Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF748E741C7F11F098F73C99DAE4EC9C.roa
File: AF748E741C7F11F098F73C99DAE4EC9C.roa (raw, json)
Hash identifier: LNsnH1WCVCBsAUrSWEHFjxEK0SCV6HRMma5MgzBLJj8=
Subject key identifier: DC:9C:20:D3:F5:CA:72:8F:F9:45:6D:BB:F8:15:F3:AD:5C:29:AC:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF748E741C7F11F098F73C99DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:05:18 +0000
ROA not before: Fri 18 Apr 2025 18:05:14 +0000
ROA not after: Tue 27 May 2025 18:05:14 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
45.200.182.0/24 maxlen: 24
45.200.183.0/24 maxlen: 24
45.200.184.0/24 maxlen: 24
45.200.185.0/24 maxlen: 24
45.200.186.0/24 maxlen: 24
45.200.187.0/24 maxlen: 24
45.200.188.0/24 maxlen: 24
45.200.189.0/24 maxlen: 24
45.200.190.0/24 maxlen: 24
45.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85317 (0x14d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:05:14 2025 GMT
Not After : May 27 18:05:14 2025 GMT
Subject: CN=6802945e-5fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:96:86:f7:a0:92:24:0b:e8:58:31:a0:17:
a3:22:f9:d1:33:ba:9e:fa:70:18:8b:79:f1:49:40:
52:a0:2c:87:a9:67:c6:cd:ce:a5:8a:c0:8f:14:f9:
a5:e0:b6:b8:50:e5:02:9f:98:f3:26:ae:26:38:cc:
57:dd:05:b4:6b:48:6d:01:10:3d:e2:94:fe:71:68:
70:ae:e0:18:dd:fe:b1:5b:10:b3:82:4d:21:fe:ce:
1e:7c:8a:08:43:78:48:de:9e:97:6d:b2:d5:70:3a:
bd:df:4a:34:b4:33:f4:3f:63:df:d4:34:bd:09:6e:
40:0e:bb:b5:0d:a2:15:ae:2d:fb:5d:b2:ce:9a:94:
b3:c7:1b:c1:3c:4a:50:b8:a2:2a:f2:63:30:ef:17:
3a:ef:f1:71:89:1d:76:73:04:c9:5b:02:67:11:13:
ac:d9:aa:8b:ec:21:c2:c9:b4:47:43:53:c1:3f:42:
68:a5:b1:ea:f9:5e:10:47:02:71:94:fc:d9:ef:3f:
49:87:39:c9:4c:de:de:3c:bd:cd:75:c7:1f:5b:29:
f6:79:7b:6a:96:02:75:06:57:04:4a:a2:64:f4:fd:
bf:f7:b2:cd:61:36:57:55:55:f9:58:a1:b3:90:4d:
6f:58:bf:36:3d:aa:32:8e:d1:8c:32:c9:7e:53:00:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:20:D3:F5:CA:72:8F:F9:45:6D:BB:F8:15:F3:AD:5C:29:AC:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF748E741C7F11F098F73C99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0-45.200.191.255
Signature Algorithm: sha256WithRSAEncryption
84:26:3e:8b:6d:b0:42:06:32:ee:1e:45:0b:ef:46:9e:1b:0c:
29:03:53:9e:58:57:6c:32:69:bc:df:d2:e8:8b:be:97:2b:54:
0d:59:a1:2d:0d:d5:d1:4d:bf:1a:a0:77:61:3d:b3:20:23:02:
38:a5:c6:50:a9:54:6d:40:46:16:f2:6b:da:50:46:0c:d0:d4:
18:57:1d:03:b1:78:a4:2b:f7:13:eb:f5:d1:44:3f:0c:58:87:
e2:db:d3:19:e8:19:e3:bc:1b:01:4a:ce:66:0c:9b:58:72:04:
05:a0:69:f1:5c:91:e2:84:29:22:44:6c:a8:9c:b4:f7:62:e8:
5e:19:0c:e8:6e:94:46:d1:41:04:f2:28:ed:e3:15:cd:9b:1f:
d9:31:9f:90:3d:71:28:6d:54:d9:b3:b2:da:26:b9:29:31:fe:
e8:2d:21:2d:aa:fc:94:0a:52:26:68:3e:23:72:f2:30:6d:90:
d1:2a:29:d6:a4:d8:4b:f0:e4:a4:63:41:b0:2f:1f:96:37:47:
ad:31:c3:14:fd:35:15:1f:34:cc:f2:04:f5:d9:0e:93:4a:41:
04:eb:07:4d:c6:9e:23:98:14:ee:3d:2f:12:dd:c7:08:b0:91:
50:93:8c:d5:5a:7e:2e:df:6d:49:07:1f:65:47:ff:c0:a1:98:
56:b2:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:17 2025 by rpki-client on console.sobornost.net