Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED17E761C5E11F0B2AA95BDDAE4EC9C.roa
File: AED17E761C5E11F0B2AA95BDDAE4EC9C.roa (raw, json)
Hash identifier: DUNfdSXRhmrorAHP5V0IZyNUVjiclY1maynJKLBGofE=
Subject key identifier: 5B:C7:7D:0B:7B:B7:09:0F:16:86:A7:41:1A:79:F7:43:AF:3B:9B:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED17E761C5E11F0B2AA95BDDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:09:04 +0000
ROA not before: Fri 18 Apr 2025 14:08:59 +0000
ROA not after: Fri 25 Apr 2025 14:08:59 +0000
asID: 21859
IP address blocks: 45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.196.138.0/24 maxlen: 24
45.204.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 14:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85252 (0x14d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:08:59 2025 GMT
Not After : Apr 25 14:08:59 2025 GMT
Subject: CN=68025d00-7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:ab:8d:5f:5d:9a:26:89:bc:65:dd:2e:10:
fd:0e:9d:42:81:16:13:2b:d0:8d:16:58:f2:75:2a:
6c:a7:69:ab:7a:29:75:d6:7f:29:b6:a2:a5:c8:4a:
31:79:67:0c:08:cf:96:12:64:74:b0:be:17:7b:25:
d5:b1:20:73:1d:06:e0:f9:8e:d4:72:3e:2a:02:fb:
ef:21:c5:57:b3:7e:8e:75:80:c6:8b:a2:2e:ec:49:
11:b4:a8:b3:fc:17:59:04:27:b7:a2:15:3d:08:d7:
6c:b6:34:0a:6d:03:92:37:e1:c9:aa:58:f0:4b:1b:
26:6a:2c:d3:46:e1:03:3f:ec:03:db:6b:69:77:78:
ec:f2:93:db:39:e1:e3:f4:0f:64:fb:23:b2:61:31:
da:2b:aa:be:35:35:77:a5:a1:51:20:eb:c5:5b:3e:
5c:85:f3:cb:64:7d:bd:1e:d6:20:93:a4:f2:35:26:
77:48:b4:99:95:d2:a0:2f:59:d6:84:9b:18:aa:64:
b1:f5:c0:39:be:c8:53:aa:7b:08:da:9c:80:48:f9:
d1:55:56:4b:1a:24:d8:11:e0:1f:73:f9:7f:98:fa:
1a:0b:18:96:2f:5a:44:d5:ae:eb:bf:f3:b8:a4:aa:
16:5d:be:6c:08:06:cf:94:46:9f:b2:95:8a:7f:78:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:7D:0B:7B:B7:09:0F:16:86:A7:41:1A:79:F7:43:AF:3B:9B:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED17E761C5E11F0B2AA95BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0-45.196.138.255
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2a:68:c1:0b:da:e5:6c:81:3e:f4:fb:55:fb:f4:eb:14:75:
ff:79:77:57:88:67:07:32:ff:f0:94:68:16:8d:c8:0a:5d:ef:
70:53:a1:53:7b:cc:42:b7:2b:d2:29:21:8f:52:36:7a:d6:11:
7a:a6:b4:50:27:74:89:18:70:65:4d:cb:cc:94:d6:b0:72:f2:
1b:b0:ca:22:04:b7:74:c1:1a:3e:6a:fd:ac:56:c5:3f:c5:09:
5a:35:ee:05:27:c6:69:b5:68:c4:b0:1c:a5:e4:d5:e9:90:7b:
88:65:e4:b1:80:c1:66:76:28:c6:18:bb:cd:11:12:2b:19:48:
fe:c7:19:d8:ff:18:26:06:22:77:04:fe:50:65:49:dd:8b:86:
6b:7f:da:53:e0:b0:58:61:f9:2d:5a:21:15:88:14:bf:90:2b:
7d:0a:fe:fd:4b:98:aa:c5:59:03:aa:6e:e3:33:06:a5:a9:ef:
93:34:ed:91:32:30:fa:5d:70:00:1e:76:ce:ee:8c:78:1f:f9:
ee:68:d9:68:50:cb:90:be:01:78:3d:41:6b:6c:a7:31:2b:16:
a3:c6:cc:f2:0b:25:4e:0c:ce:85:af:d2:fb:a7:8e:ad:8d:a1:
fc:2b:57:6d:7d:c8:2d:05:0f:a7:e2:de:47:0c:e5:f4:a8:6c:
4d:40:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:54 2025 by rpki-client on console.sobornost.net