Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11920D415ED11F08F94C5DD6DB8BCC6.roa
File: B11920D415ED11F08F94C5DD6DB8BCC6.roa (raw, json)
Hash identifier: jcKebmhycyPnLSSaHuElth/tYFQpd+RD20tLUC4t8nI=
Subject key identifier: 62:93:73:22:FD:DD:AA:E0:4D:56:73:D0:10:DE:7D:B5:34:52:A8:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11920D415ED11F08F94C5DD6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:25:07 +0000
ROA not before: Thu 10 Apr 2025 09:25:03 +0000
ROA not after: Sat 03 May 2025 09:25:03 +0000
asID: 211188
IP address blocks: 45.198.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84844 (0x14b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 09:25:03 2025 GMT
Not After : May 3 09:25:03 2025 GMT
Subject: CN=67f78e73-8045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:fb:a2:cd:a7:59:f7:86:51:64:dc:f8:29:
21:3d:09:5a:93:70:e2:5f:80:42:ec:68:33:58:4d:
c0:af:c5:ef:28:dd:41:4d:fe:da:b8:70:08:d3:01:
20:e5:8f:de:54:96:a0:fa:b0:36:f5:06:ea:5e:d9:
ef:8e:99:82:c3:59:e1:d7:35:86:b8:69:46:bb:da:
27:36:ed:83:fc:38:5f:b1:7d:c9:a1:c3:38:42:9b:
39:69:d7:35:c2:59:18:9d:69:7d:1c:bb:bf:59:dd:
b8:7e:43:0d:e8:08:1c:c7:31:18:65:f7:c8:8e:2e:
32:40:9f:2b:1c:12:b5:64:7d:3e:87:64:31:20:1d:
54:7e:74:bb:74:f1:20:68:75:54:49:93:f8:af:f6:
a0:03:26:30:b9:e7:ce:48:e0:10:3c:d2:21:d1:04:
15:90:da:5d:08:11:b9:5f:dd:5d:31:11:6f:13:4c:
e2:e0:c9:b0:52:c6:46:ac:fa:69:6a:47:d8:7f:a6:
73:6f:6a:70:a6:ea:93:6a:80:fe:ea:ae:95:6f:21:
6b:57:f3:9e:db:a7:72:b8:65:14:9e:94:3e:ed:a8:
a9:51:89:55:be:4b:3b:05:05:0c:bc:c2:34:58:55:
57:7d:c9:eb:4e:08:b4:39:a3:1e:7f:c9:98:cd:8c:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:93:73:22:FD:DD:AA:E0:4D:56:73:D0:10:DE:7D:B5:34:52:A8:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11920D415ED11F08F94C5DD6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fe:3e:e7:95:89:b7:88:74:f3:c2:7b:01:23:3d:08:31:22:
29:24:46:c4:5c:f7:82:17:60:ee:a8:62:1f:8e:9c:43:f6:4d:
05:0d:74:bf:ff:a7:b5:8e:3f:19:f6:bf:3f:1b:2b:69:16:6d:
59:e8:41:9c:31:ee:80:10:c5:8d:18:d3:48:dd:07:31:85:03:
47:b0:17:73:e6:fd:d3:67:44:25:e6:c2:e2:a5:50:47:4d:14:
34:23:51:5b:b2:e0:34:dd:42:e4:36:d4:3a:64:7a:e5:81:66:
fc:3e:b2:92:c6:59:8a:cc:e2:43:d9:4c:58:16:20:7e:3f:bb:
14:8f:9a:26:ab:65:a0:04:a9:0b:91:88:d6:4d:7e:6c:57:c3:
2f:03:a4:08:f7:8d:c7:03:2a:c9:62:e5:79:8f:d1:4f:6d:59:
97:26:00:89:69:84:53:61:b7:fa:23:f1:fe:a9:ab:d2:14:b7:
c7:bb:54:c3:8a:34:dc:91:b7:d8:28:24:05:8a:96:9e:23:68:
5e:e7:8b:14:72:38:c9:c5:14:e3:72:e6:fc:ca:ef:59:47:73:
3c:a1:77:52:52:15:73:6e:37:fe:01:63:32:69:02:8a:19:bb:
e6:ee:3a:8f:ab:fb:6e:88:85:c5:f9:ed:00:a6:85:4e:71:f4:
18:31:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:47 2025 by rpki-client on console.sobornost.net