Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E12803813F311F08D0E5C5C762E951A.roa
File: 6E12803813F311F08D0E5C5C762E951A.roa (raw, json)
Hash identifier: /yY/yWC/L6DZkKiTTHSk+po2gV8tVKhD3yOai/8x6Aw=
Subject key identifier: 16:8E:60:BC:6C:31:A8:F1:C4:DA:F3:9A:34:C4:8B:2C:39:8E:B5:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014ABA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E12803813F311F08D0E5C5C762E951A.roa
Signing time: Mon 07 Apr 2025 21:01:09 +0000
ROA not before: Mon 07 Apr 2025 21:01:05 +0000
ROA not after: Tue 10 Jun 2025 21:01:05 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84666 (0x14aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 21:01:05 2025 GMT
Not After : Jun 10 21:01:05 2025 GMT
Subject: CN=67f43d15-f6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:e7:83:27:f5:35:55:a1:4f:62:46:e2:11:
e6:44:fa:ea:9e:5c:17:1c:c5:61:cd:6d:a2:57:35:
5f:b8:39:01:54:03:b7:7b:c6:cc:13:c1:6f:2d:c0:
b3:09:2f:0d:f2:4d:cc:82:a3:28:97:7e:7c:82:8b:
58:5b:cf:61:44:41:3e:76:8c:3d:27:16:aa:ff:01:
88:63:e7:67:61:8b:20:29:1f:9a:11:e3:07:97:e9:
4d:89:d6:7b:10:b9:4b:71:2d:f5:4d:13:6c:23:49:
ac:05:73:ae:f3:82:11:82:ae:f9:b8:ae:ab:c1:b6:
35:cf:9c:b3:cd:5f:3c:2c:3a:c7:e2:25:1d:55:9c:
47:10:87:a5:e3:52:51:dd:35:a8:a7:4a:00:0b:ce:
e1:e2:0a:18:fe:60:0d:50:1b:7a:58:f3:f6:26:df:
c0:fb:11:a0:a4:96:db:1c:b5:c8:e6:43:d8:e5:62:
23:e3:82:23:ec:0d:e4:8a:f8:69:83:ab:c6:d6:cc:
4c:50:8d:e8:45:fb:82:cf:2c:44:4d:32:fa:d1:ef:
b5:54:ed:28:34:dc:b1:d7:e4:06:60:3d:59:10:46:
f8:09:0c:87:11:f9:c1:13:18:44:84:fa:7a:29:77:
3d:e9:fa:ef:a0:24:1e:19:67:49:53:5d:25:34:fa:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:60:BC:6C:31:A8:F1:C4:DA:F3:9A:34:C4:8B:2C:39:8E:B5:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E12803813F311F08D0E5C5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
07:20:21:1a:29:c3:1c:0c:a5:77:4f:6f:b8:e7:a7:f6:59:46:
05:d5:7b:f5:54:76:d6:00:8f:73:f5:cb:8b:09:18:f5:5b:8e:
18:3c:ea:85:37:db:5f:eb:b5:6d:b9:6d:8c:13:87:d7:74:0b:
98:59:a3:1e:a6:fe:ac:42:ae:41:30:48:5e:f7:03:d4:80:f5:
dd:11:81:b7:10:03:0d:3e:30:17:0c:a6:2e:cc:39:51:bb:21:
c5:88:ff:a0:80:db:13:21:64:91:8f:c9:6e:28:0a:1f:22:43:
2c:53:1d:97:dd:c7:08:a0:46:55:c7:07:f0:5f:1f:1e:10:85:
ad:fa:c0:d0:d3:dc:6a:0a:71:6b:9f:b7:0c:e9:2e:dd:ff:ec:
6b:92:1f:ae:7a:84:04:8d:56:f7:82:ef:15:87:e6:72:14:17:
d5:e0:47:08:f6:e1:3e:45:03:02:68:67:1a:29:d9:ac:aa:a1:
17:ce:48:ec:38:75:7e:ea:ec:4f:5b:53:8c:f7:af:4f:d1:21:
40:93:aa:27:db:18:cd:d1:ac:73:1c:98:06:5a:4d:de:96:ec:
ed:dc:a9:63:b9:48:22:e0:a6:95:4f:04:dd:12:0a:6e:dd:3e:
a7:20:36:d1:02:b0:bb:bd:9a:0b:4a:d3:d3:8c:78:28:0b:1b:
1c:22:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:54:57 2025 by rpki-client on console.sobornost.net