Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634EEDFC152511F093F6F3206EB8BCC6.roa
File: 634EEDFC152511F093F6F3206EB8BCC6.roa (raw, json)
Hash identifier: p3gvpYqGVPHB7ArnN1O+g23VtYPHK1yeJ5kJ/hXV2b4=
Subject key identifier: 33:E6:56:BC:68:31:B5:9D:E7:9D:E2:DB:81:68:91:0E:9A:39:1E:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634EEDFC152511F093F6F3206EB8BCC6.roa
Signing time: Wed 09 Apr 2025 09:31:18 +0000
ROA not before: Wed 09 Apr 2025 09:31:13 +0000
ROA not after: Fri 16 May 2025 09:31:13 +0000
asID: 202736
IP address blocks: 45.192.113.0/24 maxlen: 24
45.192.114.0/24 maxlen: 24
45.192.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84796 (0x14b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:31:13 2025 GMT
Not After : May 16 09:31:13 2025 GMT
Subject: CN=67f63e66-b421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:9a:af:3a:7f:77:bc:81:c2:05:05:57:45:
0a:ff:20:93:6e:8b:b5:5c:e9:8c:01:1e:27:14:2d:
ea:3b:81:34:1c:7a:ab:55:c0:17:8f:be:f1:36:ab:
2b:a0:85:8b:38:be:e4:6c:2e:37:9e:e0:bd:71:8f:
c0:9c:ed:9d:a0:b1:57:a3:f4:24:cf:a8:00:18:08:
06:8e:2a:23:f4:6a:c3:6a:58:d0:96:7e:14:d7:5b:
50:5f:9a:3f:0a:9f:07:09:72:0b:89:a7:bc:68:9b:
0e:f1:d1:49:c8:59:e8:8c:80:f3:88:d0:91:0e:b4:
69:b2:13:48:50:f0:6a:9f:6a:fd:ec:7e:40:77:29:
26:f8:bb:05:92:db:41:2e:96:57:66:8f:8a:7c:1c:
45:3d:53:77:4d:12:2e:35:e2:6d:f0:e3:38:32:25:
85:9c:d1:6a:8e:2f:94:6d:08:42:d2:40:1b:b5:64:
19:f0:ec:05:da:b8:1a:71:91:18:bd:a6:ab:88:f6:
0b:bd:49:ae:78:c9:0b:f7:fc:e9:bd:9c:33:32:37:
21:f6:12:ca:5d:ee:d0:db:23:7d:0a:dd:9b:b4:e2:
e4:76:6b:96:4b:76:7a:f3:d1:ab:9d:59:03:02:a0:
d7:2d:fa:a9:61:ad:b4:cb:9e:38:e2:ea:6a:13:a5:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:56:BC:68:31:B5:9D:E7:9D:E2:DB:81:68:91:0E:9A:39:1E:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634EEDFC152511F093F6F3206EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0-45.192.114.255
45.192.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:2d:58:6a:99:bd:7c:3d:98:7c:35:5d:fd:c2:65:0a:bf:27:
23:17:16:1f:26:2f:49:ae:c4:28:87:5c:ec:d0:1c:45:80:92:
77:65:60:59:e1:22:f4:82:15:2f:e1:42:d3:5e:39:b5:79:ab:
aa:43:8a:8d:dd:0f:4e:af:6d:44:9d:c8:13:4d:4a:70:84:ea:
0d:36:30:10:fe:ab:81:1a:65:a7:30:0b:93:32:0f:f4:88:de:
6e:31:72:cc:97:71:b2:b9:4f:93:23:47:da:e0:8e:9e:15:90:
00:b7:b7:a7:68:92:c1:63:fd:c3:2e:91:37:3c:20:09:f2:0a:
a9:bd:eb:d4:8f:d7:ee:61:0f:eb:8f:a8:3f:e5:e7:61:a6:54:
dc:16:ef:c9:cf:fa:53:f7:7f:c2:e0:16:fa:30:4c:43:ce:49:
bc:c0:13:82:b6:64:78:b1:19:50:bd:8f:88:a3:07:fc:6e:9f:
0d:92:ff:50:a4:62:c9:f5:be:d9:dc:95:89:12:f2:fd:03:2b:
61:97:a6:85:18:ea:d6:15:ba:c2:ba:ab:aa:4e:ea:0e:9d:e6:
de:30:56:40:b7:c9:98:6e:84:53:a4:cb:41:db:63:dc:32:9a:
37:45:6a:f7:a2:17:71:c9:3c:43:36:b5:02:81:c3:0c:65:ef:
75:7e:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:28:18 2025 by rpki-client on console.sobornost.net