Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD2C85A1E4811F0ADB32B7FDAE4EC9C.roa
File: 4DD2C85A1E4811F0ADB32B7FDAE4EC9C.roa (raw, json)
Hash identifier: DQ4NA4Cu7iLz1BYdSnS3R4fg6C2iwVMB/APKq2XbPzk=
Subject key identifier: 4A:21:2D:6D:D4:24:59:1D:51:75:FE:65:0E:70:76:F7:60:96:8C:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD2C85A1E4811F0ADB32B7FDAE4EC9C.roa
Signing time: Mon 21 Apr 2025 00:33:54 +0000
ROA not before: Mon 21 Apr 2025 00:00:48 +0000
ROA not after: Sun 11 May 2025 00:00:48 +0000
asID: 274089
IP address blocks: 45.192.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85431 (0x14db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 00:00:48 2025 GMT
Not After : May 11 00:00:48 2025 GMT
Subject: CN=68059272-7e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e7:31:bd:f5:c8:d2:72:99:5d:d2:50:a2:d0:
90:ce:dc:f5:24:d2:83:8b:e4:98:df:d7:45:05:09:
22:9c:94:f9:18:91:eb:3c:5f:d2:ed:f2:0c:3c:45:
3e:38:61:2d:21:5e:4b:fe:85:19:2d:c8:5f:c8:0e:
b7:3f:93:5f:f5:86:22:c5:4f:01:36:10:26:96:4e:
57:ed:57:7c:fd:b3:2e:15:5e:7c:0e:05:7a:0e:37:
61:f1:6f:0d:83:d4:f9:ab:06:56:3b:74:42:c0:bc:
97:fd:59:ec:8a:e0:b4:81:e9:c2:e5:29:b5:c8:66:
aa:34:57:3b:ff:4e:82:fe:1b:35:08:c4:eb:95:d9:
d2:d4:14:f2:d6:e2:54:6c:e5:e2:b4:bd:4a:ef:d6:
73:a4:6c:0b:13:1d:5e:0d:7f:ca:31:35:3b:26:66:
ff:0c:c4:6e:e3:7a:49:39:7b:7d:dd:2e:cb:57:0a:
4a:c9:bd:e3:1d:0b:fe:16:42:fa:b7:c3:82:4a:cd:
0f:07:b7:7c:f8:bd:d9:3d:50:4c:e3:eb:15:20:0e:
35:02:c4:bc:b5:b4:74:84:44:52:05:cf:dc:68:b8:
af:57:1f:ce:9e:6f:1e:d9:91:02:5b:58:08:d6:36:
06:51:8e:8e:dd:0c:47:76:9d:0b:8a:b1:cb:26:59:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:21:2D:6D:D4:24:59:1D:51:75:FE:65:0E:70:76:F7:60:96:8C:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD2C85A1E4811F0ADB32B7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.110.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9c:ce:5e:d9:7c:cb:a9:0c:3a:57:de:7f:f4:47:21:2f:4c:
fa:37:f9:51:65:68:d5:c4:6e:73:22:db:28:c5:71:ea:49:5b:
c9:22:c2:dd:64:4e:1d:83:91:08:d7:c7:56:d6:26:e6:0b:f3:
cc:64:bc:27:f3:4c:4e:f3:cb:71:de:3a:cc:4a:d0:49:d8:05:
77:39:0b:1d:60:7a:11:7f:ad:8c:3d:fe:f9:85:03:93:90:e2:
4f:35:39:e5:02:98:d9:0c:53:97:7f:1b:39:27:5b:5b:65:1d:
18:e3:ae:a7:85:89:54:0b:db:33:e7:21:b1:ce:0e:3d:a8:7a:
6a:d1:d5:a2:81:fc:74:a8:ee:07:14:18:1a:9e:b7:36:d5:c0:
b9:4d:22:ae:35:c9:9e:59:07:c2:5c:b6:d3:a0:7e:b6:ec:60:
9e:99:d1:46:f9:15:f2:ab:50:a6:be:fc:f9:79:27:50:69:a4:
c0:5e:a4:92:d9:76:b2:c4:f4:2e:84:df:c9:20:71:ee:db:aa:
76:a6:c6:a4:38:76:18:b0:6a:40:2a:a2:3f:8a:cf:27:12:6b:
e5:05:a7:65:8e:ca:d6:7f:61:22:2d:dd:28:d8:df:9e:94:4b:
62:3b:08:26:94:f3:a0:96:63:bd:b3:e6:c1:f1:36:f4:a3:9d:
02:f7:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:06:02 2025 by rpki-client on console.sobornost.net