Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/589CC05A1C5F11F0BC2115C2DAE4EC9C.roa
File: 589CC05A1C5F11F0BC2115C2DAE4EC9C.roa (raw, json)
Hash identifier: bgiU0zfYF1Rp3qbULQ4TiwPtz5TSyNjDqKxT8GtnzIE=
Subject key identifier: 83:1B:E5:6E:0C:8A:2D:9C:A1:32:A4:76:ED:2B:5F:18:21:52:E5:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/589CC05A1C5F11F0BC2115C2DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:13:49 +0000
ROA not before: Fri 18 Apr 2025 14:13:44 +0000
ROA not after: Fri 25 Apr 2025 14:13:44 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
45.204.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 14:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85254 (0x14d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:13:44 2025 GMT
Not After : Apr 25 14:13:44 2025 GMT
Subject: CN=68025e1d-3ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:36:3d:a9:78:66:81:46:ca:80:76:4f:00:
2c:6f:5d:6e:35:4a:58:c0:6f:99:6a:c1:d9:05:36:
cf:05:d7:47:2f:b0:e1:0e:ed:96:70:7c:0e:29:04:
29:ef:c3:c7:06:54:0c:05:d1:05:ed:60:87:37:42:
7c:25:96:5e:e8:4d:90:90:33:5b:41:87:0a:e9:f1:
2f:59:5a:5c:c1:5c:40:16:fc:33:cb:41:eb:bf:93:
56:7f:6e:8f:ed:88:28:e8:d2:7d:e2:d6:cc:05:62:
08:07:fd:28:95:be:8d:0b:ff:f2:2b:fb:e2:e3:d8:
34:80:a3:5f:19:6c:6c:86:f2:0b:c0:b7:de:56:6f:
ea:8c:fb:7a:fc:b9:55:91:03:89:68:76:5d:f8:2d:
99:4c:b9:23:7f:07:e1:5f:c9:5a:77:89:a0:f2:a7:
f2:6d:8b:2f:fe:76:bd:21:98:40:be:d3:5e:a3:e5:
7a:2c:da:6e:35:76:06:7a:8d:d8:a3:9a:7d:63:3a:
28:82:fe:96:1f:f2:14:5a:0b:a9:88:c3:63:12:d1:
28:0e:97:f6:20:2e:c6:01:5a:ec:8f:6e:3e:05:72:
35:1f:6b:ee:87:e5:61:db:94:c7:8a:32:65:0d:b0:
4f:77:7b:8b:cd:66:9d:05:db:f6:36:ff:9f:ce:25:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:E5:6E:0C:8A:2D:9C:A1:32:A4:76:ED:2B:5F:18:21:52:E5:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/589CC05A1C5F11F0BC2115C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
45.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bf:14:75:d4:5b:b7:9e:ed:a7:70:a0:2e:bd:ad:69:65:f8:
0e:69:80:85:3d:0e:20:82:7c:44:df:68:8a:a3:97:9f:2c:59:
78:c1:73:80:3a:61:4a:bb:88:64:8a:b5:4f:5d:e5:15:ab:92:
d8:1b:50:02:71:df:df:13:7b:82:b2:36:89:54:f5:7c:b5:29:
a8:dc:7c:42:05:58:2c:f5:ce:ae:e2:28:a5:3f:76:1a:26:7e:
a1:a7:45:12:be:67:c1:cb:a5:4e:f3:49:0d:5e:d7:e2:ce:f8:
f4:33:87:a5:43:e7:62:8a:a3:05:1a:b0:41:c0:2f:3a:d5:61:
4c:de:73:4a:5f:d1:16:2c:33:ba:54:69:9b:52:b1:90:78:84:
bb:0e:6b:d2:9a:0a:99:63:61:01:17:6b:33:b5:e2:46:91:d6:
6e:b6:a0:07:d4:e4:88:a8:a2:3f:9f:c5:79:ce:9d:ed:25:31:
cb:57:84:da:fd:01:98:7c:0d:44:36:fb:be:29:75:2e:99:85:
23:e2:f0:e4:2c:45:36:a1:aa:33:89:0e:cc:18:e7:a6:71:38:
74:62:be:d3:76:01:97:83:84:07:17:00:f5:71:c8:26:84:60:
b6:31:ce:15:23:0c:13:2a:2c:24:6d:40:79:f8:3f:93:e9:dd:
14:f6:cb:18
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAU0GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE4MTQxMzQ0WhcNMjUwNDI1MTQxMzQ0WjAYMRYw
FAYDVQQDEw02ODAyNWUxZC0zYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGw2Pal4ZoFGyoB2TwAsb11uNUpYwG+ZasHZBTbPBddHL7DhDu2WcHwO
KQQp78PHBlQMBdEF7WCHN0J8JZZe6E2QkDNbQYcK6fEvWVpcwVxAFvwzy0Hrv5NW
f26P7Ygo6NJ94tbMBWIIB/0olb6NC//yK/vi49g0gKNfGWxshvILwLfeVm/qjPt6
/LlVkQOJaHZd+C2ZTLkjfwfhX8lad4mg8qfybYsv/na9IZhAvtNeo+V6LNpuNXYG
eo3Yo5p9Yzoogv6WH/IUWgupiMNjEtEoDpf2IC7GAVrsj24+BXI1H2vuh+Vh25TH
ijJlDbBPd3uLzWadBdv2Nv+fziUjvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMb
5W4Mii2coTKkdu0rXxghUuUaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODlDQzA1QTFDNUYxMUYwQkMyMTE1QzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcxMAwQALcxPMA0GCSqGSIb3
DQEBCwUAA4IBAQApvxR11Fu3nu2ncKAuva1pZfgOaYCFPQ4ggnxE32iKo5efLFl4
wXOAOmFKu4hkirVPXeUVq5LYG1ACcd/fE3uCsjaJVPV8tSmo3HxCBVgs9c6u4iil
P3YaJn6hp0USvmfBy6VO80kNXtfizvj0M4elQ+diiqMFGrBBwC861WFM3nNKX9EW
LDO6VGmbUrGQeIS7DmvSmgqZY2EBF2szteJGkdZutqAH1OSIqKI/n8V5zp3tJTHL
V4Ta/QGYfA1ENvu+KXUumYUj4vDkLEU2oaoziQ7MGOemcTh0Yr7TdgGXg4QHFwD1
ccgmhGC2Mc4VIwwTKiwkbUB5+D+T6d0U9ssY
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:03 2025 by rpki-client on console.sobornost.net