Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582586FC1A0C11F0898FF0DF6DB8BCC6.roa
File: 582586FC1A0C11F0898FF0DF6DB8BCC6.roa (raw, json)
Hash identifier: F2EaWmtBfw3d/kJhs74ShbP5xFfrc0wlU4ppe2UnTDw=
Subject key identifier: 34:2F:55:55:B5:02:39:77:CF:A1:EE:3A:C6:C9:40:E7:23:F4:70:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582586FC1A0C11F0898FF0DF6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 15:14:37 +0000
ROA not before: Tue 15 Apr 2025 15:14:32 +0000
ROA not after: Sat 24 May 2025 15:14:32 +0000
asID: 6079
IP address blocks: 45.203.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85120 (0x14c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 15:14:32 2025 GMT
Not After : May 24 15:14:32 2025 GMT
Subject: CN=67fe77dd-3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:c1:49:8e:3a:d8:64:07:6f:c4:56:79:d6:
3d:eb:68:64:89:0f:c0:f0:6d:bb:57:b5:e8:0e:8b:
9f:93:b9:9f:74:00:b2:ab:ab:03:c0:79:a6:b1:0c:
fe:f7:7c:43:5b:e3:bd:dc:61:30:05:77:e7:6e:e1:
45:e8:8e:e1:df:cd:68:3d:a8:b4:91:44:3a:11:10:
35:87:38:51:04:e5:73:6d:7f:5c:1e:83:41:88:1b:
b7:ef:87:01:9d:fe:84:87:98:07:14:ea:4c:2a:2b:
f5:6d:ba:33:76:ee:3c:7e:7f:cd:a8:d3:14:28:1a:
19:5d:4a:ed:fa:cc:8d:76:17:31:da:c5:9f:a0:be:
22:40:8f:d6:94:da:12:e9:5a:39:dd:95:e8:59:e0:
f2:ed:5c:07:df:9e:bc:f1:db:a1:75:23:61:1f:1c:
f5:8a:51:79:0d:78:95:79:bc:f3:ec:43:09:94:09:
85:b0:90:13:55:ba:6b:48:a6:b5:6f:b9:db:b4:dd:
a3:b7:aa:65:4d:3c:c9:f9:f1:8b:31:0e:14:dd:6c:
e0:ad:4b:15:c4:a9:61:8f:e2:a6:0f:36:12:c6:08:
ce:4d:f4:76:74:12:ed:69:17:9e:ef:22:a4:90:23:
28:ef:76:d8:9e:1b:73:fe:41:aa:a4:47:35:91:06:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:55:55:B5:02:39:77:CF:A1:EE:3A:C6:C9:40:E7:23:F4:70:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582586FC1A0C11F0898FF0DF6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
51:6c:43:35:59:28:e3:da:5c:ef:1c:14:0c:7a:d1:cd:39:15:
e7:4b:7c:40:9a:bf:5f:0b:b2:8a:a3:31:5e:db:92:0f:d8:f5:
8c:c6:7e:f5:a3:30:f6:f8:5d:3f:5e:95:d7:6c:ed:67:b2:fd:
46:2d:32:ff:c1:8a:32:2d:7a:86:ea:6b:9a:5e:08:5f:83:b4:
21:9b:dd:c0:1f:d3:55:64:43:63:25:49:52:63:1d:d4:37:44:
e7:91:99:45:c8:a9:3a:1d:e1:b9:09:99:a0:5f:dd:0c:40:67:
17:6f:f5:f8:79:10:1b:08:a5:d1:c6:39:08:b1:c6:36:f2:e4:
2e:83:81:31:e6:25:e4:63:5c:3f:0c:5d:86:e8:3c:61:aa:95:
e8:f0:10:72:2a:6a:f0:af:21:4f:bc:f2:6e:47:69:0a:57:ed:
34:df:34:04:54:b5:5d:3e:77:4c:d9:8b:af:32:9f:15:76:06:
66:75:67:95:e0:9c:04:1f:6b:5e:5e:0d:4c:5b:d6:6a:fb:f3:
55:2c:06:fd:74:55:cc:20:ac:8c:56:90:7b:45:5c:71:42:ba:
e6:4d:7e:62:7b:ec:fa:72:dc:57:25:18:1a:57:17:17:eb:f9:
16:75:93:7c:0a:2e:b7:67:41:96:ca:ab:37:d9:23:fa:37:5c:
3e:6e:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:03 2025 by rpki-client on console.sobornost.net