Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646C93E2152011F09CC678016EB8BCC6.roa
File: 646C93E2152011F09CC678016EB8BCC6.roa (raw, json)
Hash identifier: 7p8ZOGQCcZGU4ZLxDxHUXd7d/t0x9qnapeeQrABCjDc=
Subject key identifier: A3:C6:BD:DA:8D:E5:E1:BC:47:66:99:FB:C2:D6:75:61:80:CB:21:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646C93E2152011F09CC678016EB8BCC6.roa
Signing time: Wed 09 Apr 2025 08:55:32 +0000
ROA not before: Wed 09 Apr 2025 08:55:28 +0000
ROA not after: Thu 15 May 2025 08:55:28 +0000
asID: 400046
IP address blocks: 45.195.64.0/24 maxlen: 24
45.195.65.0/24 maxlen: 24
45.195.66.0/24 maxlen: 24
45.195.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84790 (0x14b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 08:55:28 2025 GMT
Not After : May 15 08:55:28 2025 GMT
Subject: CN=67f63604-46ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:ec:6f:ae:c7:82:d4:01:bc:e9:58:d0:3c:
8a:b0:e0:74:b9:35:b7:1c:5b:d0:d4:08:32:9a:a2:
b8:ea:d0:df:66:89:aa:1f:4b:46:8c:31:7a:ba:0a:
5a:02:1d:24:74:2f:77:b6:63:07:bc:23:5d:6d:77:
9e:a4:72:3e:2b:69:04:a6:15:60:8c:90:db:07:b0:
a3:78:24:e7:46:ef:6a:35:92:d2:82:81:6b:39:a7:
76:d2:10:38:b1:26:24:76:b0:6e:e9:56:d5:23:fc:
9b:7b:9b:8f:93:3e:e6:9e:92:cd:cf:87:38:38:a8:
21:a5:9b:87:4b:76:72:aa:5b:c1:19:09:3c:e9:1c:
41:a4:95:f9:1d:ee:79:ab:6c:fe:27:03:ae:07:56:
44:2b:41:5e:1e:37:97:48:dd:c0:79:c2:47:56:80:
a8:76:ba:3c:6a:73:24:8e:8e:10:7d:6f:d3:f0:96:
0f:a4:26:b8:7d:13:a3:b4:b1:35:ef:5b:1c:69:24:
f4:61:96:92:d9:92:f1:56:7c:c5:56:56:c1:5e:50:
47:d0:ba:f1:f6:96:60:1c:63:2c:3c:14:cd:49:82:
ca:43:e1:22:a9:32:8c:39:64:13:b8:d4:da:e2:d2:
cb:38:c9:bb:90:cf:c4:fe:e0:f9:df:b1:77:3b:33:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:BD:DA:8D:E5:E1:BC:47:66:99:FB:C2:D6:75:61:80:CB:21:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646C93E2152011F09CC678016EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.64.0/22
Signature Algorithm: sha256WithRSAEncryption
06:1e:2c:b4:ef:28:f2:99:85:b4:26:eb:94:92:23:1a:b9:6e:
3f:d3:2c:89:18:6b:78:1b:61:04:7d:9e:67:f2:9d:b3:1a:bf:
8c:f0:da:d9:9d:e6:74:2b:78:38:17:9c:1f:15:ef:56:f9:46:
62:fd:c7:aa:c9:2f:27:8c:bd:9b:94:00:2e:33:1d:0f:53:8f:
c1:72:d6:4b:af:17:3c:a8:28:b6:0d:03:ab:c1:26:29:60:74:
b9:5c:7b:7a:13:af:da:24:58:d3:bb:34:db:cc:2c:03:7d:8d:
4a:d8:8a:12:ee:f3:37:95:98:87:1d:7d:a8:69:34:a3:bd:0b:
70:f7:49:44:1f:26:72:b8:8a:59:08:6f:e6:07:0b:e7:e7:7c:
71:08:dc:08:22:e9:d0:47:94:1b:17:da:0e:a0:c2:c8:8f:c3:
f4:a8:02:ce:76:ef:16:56:c0:45:0a:b5:0c:29:eb:5b:5d:28:
f9:48:5b:93:4b:c6:dd:c1:ab:7f:59:0f:f2:df:8b:39:fc:f8:
13:62:89:d2:3a:6c:72:b1:d5:7c:14:9e:3f:bb:30:c3:21:97:
c3:42:cd:d5:78:59:5e:3f:1f:4a:0a:3c:fc:62:f7:dc:6d:81:
fe:91:1b:5b:6b:b3:e1:eb:d5:8a:cb:10:61:0c:ef:d0:c7:92:
c9:e3:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:02 2025 by rpki-client on console.sobornost.net