Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67EE9FD2CDCD11EF8D6A844F762E951A.roa
File: 67EE9FD2CDCD11EF8D6A844F762E951A.roa (raw, json)
Hash identifier: dVjr518sumqkfd+my8AuGSOrJFAsyMryGCWKdIroxeY=
Subject key identifier: E2:8C:59:97:78:28:49:5A:B4:4A:48:DB:AE:30:B5:D0:B1:B7:18:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67EE9FD2CDCD11EF8D6A844F762E951A.roa
Signing time: Wed 08 Jan 2025 14:32:37 +0000
ROA not before: Wed 08 Jan 2025 14:32:33 +0000
ROA not after: Mon 03 Jan 2028 14:32:33 +0000
asID: 17561
IP address blocks: 45.195.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66030 (0x101ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 14:32:33 2025 GMT
Not After : Jan 3 14:32:33 2028 GMT
Subject: CN=677e8c85-8ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:0c:78:b4:0e:ef:7a:82:d2:65:67:e2:2b:
35:e1:6c:ee:bf:96:5a:86:b8:07:91:1a:63:b1:5a:
0b:20:65:77:d6:63:a8:d2:77:85:49:95:8d:01:7e:
e4:03:23:d4:e6:ef:75:39:c0:a3:0f:11:ad:86:23:
ed:73:08:1a:29:e5:f2:e2:45:c5:89:23:90:da:be:
e8:e0:0e:1b:1c:83:b3:10:27:28:e5:b5:ad:4c:52:
6e:5f:64:7f:be:94:1a:b0:90:95:61:20:3d:8c:ee:
be:24:b4:fe:b7:1b:7a:71:04:61:91:88:6d:77:d3:
0d:da:92:af:0b:58:f7:e0:1e:be:78:a1:3e:f2:3c:
a3:fc:6f:d9:c4:0d:1a:63:35:b6:bf:72:f7:5e:11:
10:27:26:cc:f3:e8:08:2f:69:9b:9c:5e:74:be:79:
4f:7d:9d:95:89:4c:9f:76:7b:6c:82:13:ea:57:0d:
c2:75:15:a9:db:e6:c5:aa:9f:41:e6:03:30:a4:ef:
4e:46:70:b5:39:3b:89:e4:0e:ee:1d:7a:ea:5f:f1:
04:30:f5:73:d4:ac:b1:64:ad:eb:85:4d:73:7b:1c:
8c:b7:05:79:7d:90:a2:dc:4a:47:5a:73:79:cf:2c:
e9:84:46:46:e1:16:d1:ed:f1:b8:cc:a1:98:45:62:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:59:97:78:28:49:5A:B4:4A:48:DB:AE:30:B5:D0:B1:B7:18:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67EE9FD2CDCD11EF8D6A844F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:25:d7:6c:e3:64:98:92:39:b0:7e:5f:83:ce:08:3c:5c:08:
9b:29:02:60:de:78:37:a1:ea:bd:9a:7d:08:66:dd:70:d6:36:
d1:bd:e6:1e:81:25:09:fb:1f:ae:05:ca:93:f6:06:3d:87:95:
ee:d0:c2:79:22:78:c1:d0:29:54:3f:a8:1d:6d:6e:a9:31:3f:
0d:af:f5:27:ba:ea:9e:d5:44:21:80:93:f2:ca:3b:52:56:a3:
45:ff:b1:a7:9c:24:55:64:70:be:d8:b7:df:a7:9e:70:f9:89:
5a:19:9d:15:a8:eb:36:56:60:dc:57:ed:e4:00:2b:c6:38:6a:
ee:d3:a7:28:cf:28:08:ba:e3:76:34:ff:10:67:04:02:03:e1:
31:36:a1:ee:4e:b8:08:79:d5:ce:8f:b4:4f:7a:5d:db:ac:8f:
a9:f1:31:5c:57:3e:c7:4c:9c:a1:ab:dc:f7:3d:0a:1c:5d:31:
7b:07:6e:c9:a5:5e:ee:e7:9f:08:27:3d:30:61:e8:93:6d:5b:
04:04:3c:e9:86:99:10:21:5e:9f:fe:16:0f:1a:a6:c5:d1:97:
52:a5:c4:f1:26:3b:68:3b:95:9d:84:78:37:3e:2d:c9:b4:e6:
b4:e6:d5:ad:70:b4:06:db:a1:17:a8:12:c9:56:0c:18:3d:25:
12:f6:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:11 2025 by rpki-client on console.sobornost.net