Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31598F01DD111F0BC9A79F3DAE4EC9C.roa
File: A31598F01DD111F0BC9A79F3DAE4EC9C.roa (raw, json)
Hash identifier: nOmVnxPrLEyEYSLYxfHyyU3U/+GjY7o5+djGgHu+1NE=
Subject key identifier: 2B:6C:53:3E:B8:5F:9C:5E:58:A6:C1:1E:F3:1F:17:6D:35:96:F5:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31598F01DD111F0BC9A79F3DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 10:24:27 +0000
ROA not before: Sun 20 Apr 2025 10:24:22 +0000
ROA not after: Mon 26 May 2025 10:24:22 +0000
asID: 202662
IP address blocks: 45.196.248.0/24 maxlen: 24
45.196.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85407 (0x14d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 10:24:22 2025 GMT
Not After : May 26 10:24:22 2025 GMT
Subject: CN=6804cb5b-bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:50:b5:1a:51:cf:34:12:17:f2:d4:22:d7:
6c:21:f7:e1:07:a8:65:a2:53:6b:03:a6:8f:72:d3:
23:4a:8e:4c:b2:4c:ed:66:7c:95:3a:d5:e6:9f:23:
76:c9:2a:6c:25:6c:38:e1:a2:89:e4:8a:82:80:c7:
ea:1b:81:88:9f:f7:a5:36:9c:32:24:38:74:99:f5:
27:78:57:44:5d:ca:cc:85:c5:0d:28:1f:e9:d4:30:
6b:48:c2:9d:02:ec:86:98:31:8e:97:42:9d:96:af:
2f:d3:b8:07:39:84:91:08:d6:51:76:44:a2:a4:15:
87:b6:36:6a:39:10:ba:ab:34:a2:58:e0:9f:08:d1:
5d:71:e0:99:61:66:55:ee:35:90:56:89:d8:49:c2:
6e:28:d7:93:a4:9f:9a:34:f0:51:0a:96:8b:e8:e4:
7e:ae:dc:a7:79:b1:f8:1a:d0:5c:70:36:6d:c1:0d:
c5:26:15:66:ac:d0:1f:d5:c8:eb:27:9b:8f:03:fe:
3a:53:6a:8a:6c:ef:16:2a:71:05:ef:f8:1b:3b:80:
bc:c0:b0:7f:39:00:fc:b8:78:5b:d4:7e:ab:6a:76:
dd:d6:3f:4f:93:1c:da:6a:23:75:1b:6f:15:37:cb:
07:42:af:2f:79:25:b7:a7:ae:29:56:4d:4c:ba:9e:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:53:3E:B8:5F:9C:5E:58:A6:C1:1E:F3:1F:17:6D:35:96:F5:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31598F01DD111F0BC9A79F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:74:d4:a0:1b:d0:bd:59:9d:da:ad:ca:10:73:62:ef:3e:d8:
97:2d:d1:40:34:71:72:21:56:be:6e:75:31:37:4d:d3:0f:26:
17:05:33:2b:a4:89:d4:3e:5c:84:8b:af:d9:6d:ec:13:9d:68:
c6:26:63:47:c3:28:0c:a5:5c:e8:9c:43:1c:87:b7:7f:e9:0d:
d9:e7:a8:b6:45:00:07:18:14:e8:8e:0e:b1:b8:3a:82:69:a9:
dc:45:01:c6:8e:17:32:3d:11:9c:6a:73:5b:c0:bf:93:c3:d5:
a4:85:0b:2a:11:8f:bf:51:02:47:65:76:d0:8e:71:04:92:77:
4d:14:c6:d4:b9:21:a9:12:17:aa:c3:5b:23:21:b4:eb:39:b8:
6d:06:ac:15:30:d3:9b:a6:18:b3:ae:93:a5:a6:b9:b5:2d:f7:
ee:36:f3:07:7c:84:e0:e3:0b:69:09:7f:1d:2b:78:57:9f:2b:
7e:bd:4b:c9:86:94:47:7f:c0:b6:33:2a:d1:e9:59:cf:17:f6:
f4:47:42:01:98:8e:07:6e:7d:04:a3:a5:eb:13:f5:bf:1b:5b:
01:44:a2:dd:cf:30:da:0a:fb:3e:03:0b:b2:d4:1c:f3:20:ee:
b5:5b:6b:db:78:a5:94:4d:94:38:d6:0b:7b:9d:dd:b6:31:29:
99:2c:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:46 2025 by rpki-client on console.sobornost.net