Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C28C79613B611F0A510015D762E951A.roa
File: 7C28C79613B611F0A510015D762E951A.roa (raw, json)
Hash identifier: UB8jyhMKH8mfClevTedj2ftCUAFNCJOo1VSmShmsFkM=
Subject key identifier: FF:5A:F3:F9:F6:2D:E9:30:6D:D2:5A:4F:1D:12:3E:F3:C4:0C:23:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C28C79613B611F0A510015D762E951A.roa
Signing time: Mon 07 Apr 2025 13:44:54 +0000
ROA not before: Mon 07 Apr 2025 13:44:49 +0000
ROA not after: Sun 04 May 2025 13:44:49 +0000
asID: 60223
IP address blocks: 45.196.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84590 (0x14a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 13:44:49 2025 GMT
Not After : May 4 13:44:49 2025 GMT
Subject: CN=67f3d6d6-93a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:1d:b2:79:ef:32:1c:71:b7:4d:9a:a4:51:
0f:e9:c6:98:5a:c4:c4:18:b5:ad:11:7f:38:00:c7:
4a:17:d5:db:66:c6:d8:79:c5:b4:43:d9:63:b9:e0:
0a:04:fa:24:c2:2d:84:a1:8f:be:17:7d:9d:79:29:
67:b3:73:cf:24:95:61:75:23:44:f1:d9:b3:59:36:
18:52:8e:b1:4f:34:c0:b4:32:5b:40:b9:6b:d3:4e:
66:5d:df:bd:31:63:fb:ba:ce:99:af:d6:ad:dd:71:
bf:1d:c1:c5:86:27:56:ea:61:ac:39:c9:18:7c:8b:
cc:1b:69:c9:f4:1d:f1:f0:38:76:a8:29:c8:8d:8f:
88:b2:4d:8d:5b:f4:5e:d1:62:9a:f9:cf:2f:b1:09:
8f:2f:6a:88:47:4a:31:49:76:2a:0c:0f:78:8b:3b:
55:ca:bd:28:0b:e2:68:7c:d4:73:49:c3:a4:2d:c6:
61:4d:86:b8:63:7c:96:22:35:2a:f3:3f:8b:97:4a:
07:c0:54:e4:41:05:df:f7:02:e5:6e:86:d3:cb:cb:
57:67:c1:31:72:6d:e7:2d:91:b2:39:9e:52:a2:1a:
14:c1:56:51:89:c7:cc:4a:57:47:52:bd:b1:f2:1e:
26:21:8c:ef:a3:d3:2d:b7:03:68:26:17:4d:62:95:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:F3:F9:F6:2D:E9:30:6D:D2:5A:4F:1D:12:3E:F3:C4:0C:23:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C28C79613B611F0A510015D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2f:0d:95:99:10:4e:93:21:12:a8:91:a4:11:a5:3f:92:d5:
f8:9d:a1:1f:20:e5:5e:61:e7:b8:15:8a:4d:04:20:9d:bc:e2:
2f:b7:66:a5:fa:f4:7b:12:3b:e1:71:d7:97:32:01:49:10:1f:
15:ec:a4:f8:7d:7d:93:1c:1b:30:84:aa:17:39:3d:0c:5b:e6:
c7:c6:e5:90:98:47:29:39:34:11:f1:4a:f0:bd:ce:63:c5:27:
42:52:a6:b0:20:32:30:16:8b:c7:5b:54:6d:31:c6:96:07:f3:
90:f6:ef:9b:78:e0:99:c3:31:27:45:aa:e0:24:84:5a:66:32:
37:16:d6:6c:25:86:1b:15:d8:c4:19:7a:a3:71:da:69:88:35:
86:e3:f2:4a:c3:38:df:14:dc:55:7f:51:ee:72:d1:0f:48:cd:
df:c8:3a:55:0f:dc:12:ed:dc:a4:92:f8:23:ea:f8:fc:97:62:
64:ec:1a:6a:40:28:88:ec:f2:ea:79:30:ac:ee:eb:8f:b8:20:
1e:30:8f:36:3e:0e:2b:c3:b5:72:0a:a2:66:09:78:96:cb:67:
3f:8a:e5:c4:65:82:f3:2b:89:cc:10:e2:24:0d:ac:16:31:15:
d9:2f:8d:f4:4d:ae:6e:52:5a:bd:87:20:d1:f0:3e:12:7f:46:
b1:a5:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:58 2025 by rpki-client on console.sobornost.net