86:39:d1:e4:a2:4e:91:68:39:53:e8:8e:4e:9f:b1:3e:e2:
41:8e:6b:d4:be:4e:14:9e:c0:83:1a:50:3f:8c:e7:43:9e:19:
df:6c:d3:71:3f:d5:45:27:70:19:32:f0:1e:1e:f3:0e:0f:e2:
fd:52:7c:db:17:8b:20:4e:21:ed:a4:e3:02:24:24:86:9a:5a:
74:71:2d:21:86:d5:77:dd:6b:fb:b4:e3:c3:36:07:41:b3:e8:
a2:f9:59:22:f9:bc:38:02:d9:34:e1:d7:da:54:b6:08:b6:85:
c5:b2:bd:a6:18:bd:57:96:4b:e9:f8:c1:0e:73:4e:ab:a9:66:
e7:dc:58:b4:f8:6e:6a:b5:15:43:9b:23:66:bd:56:19:e2:f7:
a0:88:0a:d2:22:ca:a1:32:c3:85:66:a5:1a:ba:46:a7:c2:cd:
60:53:91:98:55:64:e1:a0:a1:a7:27:3c:83:41:0b:fa:f9:48:
bf:fd:02:e2:ca:50:97:e5:71:8c:c3:1f:16:08:c3:32:77:43:
c6:58:43:e0:d2:c2:46:78:7c:17:41:b4:ac:5e:d9:2b:a3:8f:
d6:bb:86:45:de:3d:92:ec:90:32:f4:10:e0:46:d8:2b:72:20:
90:d1:58:fb:ba:3d:a8:e0:25:f3:77:b1:8b:0b:2a:52:78:1e:
25:51:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:37 2025 by rpki-client on console.sobornost.net