Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CFA1E4211711F08C72C2D3DAE4EC9C.roa
File: 48CFA1E4211711F08C72C2D3DAE4EC9C.roa (raw, json)
Hash identifier: kJ7Argexvs3BhWccXDQ4oO70pvvB2JX9ol77ceNUbVM=
Subject key identifier: 3F:A0:85:53:E3:B8:40:0D:C3:48:D1:9B:87:13:AA:DF:BF:5E:38:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CFA1E4211711F08C72C2D3DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:20:34 +0000
ROA not before: Thu 24 Apr 2025 14:20:29 +0000
ROA not after: Wed 09 Jul 2025 14:20:29 +0000
asID: 142002
IP address blocks: 45.195.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85650 (0x14e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:20:29 2025 GMT
Not After : Jul 9 14:20:29 2025 GMT
Subject: CN=680a48b2-64f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:21:c2:6f:1b:4f:ef:fa:f3:c5:03:d2:1a:
8d:4d:e3:8f:1d:e2:4a:8e:fd:bb:58:1a:3a:2f:69:
2f:06:38:4e:cd:84:c0:cc:66:d8:3a:a8:f2:9a:29:
33:66:3e:6c:49:cd:fe:19:ad:7c:56:f5:dc:5a:31:
f9:e6:5c:71:03:d5:d0:88:23:c6:4b:60:ea:0a:dc:
0a:26:5f:7b:76:7f:d7:1b:18:45:85:e9:09:76:78:
1a:2c:ce:b3:76:28:46:4f:49:d9:63:87:2c:57:4d:
d7:b8:8c:b8:2a:e5:ec:0a:1a:bb:32:7d:87:56:17:
db:9e:19:c4:58:7b:26:8f:4b:df:5b:64:40:34:c1:
39:45:21:88:b2:96:a0:25:82:cb:b5:88:80:fc:a1:
6a:74:f8:fe:0f:1e:15:2a:47:a0:d2:6e:ac:89:d3:
31:11:41:ab:b8:5b:e3:d1:2a:4e:88:72:cb:cf:55:
4b:29:ee:05:f2:ce:a5:db:86:1f:10:f1:d1:78:61:
12:04:b7:7a:54:0a:3f:0f:67:83:a2:26:6e:ea:36:
62:d3:57:d6:cb:c4:79:0f:b0:f8:7b:f6:a6:02:cc:
0c:6c:04:5f:dd:ec:d4:d5:e0:ac:8a:71:5a:fe:5f:
ce:73:27:83:83:19:29:ad:93:f0:e7:ad:8f:7c:ba:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:85:53:E3:B8:40:0D:C3:48:D1:9B:87:13:AA:DF:BF:5E:38:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CFA1E4211711F08C72C2D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.11.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ec:e8:a7:67:a1:d4:ee:f3:a0:8c:b8:af:51:ff:6e:e0:7c:
0b:01:83:38:44:20:f6:43:e2:a4:3a:25:f1:d3:04:a3:27:ca:
0c:81:3e:fd:09:65:d2:b7:10:30:b5:66:bf:d1:90:70:fa:4b:
05:b5:61:d1:fe:ea:30:eb:89:24:70:d8:36:93:51:37:5d:c5:
80:19:23:2a:72:f5:52:b4:41:ed:e8:6f:0a:7f:22:3e:9f:75:
4b:17:cb:20:b0:df:72:e7:81:0d:62:04:7f:b4:80:ec:98:2e:
a6:b2:bf:8a:1e:e4:9f:43:b8:fa:a5:15:d2:19:40:53:96:b1:
6c:69:c9:79:e0:b9:f1:f6:e0:0e:38:87:69:45:24:29:19:94:
b3:28:98:44:48:da:1a:18:86:8a:76:30:7a:ab:cf:fa:35:09:
e0:15:3c:3b:2f:1f:e5:9b:a6:df:54:6c:2a:f2:b6:25:0d:1e:
fc:55:68:82:38:15:60:ae:d8:7a:db:d0:c2:2e:a5:e1:52:22:
ab:7f:1d:4a:38:67:53:2b:d1:f3:ae:78:a1:a8:ac:2d:8d:49:
92:30:81:96:b5:a8:06:71:38:76:13:be:f7:64:65:ea:3a:ac:
c7:6c:d5:e2:e8:55:0d:b2:b5:47:83:65:57:e8:b1:e5:d5:d8:
99:59:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:52 2025 by rpki-client on console.sobornost.net