Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A796A2C1CFE11F0A76CC4F1DAE4EC9C.roa
File: 6A796A2C1CFE11F0A76CC4F1DAE4EC9C.roa (raw, json)
Hash identifier: d9bldIwyCLQRYZMhHDECvWnp22DY7P/4kaphk5mIHbY=
Subject key identifier: 89:F8:0A:C0:C9:B4:0F:03:7F:AC:E6:B0:20:05:4C:5E:67:69:26:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A796A2C1CFE11F0A76CC4F1DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:12:29 +0000
ROA not before: Sat 19 Apr 2025 09:12:24 +0000
ROA not after: Fri 30 May 2025 09:12:24 +0000
asID: 398993
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85382 (0x14d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 09:12:24 2025 GMT
Not After : May 30 09:12:24 2025 GMT
Subject: CN=680368fc-047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:71:25:2e:0c:b8:f6:26:83:6c:71:06:5b:
4e:12:77:74:a7:7b:16:18:1c:58:05:48:67:ae:6a:
56:5f:1d:2b:9b:94:13:10:0a:78:88:7f:79:4b:43:
ab:8f:53:fa:8d:ab:85:7f:4b:7b:05:bf:af:8d:ed:
3b:bb:24:3f:d5:ea:65:19:2d:cc:f2:9c:b1:d7:32:
52:4d:1a:eb:81:4d:68:81:32:98:08:e9:5c:cf:d3:
d8:02:79:00:5a:b1:29:a8:02:00:fb:8f:51:6c:8c:
eb:1a:39:4b:61:80:4c:f8:1d:c1:2d:01:d7:e2:ce:
9b:49:2e:a1:79:a1:7e:6f:94:f9:36:99:3c:42:22:
bd:2e:c1:9b:54:eb:e1:53:4a:eb:3d:70:3d:4c:c2:
ec:ad:9d:84:f9:3e:d0:75:91:dc:0a:5f:21:37:5f:
53:ba:ed:49:32:a1:2f:76:a0:c9:0d:46:f9:f9:81:
5d:00:0f:01:7f:05:22:70:61:b6:7b:c7:61:d3:c0:
45:95:20:8d:cc:45:1b:44:b0:cc:5c:5d:92:6e:e9:
64:52:bc:47:cd:26:d6:d0:e9:e7:34:8c:f1:15:cf:
03:54:9d:06:63:ee:89:57:3f:10:f3:d9:1c:c5:f4:
92:59:51:af:fd:74:79:b0:1e:e0:1f:a3:88:85:5b:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:0A:C0:C9:B4:0F:03:7F:AC:E6:B0:20:05:4C:5E:67:69:26:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A796A2C1CFE11F0A76CC4F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
89:52:60:67:49:8b:58:14:10:c7:0d:2e:ea:d6:83:36:53:e6:
ba:e6:d9:ba:0e:95:86:33:71:53:98:2c:0e:8f:2b:f5:be:50:
6a:0d:fc:b4:9b:88:c9:56:d6:5b:59:6f:5f:00:08:53:5c:22:
1a:fa:4d:ef:94:b9:f0:30:ed:2a:f5:70:b3:00:8b:6c:cf:7f:
05:60:57:ee:88:0c:e4:db:ae:5f:6c:25:35:5d:58:c5:58:b2:
bf:17:49:1b:15:6a:36:c1:fa:e6:00:2b:c8:66:13:a9:da:29:
7a:91:41:cb:41:b5:23:ba:e8:d3:04:ee:bc:5e:37:42:f5:b9:
bb:5b:aa:d9:51:48:76:c4:70:58:88:eb:d9:7f:a7:12:1c:10:
83:b4:c8:10:63:e0:09:2a:85:a7:f3:05:20:70:2b:d0:54:4f:
66:61:13:03:ad:30:4d:e5:ad:da:02:f6:50:58:7d:5b:1f:b1:
a9:d4:85:66:4e:cf:e0:a6:b5:48:cb:11:b6:c8:75:9f:b9:60:
78:a1:e2:03:94:e8:3a:6e:74:e1:87:3e:3f:6e:6a:08:30:30:
58:17:0a:80:1d:d8:df:5b:cf:19:91:3c:b3:f6:6e:cb:dc:e2:
8b:54:6a:cc:e6:5b:29:f3:13:ba:8f:a3:46:9a:6a:4d:4c:ed:
8f:20:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:54:54 2025 by rpki-client on console.sobornost.net