Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A3FA016B011F0B40170F16DB8BCC6.roa
File: 4C2A3FA016B011F0B40170F16DB8BCC6.roa (raw, json)
Hash identifier: +pnU8wtR0jJJYc3MtWWjC+PX3LLme2FKRQGSRGmWunw=
Subject key identifier: 8D:2B:30:4E:FD:7D:64:5B:94:02:0B:08:C8:1D:DB:AE:58:99:DF:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A3FA016B011F0B40170F16DB8BCC6.roa
Signing time: Fri 11 Apr 2025 08:38:10 +0000
ROA not before: Fri 11 Apr 2025 08:38:06 +0000
ROA not after: Mon 12 May 2025 08:38:06 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84903 (0x14ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 08:38:06 2025 GMT
Not After : May 12 08:38:06 2025 GMT
Subject: CN=67f8d4f2-e1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:f3:03:31:e2:a3:81:74:e5:6e:e0:ac:8b:
4d:7d:cf:4b:7b:f4:ac:7c:50:2f:c9:bf:39:eb:e9:
22:49:d9:1b:18:0b:0d:50:62:d0:b7:ef:0b:5b:8f:
3e:33:6b:d9:8b:f3:47:40:be:1a:1b:5a:d9:fd:7d:
8a:dc:42:3d:9e:53:c2:52:89:49:ce:86:ec:53:7e:
c1:02:e2:9d:f6:f2:cf:ce:ec:f7:1b:97:49:2d:23:
aa:61:80:26:3f:83:cd:b8:0b:d5:e3:bc:be:b3:8d:
60:01:09:ac:be:bb:c5:01:38:7d:b6:72:da:06:e3:
50:73:e5:d7:25:37:e7:95:38:46:f9:b5:bb:e6:0d:
28:93:ad:c6:cc:87:37:c9:a6:e0:a8:0c:86:bb:aa:
ba:2a:04:10:95:2a:c1:b7:c8:4f:e8:e3:ed:e7:b1:
81:1e:c1:37:05:68:26:79:3d:3d:3d:0b:a1:0e:16:
91:9e:06:6c:47:09:51:db:d8:b8:db:92:fc:6a:38:
0a:80:b1:e5:45:94:fa:2c:6a:81:1d:32:3d:8c:65:
3b:29:f3:fc:2c:97:54:45:91:97:ce:87:5d:f1:49:
0d:10:46:cd:54:13:7f:9a:79:4d:7e:e3:fa:61:48:
27:e7:64:24:7f:81:46:13:1a:5c:42:3b:70:5a:5d:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:30:4E:FD:7D:64:5B:94:02:0B:08:C8:1D:DB:AE:58:99:DF:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A3FA016B011F0B40170F16DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
85:56:11:ac:81:bc:18:c9:84:56:07:f9:5b:fe:0e:d8:bf:37:
e3:92:37:47:3f:6c:38:89:ca:da:0c:e2:9f:aa:57:5a:23:98:
ed:c7:ed:ce:5c:69:5c:21:1c:58:93:ca:7e:e0:7e:1c:4f:d0:
27:f0:50:b3:0a:5c:dd:13:e1:9e:23:ef:ab:c4:80:22:b9:23:
fc:61:9e:04:61:1b:19:a7:14:c4:dd:b1:9d:ed:b9:7a:87:0b:
b5:02:09:ac:83:b8:6e:99:09:be:c3:5e:b5:0b:c6:26:f3:3c:
06:05:22:7e:ab:8a:08:f8:4e:77:4a:4b:f5:7f:b7:f6:d8:b8:
d9:e5:13:38:11:f0:28:17:d8:bf:cc:95:09:1c:76:3e:0a:97:
35:23:af:f9:4d:46:e7:4c:87:d6:2a:0a:bb:61:2a:c2:9e:42:
ec:e0:f6:1e:4e:48:24:cc:c6:fc:cd:04:6a:47:f8:8d:47:1b:
cb:33:8b:03:5c:3f:38:ae:ff:1c:00:71:04:c0:3b:fd:10:46:
e7:b0:5f:9d:5e:6f:44:78:fe:c6:6d:cf:df:34:9b:1b:2d:6c:
ee:57:86:aa:31:08:9f:ee:9b:f6:52:82:2e:98:02:d1:e0:f7:
ab:15:27:11:b7:21:28:cc:8c:70:62:53:cc:20:db:9b:eb:1d:
78:01:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:04:30 2025 by rpki-client on console.sobornost.net