Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7701F15A1DCC11F08FEB96D2DAE4EC9C.roa
File: 7701F15A1DCC11F08FEB96D2DAE4EC9C.roa (raw, json)
Hash identifier: ivKoq8muy3S4jJpTR47TiLrzF3hA9dNSFwDFIHn8RC0=
Subject key identifier: C7:9A:EE:5D:36:6C:14:AD:DF:4F:9E:A4:33:E7:7A:7C:08:A6:12:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7701F15A1DCC11F08FEB96D2DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 09:47:26 +0000
ROA not before: Sun 20 Apr 2025 09:47:19 +0000
ROA not after: Sun 18 May 2025 09:47:19 +0000
asID: 213248
IP address blocks: 45.192.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85399 (0x14d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 09:47:19 2025 GMT
Not After : May 18 09:47:19 2025 GMT
Subject: CN=6804c2ae-f2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:37:23:4d:6d:ff:7f:d7:c7:ad:24:d8:15:
05:fc:94:09:fa:f4:92:60:e3:0b:4f:51:0a:32:2e:
6d:57:d0:28:19:3a:e2:67:fc:c7:64:a7:8b:1d:a6:
4c:dc:c1:41:c7:fe:4f:cb:1c:fc:e1:80:7a:10:fc:
47:e3:16:c8:d7:88:9c:30:3d:1c:b3:11:b4:47:a4:
0f:e8:dd:c2:f6:14:58:d1:fc:0c:96:c7:21:bf:51:
68:c0:be:24:28:2a:1e:89:75:14:57:44:8d:43:b7:
d9:09:29:33:5d:ac:de:8c:a5:3f:06:d5:31:51:d6:
bb:ce:dc:ea:d5:fe:b8:85:66:af:c3:dd:94:0e:7d:
63:cd:16:e4:83:41:5b:85:3a:6d:83:88:f5:05:ac:
ce:ca:2e:92:1b:ac:d8:f8:a5:c4:be:7d:ac:76:66:
29:f5:6e:29:27:b0:b1:de:18:b2:31:0c:b9:fa:06:
a0:7e:ec:98:bb:04:4d:89:ac:59:84:80:10:72:2b:
3c:19:0f:35:33:86:4e:5c:34:41:58:89:2b:77:b0:
9b:8b:03:b8:40:40:c7:78:f4:b8:32:b9:e3:00:3d:
f3:b2:98:6c:0e:cb:a5:75:04:14:a2:d9:36:16:ed:
b3:e5:51:5c:82:9a:aa:40:24:ff:53:98:94:82:fb:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:EE:5D:36:6C:14:AD:DF:4F:9E:A4:33:E7:7A:7C:08:A6:12:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7701F15A1DCC11F08FEB96D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cd:d3:d4:a7:c5:be:cb:d8:82:b0:8b:76:e3:33:82:78:1a:
ef:2c:bb:67:d5:4f:03:12:48:4e:ed:ff:18:56:e6:22:c8:4f:
8f:c6:58:75:5e:04:c0:5b:50:1b:e1:41:4c:1b:07:a0:08:ac:
62:60:a6:5b:9b:f7:7a:39:31:6c:d5:a5:80:5f:79:e6:c4:24:
d9:49:e9:ce:af:f3:af:a3:e1:0f:61:62:f0:6a:0f:2d:a6:0f:
ad:9c:ac:e5:92:09:bf:f0:9f:f8:83:b6:c7:65:82:65:81:5c:
78:e6:85:58:8d:96:2d:70:18:f0:30:b7:fd:d5:cf:bd:b7:2a:
c2:43:1b:a3:df:55:c1:2f:04:ac:1b:fd:eb:33:eb:cf:58:e3:
50:37:5b:4a:75:e9:82:b5:38:ab:08:f8:3c:b2:75:e0:02:a7:
41:cb:e9:cf:57:3f:50:49:e5:fe:b0:a5:62:c9:45:71:ce:cf:
d6:54:4a:34:5b:5d:dc:ad:37:bd:83:81:c5:75:aa:24:cd:7e:
f3:13:9a:05:41:32:e3:5a:51:12:d5:6e:04:7d:07:71:b0:c5:
82:4d:94:77:e6:82:9e:c7:78:05:e3:5f:dc:f6:7a:31:62:8a:
f0:0b:1f:44:18:03:7d:76:cb:5d:33:92:d3:af:27:eb:e0:b4:
33:91:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:27 2025 by rpki-client on console.sobornost.net