Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CA7492107E11F088E89C69762E951A.roa
File: 58CA7492107E11F088E89C69762E951A.roa (raw, json)
Hash identifier: vcqcKG/pJghFOXHEZOYloWFmjyiyuIgVzA8DHZL8IFg=
Subject key identifier: DA:AA:AD:1E:80:25:D0:06:A6:DB:69:65:F7:BE:75:18:69:E8:8D:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CA7492107E11F088E89C69762E951A.roa
Signing time: Thu 03 Apr 2025 11:25:29 +0000
ROA not before: Thu 03 Apr 2025 11:25:24 +0000
ROA not after: Thu 10 Jul 2025 11:25:24 +0000
asID: 20473
IP address blocks: 45.194.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84432 (0x149d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 11:25:24 2025 GMT
Not After : Jul 10 11:25:24 2025 GMT
Subject: CN=67ee7029-cb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:6d:7a:83:a3:14:b0:91:ed:a1:d5:3b:14:
9d:7e:09:12:95:01:eb:eb:5a:bb:ba:09:f2:8e:4e:
d3:03:af:12:5e:95:60:b0:ac:9a:4c:23:8b:6e:2d:
a8:32:af:02:87:69:0a:a0:86:30:a7:d0:b7:cc:f7:
c2:a7:ee:a1:38:a3:85:55:91:34:0f:af:69:a5:91:
ce:e5:9c:34:68:bb:16:af:af:eb:4a:2d:22:23:65:
38:33:4f:4f:14:39:1f:4e:10:af:5e:2b:99:86:39:
0d:89:0b:ee:5b:2b:f1:29:fc:97:f9:1f:b6:03:5e:
ec:80:35:2f:d2:d8:3e:b8:f4:be:5e:35:42:20:18:
8e:b8:ed:42:33:dc:20:47:42:00:f3:26:1e:23:1a:
40:34:4f:49:98:ce:cf:54:67:39:f9:aa:1c:9c:af:
57:24:14:69:cc:c3:56:48:a6:95:e9:00:62:f7:1b:
fd:fd:09:d1:ba:9c:59:8a:45:51:55:80:0e:15:2e:
07:5b:90:25:c9:27:de:f1:41:8c:40:95:45:ac:fa:
aa:7c:f3:55:aa:69:d5:55:95:3e:62:2c:54:94:a0:
c6:61:15:88:71:c5:97:25:4c:3a:a5:75:ee:cc:a9:
16:4a:38:37:b3:e1:4d:ee:69:0b:e7:ff:30:cb:a5:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:AD:1E:80:25:D0:06:A6:DB:69:65:F7:BE:75:18:69:E8:8D:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CA7492107E11F088E89C69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:68:3d:d2:9a:59:58:f8:bd:00:a4:ce:a6:ec:3f:0f:ac:
1b:bb:e8:3b:9a:7f:0d:1e:b4:58:51:73:59:9b:58:e6:32:db:
60:df:b7:71:0a:80:15:8b:24:cb:de:cb:f4:a6:51:93:0a:73:
c2:5a:ae:58:5e:9b:66:87:ed:a8:61:99:ee:6a:dc:49:eb:ce:
be:fc:25:42:c0:81:e2:4c:d1:65:38:cc:6c:a6:47:c5:51:83:
60:c2:6c:c3:a3:e8:2f:5f:43:44:56:58:d9:43:93:20:fc:34:
b7:7e:dd:0f:d8:ab:ba:18:35:0a:c5:d0:4f:0d:cd:81:96:cd:
dc:c8:41:be:7f:aa:b6:97:1b:b7:b8:85:fb:dd:ff:64:41:a8:
d4:43:4e:7d:74:db:a0:62:82:56:e3:7f:85:ea:cb:38:c9:26:
c6:1b:d8:ba:2b:4c:25:c7:78:25:a0:fa:53:3b:ed:07:e4:cb:
d1:e4:86:1f:ff:be:2a:1a:37:e3:9d:0d:91:37:9b:68:be:0f:
b5:4e:20:88:71:fc:69:98:19:9e:63:f2:7f:63:68:b1:bc:9b:
1c:45:96:4d:6f:49:42:b4:b7:a0:7d:ab:cd:6f:ee:34:3b:15:
75:d2:45:06:34:6d:60:85:59:ba:64:ac:57:14:65:d1:0e:94:
89:15:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:03 2025 by rpki-client on console.sobornost.net