Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7F9D7A1C7111F08ACAFCB9DAE4EC9C.roa
File: 7F7F9D7A1C7111F08ACAFCB9DAE4EC9C.roa (raw, json)
Hash identifier: MWYE92qxFTaCyXcl5yHSzQ0l8Csn/UiJuoBrG7198Sk=
Subject key identifier: 4A:3C:10:2B:40:61:01:4B:C8:8A:82:24:06:A0:D0:3C:FA:D8:B8:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7F9D7A1C7111F08ACAFCB9DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 16:23:45 +0000
ROA not before: Fri 18 Apr 2025 16:23:40 +0000
ROA not after: Tue 27 May 2025 16:23:40 +0000
asID: 202656
IP address blocks: 45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85291 (0x14d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 16:23:40 2025 GMT
Not After : May 27 16:23:40 2025 GMT
Subject: CN=68027c91-6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:43:36:a2:2e:d1:ce:86:02:29:d8:53:31:
db:22:fd:18:28:cb:e8:17:f5:73:09:d4:ee:44:3c:
56:9c:06:53:0a:fe:e4:ca:15:bf:45:d3:8c:cd:48:
47:e1:d9:d3:8f:1a:49:fc:f7:5d:7f:d6:11:a7:e6:
b4:47:80:8e:a6:e3:cb:3f:33:10:95:6a:6a:54:00:
7b:5f:b4:a7:76:d4:a1:75:55:96:37:2f:62:17:8e:
db:63:3d:c1:cf:47:ba:2a:32:e6:d7:a8:24:aa:8f:
52:2e:fa:05:b7:9f:a7:a6:1c:7d:2c:8d:fe:74:01:
cb:b5:ed:af:a2:4b:31:42:45:87:d7:02:07:8f:79:
d2:5c:00:9a:7c:64:9d:24:37:b9:ce:25:3e:24:d4:
cf:75:5a:7d:bc:2f:82:40:1e:d1:dc:11:58:01:69:
e4:22:b7:f3:7c:4a:25:8a:1e:dc:15:6f:a5:f0:cc:
30:05:09:c1:26:14:1a:90:c2:21:0b:10:6a:da:7a:
25:51:d6:8f:e9:3e:c2:ab:e8:09:be:02:14:10:11:
ad:b7:bf:f1:14:00:b9:2d:72:9e:a2:c9:5d:92:cf:
81:32:ff:9e:69:07:32:28:65:3f:69:c9:c3:ec:85:
02:aa:93:da:9b:74:bd:ba:67:fb:e5:70:a7:64:6c:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:10:2B:40:61:01:4B:C8:8A:82:24:06:A0:D0:3C:FA:D8:B8:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7F9D7A1C7111F08ACAFCB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.162.0/23
45.199.225.0-45.199.230.255
45.199.241.0-45.199.247.255
45.199.249.0-45.199.251.255
45.199.253.0/24
45.200.175.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d6:b1:07:95:3d:8f:e9:87:d7:41:fb:b2:c4:ab:86:f6:04:
9c:ad:8c:9b:14:bb:d7:4a:2e:c2:55:17:06:02:b9:31:8d:16:
9b:67:f8:d5:c2:a0:26:ba:f9:61:58:f9:41:5d:bf:a8:38:b5:
24:97:b3:3c:ac:fe:af:9f:d4:46:ef:8b:57:47:51:3a:0e:cf:
ec:29:04:5c:74:55:a2:83:09:7e:84:b8:6d:b2:96:d2:52:f8:
bf:38:55:3c:dc:59:1d:e8:b4:b9:18:be:0e:1e:05:f7:b1:16:
b4:f1:98:e8:f0:06:ce:4f:b1:1e:84:50:c1:31:69:ed:4a:97:
53:11:91:a8:a2:e4:44:94:6b:e1:e8:41:93:b4:09:11:ca:6d:
c4:34:e1:3e:64:9f:35:51:4e:8e:09:15:20:b5:52:04:c8:4f:
04:11:6f:87:02:b9:29:35:66:9a:5a:3a:9a:8d:8b:b7:63:25:
63:3c:55:cf:26:4e:17:2e:a9:f3:63:77:ab:1f:b8:5e:85:30:
2a:03:5b:7c:fe:9a:e2:3e:b2:b1:19:0e:9b:c7:04:94:f6:3c:
90:6d:42:68:b1:d0:a4:5d:7d:31:45:50:95:d7:dd:e5:da:26:
70:67:54:1a:df:3d:b5:8e:f1:ec:07:c5:61:7e:43:2b:bf:3a:
4f:67:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:29 2025 by rpki-client on console.sobornost.net