Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4D2E415ED11F0A8E577D96DB8BCC6.roa
File: 7CF4D2E415ED11F0A8E577D96DB8BCC6.roa (raw, json)
Hash identifier: lEFBy0HDykRfPo8DFfLeAI7sHhX/b1vzlex081vPYKY=
Subject key identifier: 90:28:59:8C:88:A1:62:9C:CC:94:F2:5A:A7:6E:3E:61:33:D7:D8:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4D2E415ED11F0A8E577D96DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:23:40 +0000
ROA not before: Thu 10 Apr 2025 09:23:36 +0000
ROA not after: Fri 16 May 2025 09:23:36 +0000
asID: 54600
IP address blocks: 45.205.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84842 (0x14b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 09:23:36 2025 GMT
Not After : May 16 09:23:36 2025 GMT
Subject: CN=67f78e1c-127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:36:86:cb:d7:b2:4d:b1:46:92:16:a2:2d:
b2:6f:96:c3:ef:8d:c6:3a:1c:00:b8:e3:17:02:f2:
c4:0d:b4:fd:04:96:f6:49:14:b2:22:d3:b3:54:c0:
4a:c4:23:ce:4a:e2:c8:49:16:eb:20:6d:e1:3f:86:
97:35:09:76:60:23:4d:b5:62:49:3b:b2:c5:33:ce:
21:0d:5b:63:1e:44:99:11:f8:9e:19:3b:ca:a7:42:
51:90:44:d3:bf:d3:32:c0:11:12:af:ed:3f:06:ab:
30:c6:f8:83:b3:0f:44:55:0d:e9:27:1c:45:8d:1f:
7f:38:46:4c:9d:be:7a:df:52:65:a9:ce:9b:26:fa:
9d:3f:fe:34:01:51:cf:87:15:dc:44:17:21:76:09:
65:9f:a6:30:43:c8:ef:4a:79:b4:74:e0:17:ed:f0:
3d:75:28:8e:af:20:65:68:e4:d4:5b:de:bc:db:2f:
0f:05:23:92:5a:d1:ad:ab:23:fb:6a:e4:d0:00:6f:
e0:c9:0b:21:06:ed:91:82:d3:4d:bd:3d:a2:80:36:
d6:c4:1d:b6:09:89:3f:e1:65:5e:37:08:c2:77:e4:
d8:dc:eb:a8:2f:91:27:50:51:58:52:af:e5:cd:1f:
62:3b:86:51:c4:f9:c7:91:ef:3a:00:56:81:70:91:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:59:8C:88:A1:62:9C:CC:94:F2:5A:A7:6E:3E:61:33:D7:D8:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4D2E415ED11F0A8E577D96DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:6a:92:43:30:8c:79:db:36:41:46:3d:71:fc:12:83:e4:a8:
60:f5:63:73:3b:5e:f6:21:c7:4d:30:eb:6f:08:d1:35:75:27:
22:ac:aa:95:03:88:ec:6c:4b:4f:35:e2:4c:6f:38:00:cc:06:
6a:73:2f:cc:b8:d4:00:b0:69:69:7b:fa:71:33:20:6d:66:73:
99:8b:30:3f:cb:96:41:14:2a:d9:5f:e9:60:cb:cf:40:a7:91:
2d:b2:9b:96:3b:65:0d:5f:57:26:06:10:15:19:51:86:96:3b:
dd:95:b8:0f:b2:77:a8:b0:69:ac:24:66:6b:cb:b9:df:da:39:
25:63:02:22:58:c7:04:dd:2d:2d:ac:7a:b7:54:8a:cd:13:1d:
c7:4f:6e:22:dc:29:a4:26:a5:d0:38:cb:90:ba:10:55:9a:5c:
28:65:27:56:14:e1:58:c1:f4:84:21:c3:d1:b1:7e:07:5f:cd:
97:5c:fb:4c:74:7c:b2:d2:c8:67:83:26:65:31:4f:db:3f:f5:
64:47:d4:41:97:5b:7a:ed:08:c4:eb:88:66:32:f7:a4:9a:9b:
a8:15:0a:8b:38:c0:1e:2a:75:93:ab:4d:33:3b:f3:05:47:4c:
5d:91:da:09:a7:6c:a6:97:e9:2c:c2:a4:f2:6f:f8:88:2f:6f:
d3:3b:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:52 2025 by rpki-client on console.sobornost.net