Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7135BC941AC411F0A84CF1B36DB8BCC6.roa
File: 7135BC941AC411F0A84CF1B36DB8BCC6.roa (raw, json)
Hash identifier: AHg0Bnt+YGrSz4NZhgELXg3SWUPBmJH/p6I6F/21PTM=
Subject key identifier: 3E:24:CB:91:C8:E8:A8:62:BD:F0:8E:9B:F4:C0:87:63:25:A5:FE:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7135BC941AC411F0A84CF1B36DB8BCC6.roa
Signing time: Wed 16 Apr 2025 13:12:27 +0000
ROA not before: Wed 16 Apr 2025 13:12:21 +0000
ROA not after: Thu 01 May 2025 13:12:21 +0000
asID: 44559
IP address blocks: 45.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85182 (0x14cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 13:12:21 2025 GMT
Not After : May 1 13:12:21 2025 GMT
Subject: CN=67ffacbb-ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:35:8b:61:44:4a:1b:f0:e4:88:72:e8:71:
41:8e:e6:e4:53:2d:9c:67:6a:68:78:82:0a:9a:e3:
ba:f1:ae:5c:0b:03:a8:bd:5a:e6:3d:cf:51:7c:64:
8c:eb:5e:6d:12:1f:a1:9f:87:90:13:af:69:21:ae:
76:8c:0d:6f:ba:43:d7:fb:7a:9e:dd:37:d0:45:41:
8e:f6:8c:55:c7:5e:4e:90:38:91:3a:f1:ab:08:ee:
4f:b1:a9:d3:c0:2d:10:5d:ac:f9:01:69:6a:b5:74:
71:9f:07:dc:13:e4:0c:80:23:57:39:97:e4:a5:71:
54:cc:06:db:d5:13:39:b9:2f:44:68:ea:41:f2:67:
98:cd:bb:ff:d8:e7:5c:87:a5:ea:6f:a7:59:7f:89:
0c:c3:af:7d:b1:0b:61:e7:77:ab:bd:25:9e:41:90:
c3:3b:7c:19:fb:0e:6e:8c:0b:18:2c:3d:6c:d9:b4:
2b:a1:bf:8e:40:2c:32:95:a4:3d:7d:ae:45:69:1f:
c6:cd:15:0e:fe:51:c2:88:f4:86:96:55:88:73:b9:
7d:74:17:6f:b3:f3:50:77:83:b1:9c:f5:a8:5e:bf:
c9:45:9e:32:7e:46:2b:b9:1f:a6:30:f1:46:bc:5a:
3c:9f:bd:42:c7:e8:b3:71:d3:d9:84:0c:a5:bd:ba:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:CB:91:C8:E8:A8:62:BD:F0:8E:9B:F4:C0:87:63:25:A5:FE:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7135BC941AC411F0A84CF1B36DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bb:b6:18:5b:30:27:8c:0c:49:66:e9:52:13:63:3f:cb:39:
9b:60:87:6b:79:a9:9b:b0:0b:46:7c:a3:2c:b9:99:43:09:7f:
27:a7:91:4f:ec:06:e9:85:31:8c:14:89:a9:7f:30:6b:8b:81:
fc:35:f0:64:bf:62:91:8b:72:7a:13:aa:d1:f2:ec:22:62:78:
ca:af:4a:33:29:e5:d5:54:38:b3:d0:be:79:f2:96:d1:4c:23:
45:c1:e2:ed:c4:25:a6:77:3c:ca:d8:8b:72:5d:fb:01:9f:77:
fb:b7:13:64:44:56:6a:55:b9:d9:b8:4d:98:51:50:67:af:63:
33:07:71:6c:ea:a1:94:dd:a4:44:d8:66:a4:b6:65:b9:47:53:
66:ed:03:8b:5b:99:84:cc:ca:4a:cd:01:07:e7:4d:79:0d:fe:
05:9f:a4:87:d8:f5:5d:24:44:cc:c7:68:ed:aa:14:e2:93:da:
48:e6:1e:89:f4:e9:19:09:8a:91:9d:10:fe:f3:f0:62:1c:87:
0b:6e:10:ca:d7:09:60:57:6c:6b:70:ad:0f:78:1a:45:13:28:
7b:dd:4c:ad:ac:a6:d6:e7:76:b4:90:54:3d:04:63:6d:62:69:
60:1a:95:30:eb:f1:a5:be:6d:96:cd:e9:5c:9b:20:b8:e4:83:
cd:50:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:08:56 2025 by rpki-client on console.sobornost.net