Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F24AA221A0011F0870AD9126EB8BCC6.roa
File: 8F24AA221A0011F0870AD9126EB8BCC6.roa (raw, json)
Hash identifier: +PkKdiQrUR8uI++fprh/UjeT2rtpVGzYt6lIweTbXfg=
Subject key identifier: E0:AF:EC:34:E3:26:09:AC:5B:00:FD:3B:A1:D3:31:F9:DF:21:63:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F24AA221A0011F0870AD9126EB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:50:16 +0000
ROA not before: Tue 15 Apr 2025 13:50:11 +0000
ROA not after: Wed 21 May 2025 13:50:11 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85094 (0x14c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 13:50:11 2025 GMT
Not After : May 21 13:50:11 2025 GMT
Subject: CN=67fe6417-7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:67:86:e8:37:59:df:e0:f6:89:da:d1:a8:
4e:da:42:e5:cb:95:98:f0:9e:84:11:13:b4:46:cf:
96:ff:52:d9:bc:2f:01:09:8a:44:76:a7:19:36:e3:
1c:0c:00:f1:b7:9f:82:aa:dd:87:91:89:1c:ce:39:
0c:23:5b:93:08:d5:7b:04:48:a2:ce:f2:da:fc:db:
37:11:11:2a:59:ed:c0:09:f4:46:ef:54:fb:79:e0:
87:3f:aa:d6:0c:49:53:6e:5d:39:34:84:85:ab:cd:
bc:8d:e3:02:24:f8:70:cb:37:45:b0:f5:78:ee:9c:
a4:1d:75:0c:5a:67:98:4c:4a:74:f1:7d:fb:fb:d4:
b4:d7:38:da:a4:51:71:e8:1d:4e:97:22:fe:d0:19:
8e:2f:c6:90:5f:3b:cc:6b:69:24:28:18:08:f5:2d:
f2:dc:74:dc:3f:cc:26:d9:3c:d0:92:ec:ca:99:f5:
1d:d7:d7:49:0e:a2:22:8f:c4:8c:2c:c6:9b:c7:aa:
bf:e4:c3:5e:f5:4d:b2:8e:0f:ef:d1:6d:69:44:b1:
54:3d:00:ca:cd:7c:5a:56:d9:86:ea:7e:42:d8:bd:
65:cb:fd:18:4a:a8:76:44:67:42:19:bd:d7:67:cf:
59:ff:67:a5:0f:6b:40:91:09:9c:f1:de:3f:c9:83:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:EC:34:E3:26:09:AC:5B:00:FD:3B:A1:D3:31:F9:DF:21:63:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F24AA221A0011F0870AD9126EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
09:46:4a:b8:c1:d1:3e:c4:2e:52:e1:10:0b:ee:a3:5f:26:6a:
57:70:51:59:27:86:f1:61:f8:a0:ef:06:fd:61:e6:58:ba:49:
c2:a1:4f:52:0c:1c:e8:e0:53:80:8f:ea:3a:29:ae:6f:7a:e5:
46:76:f8:cd:9b:88:e7:5a:ff:c2:9a:8b:bd:f5:3f:00:f1:d4:
ea:9c:5c:bc:56:f2:12:4a:e4:7e:44:cc:5d:43:c6:ca:84:6a:
b4:f3:75:fe:1d:0a:64:ce:42:e2:21:90:e2:81:d1:ab:04:22:
e3:db:81:37:ca:6e:e6:08:36:e3:56:c1:f6:c8:0e:de:0f:b0:
95:6c:5f:21:92:f3:ce:65:1d:91:62:21:43:5b:ce:a6:53:6d:
12:29:9f:a2:e6:78:c5:0c:00:4d:15:3d:5b:24:ed:35:af:e8:
2d:63:91:f7:68:4c:28:6d:8d:a1:e1:2c:e0:a6:50:ee:02:48:
07:49:57:ea:f6:d1:a8:0b:09:6a:86:51:89:1a:4f:a3:d3:5a:
8c:0a:fd:9f:cc:22:aa:b9:83:d5:7e:fc:ce:5e:e3:cc:84:43:
8b:46:ad:fc:91:30:a9:f0:76:85:49:71:d2:c4:8e:a2:b0:24:
b4:53:21:f4:5c:78:61:4d:b2:2e:f8:d9:48:52:88:d0:78:ad:
4b:34:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:38 2025 by rpki-client on console.sobornost.net