Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A443800201E11F0B14110D9DAE4EC9C.roa
File: 8A443800201E11F0B14110D9DAE4EC9C.roa (raw, json)
Hash identifier: j/ba80XAqPsLVR1LOoQWgakHnzA5HUq3C7YpNbVA6qM=
Subject key identifier: 5C:1E:E3:06:18:9C:C3:A0:DB:3B:7D:AE:F6:BB:85:92:D6:C5:64:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A443800201E11F0B14110D9DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:39:59 +0000
ROA not before: Wed 23 Apr 2025 08:39:55 +0000
ROA not after: Fri 15 May 2026 08:39:55 +0000
asID: 28458
IP address blocks: 45.195.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85558 (0x14e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 08:39:55 2025 GMT
Not After : May 15 08:39:55 2026 GMT
Subject: CN=6808a75f-5ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:4d:cd:f1:ac:e5:3e:16:0e:1d:19:f3:cd:
f9:be:86:e3:2d:2d:b1:2f:4f:a7:5c:de:77:2c:12:
50:4b:15:67:bf:99:e0:66:49:86:e8:2a:75:69:0a:
d0:ed:bb:87:3c:9f:6f:13:40:96:ef:a9:98:e0:89:
44:d6:ed:8a:b0:ee:74:31:de:b5:d7:0a:86:b9:bd:
a6:f1:a1:52:a1:0f:96:0c:46:2b:6c:98:44:14:ce:
2b:aa:7c:d1:22:89:8d:c3:f0:7c:34:0a:54:e2:67:
a7:92:e3:04:2b:eb:b3:73:f0:90:d2:47:19:27:5d:
79:05:21:d0:d9:79:72:89:e2:41:68:90:f0:91:c9:
c9:ca:0b:ec:b3:4f:7a:3a:79:1c:1e:f2:4d:74:bd:
e8:d7:83:9c:b3:37:53:e3:76:53:98:fe:30:74:15:
7c:cc:90:cb:a3:30:3e:56:6e:fa:c5:34:cc:ea:ee:
43:11:f7:ff:9b:b2:33:9d:ed:dd:0f:72:8e:12:c7:
ff:ae:81:24:08:19:1b:35:10:80:f7:8c:ae:ab:d3:
52:98:cf:ac:75:be:2b:9f:c4:71:7e:55:5f:67:f7:
af:fa:d2:4b:bf:38:aa:d0:61:88:ce:de:99:fc:42:
a1:32:ca:06:0a:e8:5c:5f:96:7b:cb:4c:2d:a8:66:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:E3:06:18:9C:C3:A0:DB:3B:7D:AE:F6:BB:85:92:D6:C5:64:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A443800201E11F0B14110D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a2:6a:6b:64:5a:ce:bf:d2:1f:85:23:f4:d5:54:94:b1:65:
da:2b:8b:db:e1:b9:f1:dc:16:0c:0b:56:ac:14:b9:2f:40:5a:
ae:b2:8f:f1:bc:5e:c2:c4:aa:02:c7:98:03:b3:61:5c:03:bc:
e7:31:ce:62:10:6b:32:a9:c5:b4:3a:07:1e:ad:49:dc:a2:a8:
9e:8e:3e:3a:63:dc:f5:c8:dd:2f:b2:d7:2e:84:27:18:7c:a6:
ec:91:44:f8:61:89:9a:8d:54:89:bd:fb:0c:63:cc:b1:2d:41:
8e:c5:85:8f:ec:bf:ed:7f:97:4d:62:c3:29:6a:8f:4e:63:79:
b8:88:46:de:2c:86:03:6c:14:c5:df:b6:4a:38:a5:9f:39:51:
c6:27:f5:63:68:89:79:3c:33:8e:f6:5b:a1:28:23:e7:3b:a4:
a1:8b:61:60:cd:db:79:57:b8:86:ff:55:41:cc:a5:e5:12:69:
2e:1c:c9:ff:10:0f:d7:41:97:54:30:37:6e:f9:21:7f:05:e7:
44:4d:14:d3:a9:bd:6c:8c:fc:9b:6e:78:68:24:fa:aa:bc:a1:
ee:37:f2:d3:e7:99:95:15:a9:32:a3:27:72:b2:65:6b:08:37:
5f:80:d4:dc:91:e7:2e:98:58:ba:bd:3d:fe:85:09:f2:66:76:
68:75:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:31 2025 by rpki-client on console.sobornost.net