Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E1E1816217511F08B5116C2DAE4EC9C.roa
File: 9E1E1816217511F08B5116C2DAE4EC9C.roa (raw, json)
Hash identifier: XJ9aUEIyIVi/aWWuubnLiVrXFNstfqsB9N0kuhyQMYI=
Subject key identifier: CA:07:CD:DC:66:A4:EA:B9:87:59:C2:95:82:64:FE:7C:44:CE:12:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E1E1816217511F08B5116C2DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 01:35:50 +0000
ROA not before: Fri 25 Apr 2025 01:35:45 +0000
ROA not after: Wed 31 Dec 2025 01:35:45 +0000
asID: 17561
IP address blocks: 45.197.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85664 (0x14ea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 01:35:45 2025 GMT
Not After : Dec 31 01:35:45 2025 GMT
Subject: CN=680ae6f6-ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:14:bd:2c:11:76:66:09:cf:4c:73:79:33:
c2:ce:42:f2:a1:45:c7:9d:ee:0e:4d:c1:d7:2d:9f:
9c:8b:97:1d:36:ed:5a:6b:0f:4e:af:ee:81:a3:2c:
c7:8d:a6:47:6b:61:2e:81:5b:e5:b7:54:95:7d:d8:
1c:6e:b5:73:c2:bf:15:99:95:8e:9c:f1:27:b2:12:
a2:84:89:a2:0b:2c:98:09:81:fe:ee:dc:aa:42:f3:
17:13:3a:b4:71:40:e7:9e:3b:66:9d:8f:a9:08:5a:
94:b7:96:38:8d:a1:f1:b3:e6:f9:b2:19:97:7f:af:
65:a4:eb:d0:f3:4d:6f:d0:37:f6:b8:a2:dc:5f:80:
24:18:a1:11:85:cf:86:ce:75:41:04:3e:58:b8:8b:
99:00:d7:5f:c4:da:c4:1a:5c:e4:30:44:cd:6e:f0:
47:a0:e7:5b:44:5f:ab:b4:2c:19:90:8d:68:69:25:
92:5d:0e:bd:29:48:68:98:8e:54:98:b8:bf:03:1b:
b6:ee:14:fa:a5:c9:01:12:06:03:36:89:73:5c:9e:
6e:97:f9:f6:33:cd:e4:12:cd:02:46:5b:a1:1c:9d:
b3:e4:32:0b:b1:d4:00:0b:50:32:27:f6:39:25:fe:
be:b9:37:e1:79:43:89:d3:65:c8:e1:f0:46:81:dc:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:CD:DC:66:A4:EA:B9:87:59:C2:95:82:64:FE:7C:44:CE:12:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E1E1816217511F08B5116C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.196.0/22
Signature Algorithm: sha256WithRSAEncryption
90:a3:bd:28:8f:4d:c1:71:aa:c4:a5:a5:6a:bc:1f:cc:74:1c:
77:5a:9c:bc:ab:20:5e:66:d4:b7:f8:fa:a3:25:6f:8a:01:18:
e5:f7:3e:3b:c0:9c:c9:52:0b:08:9c:9f:68:68:c9:43:55:4f:
48:1c:60:3a:fb:c3:35:e3:18:1d:8a:0f:65:0c:2e:ff:a2:e3:
27:b6:60:7b:19:0d:8d:fb:ae:a7:c1:5c:61:3d:e9:41:be:f3:
0b:f9:48:39:e8:f7:eb:2f:bc:b8:6a:53:98:44:36:7f:95:30:
1d:5b:87:8d:58:38:65:2b:65:1c:d7:5f:7e:a1:63:18:56:6d:
05:f6:29:22:c0:b5:2c:7d:95:25:d8:47:ce:17:2f:f5:97:51:
22:c0:19:c9:a7:86:c8:49:41:e8:93:ac:5d:20:93:9c:71:e2:
ae:45:68:58:4d:43:fd:0f:a8:8b:ad:8f:3f:8d:96:97:81:5b:
89:51:4e:62:a3:b9:50:e7:47:5a:e8:51:34:a1:c3:ed:49:62:
b6:a7:ed:b0:b3:8e:38:fe:1e:84:70:0f:28:42:41:67:82:52:
67:33:f1:9f:12:75:ba:d0:de:8b:2f:c2:4d:e5:19:03:b9:09:
59:f0:6f:6a:d4:42:88:df:7f:ce:a1:a1:a9:2a:fc:ac:dd:d4:
42:61:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:50:36 2025 by rpki-client on console.sobornost.net