Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F9C17E217411F0A01571BADAE4EC9C.roa
File: 98F9C17E217411F0A01571BADAE4EC9C.roa (raw, json)
Hash identifier: p7l7+DmXpYMkm5921Loxy6dVOb/l0GqG28yrngWSivM=
Subject key identifier: A5:93:9B:21:3E:77:9C:ED:16:2C:1F:85:9D:0C:F3:A5:73:FC:4C:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F9C17E217411F0A01571BADAE4EC9C.roa
Signing time: Fri 25 Apr 2025 01:28:32 +0000
ROA not before: Fri 25 Apr 2025 01:28:26 +0000
ROA not after: Sun 27 Apr 2025 01:28:26 +0000
asID: 39600
IP address blocks: 45.194.68.0/22 maxlen: 24
45.194.72.0/22 maxlen: 24
45.194.76.0/22 maxlen: 24
45.197.200.0/22 maxlen: 24
45.197.204.0/22 maxlen: 24
45.197.224.0/22 maxlen: 24
45.197.228.0/22 maxlen: 24
45.197.232.0/22 maxlen: 24
45.197.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 01:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85661 (0x14e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 01:28:26 2025 GMT
Not After : Apr 27 01:28:26 2025 GMT
Subject: CN=680ae540-f5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:4c:9e:75:08:6d:9e:fd:ac:de:5e:2a:13:
c8:8c:07:61:36:9f:eb:ba:6f:8f:af:cb:ef:dc:cb:
42:c1:95:e7:53:83:b4:6b:cf:3b:12:df:ba:2a:6f:
94:79:e2:1a:7e:10:5f:fa:45:61:81:c9:bc:ea:f8:
23:6e:50:7d:1b:3f:32:4c:f4:55:2c:9a:e0:8c:c4:
8d:27:ac:9b:e7:9e:60:bf:3b:10:0b:ef:01:ac:dd:
10:b6:42:05:2b:43:1b:b9:2f:4b:a4:4d:0e:e1:82:
13:f2:a0:a0:64:33:ea:38:3d:e2:57:76:cb:c2:03:
9f:55:7d:c8:05:ad:3d:99:5f:b5:40:75:12:63:63:
f9:69:38:68:83:71:dc:f5:0c:d3:77:60:96:c5:c6:
d0:61:54:69:f6:40:2b:5e:1f:75:66:2c:72:e2:6b:
28:ff:dd:66:ff:55:1c:cf:e8:a7:e7:01:48:44:35:
c1:e5:d1:52:ee:9c:f1:3a:9a:ae:fd:3c:f9:28:a6:
50:a9:cf:a8:dd:28:aa:5d:84:54:d1:cc:3b:7c:27:
29:c9:6f:54:39:54:1a:32:68:40:c2:e8:34:d0:c8:
e5:62:85:8b:41:6e:71:cc:54:07:86:04:21:7d:ac:
f3:a2:2e:dc:18:4d:57:fd:23:13:cb:ed:8b:4b:eb:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:9B:21:3E:77:9C:ED:16:2C:1F:85:9D:0C:F3:A5:73:FC:4C:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98F9C17E217411F0A01571BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.68.0-45.194.79.255
45.197.200.0/21
45.197.224.0/20
Signature Algorithm: sha256WithRSAEncryption
18:d8:23:9f:d4:5e:5c:33:82:74:5c:54:e9:b0:46:82:e2:75:
b9:3b:2b:87:20:79:40:7b:af:4c:bd:f6:3c:45:6d:a9:05:23:
3d:7f:e8:4b:17:a0:f1:2f:50:0b:ce:d9:85:05:e3:f9:9d:bb:
5e:d4:dd:93:67:95:5b:e7:ec:70:de:c8:c2:32:31:00:b7:76:
5b:87:b0:4b:8a:7a:7c:22:25:d6:71:12:92:7e:52:84:eb:19:
cd:ac:c2:ad:a1:3d:79:95:2f:85:7f:be:81:da:85:ba:ed:81:
44:dd:10:54:c4:31:60:8d:63:87:73:c5:70:25:1c:37:72:53:
e2:28:a9:2d:fb:e9:ba:3a:60:67:10:f8:4a:2f:85:68:96:02:
78:aa:76:a3:3d:f4:9c:92:50:f1:3e:7d:e0:20:e1:ef:c1:a1:
db:05:f4:20:8f:bb:71:a9:f1:4f:6d:e7:93:07:14:be:be:84:
58:09:41:c6:12:15:7c:54:33:ce:7e:18:a0:05:ae:37:69:26:
db:c8:5f:2a:06:d5:96:96:cf:2c:c7:ae:00:b3:b6:a9:a6:b6:
6d:e5:3f:3d:3f:5b:f4:89:65:c1:f9:ea:9f:a4:2a:e8:89:5e:
e7:7d:c4:65:4f:95:63:70:30:8a:9e:40:60:8c:27:1a:04:d0:
25:e5:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:50:33 2025 by rpki-client on console.sobornost.net