Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE954520C39C11EFB9210E7C762E951A.roa
File: AE954520C39C11EFB9210E7C762E951A.roa (raw, json)
Hash identifier: 6m1irc8LgdwC4URxLXSU8fqUHmyC1MoornXN+OFj3Oc=
Subject key identifier: 6C:63:57:44:8E:54:6D:AC:57:0A:08:81:03:24:FE:DC:E3:41:78:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE954520C39C11EFB9210E7C762E951A.roa
Signing time: Thu 26 Dec 2024 15:18:38 +0000
ROA not before: Thu 26 Dec 2024 15:18:34 +0000
ROA not after: Sun 12 Dec 2027 15:18:34 +0000
asID: 17561
IP address blocks: 45.199.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60777 (0xed69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 15:18:34 2024 GMT
Not After : Dec 12 15:18:34 2027 GMT
Subject: CN=676d73ce-802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:c7:a7:8c:a4:cb:1f:f4:b6:01:bb:47:52:
63:68:e6:1b:20:57:a2:90:35:6e:0c:f8:1f:42:4d:
c6:5b:92:74:6d:5c:2e:45:03:e9:23:e3:27:79:9e:
c8:8b:ed:a9:20:56:c9:16:e3:76:e7:cd:72:bb:b7:
6a:6c:dc:ca:6f:6c:fd:a9:1a:e2:0a:ff:12:bd:aa:
eb:07:40:7f:85:a4:25:20:a4:ea:48:16:12:9b:50:
2e:13:ba:12:b3:74:cd:40:6b:5f:7e:8d:9b:2f:4f:
b8:9b:63:05:86:6f:9b:f5:b7:61:1b:ea:2e:1d:ac:
74:1a:de:2d:5d:cf:e9:0c:dc:de:c5:37:49:50:ba:
9b:63:35:bc:1e:84:60:82:10:c1:13:35:93:5f:94:
12:d3:19:15:c5:35:90:a5:d4:aa:6e:f2:f7:d9:10:
2d:53:a0:55:4b:e3:fa:ca:21:0b:ef:8c:89:e4:8a:
11:d0:47:4b:f7:63:71:ff:dc:3c:81:9a:73:93:21:
69:97:b4:16:d1:64:33:ec:fd:84:d5:91:8d:39:d3:
a2:95:ae:b8:82:f6:91:f2:ae:c4:66:d0:13:ad:43:
b7:a6:08:ba:b2:b4:a4:1d:58:72:76:1a:bf:98:60:
a2:21:9c:46:ea:c6:db:3d:ca:c9:94:30:ee:73:86:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:57:44:8E:54:6D:AC:57:0A:08:81:03:24:FE:DC:E3:41:78:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE954520C39C11EFB9210E7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c0:27:97:31:3c:c7:7d:0d:05:1d:0c:05:ff:5d:41:d0:e1:
c5:d9:33:ab:4b:18:46:b9:81:4e:d1:5f:ae:4c:6b:bd:98:45:
5f:45:61:5c:e5:1d:ac:88:00:f3:c8:36:cc:84:46:49:2c:50:
ca:4f:ea:da:5a:b0:54:ed:28:d3:de:f7:dc:b9:2a:1d:94:8b:
83:cd:42:e8:4c:42:7f:e5:49:d0:80:09:97:92:2b:2a:7a:55:
e2:9a:55:4b:3e:ed:dc:f6:8d:06:da:1c:60:b1:89:8f:43:93:
ce:f8:0d:16:ca:0e:6f:06:41:73:22:b9:b2:c9:32:5d:89:e3:
91:82:e6:ef:a4:eb:2e:7f:1f:2a:8d:95:5e:ad:77:bb:2a:a2:
ad:71:51:5e:f9:40:1d:41:47:f6:30:0b:da:1f:30:52:ff:2d:
f5:f5:04:96:e5:e7:58:a2:d2:8a:14:b0:12:11:8b:66:a7:a0:
65:ad:23:01:a5:3e:c0:f1:92:7d:d0:96:b9:ed:7e:27:16:7c:
ae:1b:c0:69:90:00:5e:b8:2a:34:9a:f7:c7:b0:0f:2f:c0:f4:
11:e3:8e:42:f8:bf:ec:2a:e9:3e:c8:71:cb:dd:10:c1:35:94:
de:3f:d7:61:ac:d5:94:af:19:79:0f:0c:eb:8e:99:d8:ff:9a:
52:39:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:41 2025 by rpki-client on console.sobornost.net