Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B414E29A1C5111F08F6661E8DAE4EC9C.roa
File: B414E29A1C5111F08F6661E8DAE4EC9C.roa (raw, json)
Hash identifier: H/IL7SxswFUeiDFzdNKOH2Pu+vaNwCtWkwPyUa9icUM=
Subject key identifier: 4B:9D:75:FE:D4:8E:A1:7D:2E:15:22:4B:87:74:7C:C5:38:76:C5:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B414E29A1C5111F08F6661E8DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:36:09 +0000
ROA not before: Fri 18 Apr 2025 12:36:05 +0000
ROA not after: Thu 15 May 2025 12:36:05 +0000
asID: 57043
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85214 (0x14cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 12:36:05 2025 GMT
Not After : May 15 12:36:05 2025 GMT
Subject: CN=68024739-4746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:8f:93:70:7a:be:9c:de:a2:2c:1a:dc:e7:
6e:3c:99:2e:49:ca:13:b2:86:ba:8a:0c:88:92:49:
a8:8c:5e:4b:37:a4:b7:67:a4:5a:cc:be:aa:2c:85:
72:ed:e9:3c:d2:af:c6:05:76:7b:0c:78:47:06:32:
79:01:3f:2e:5d:7d:d6:06:8e:62:8a:f3:84:9a:ed:
35:1c:a6:2c:74:40:2c:75:50:a3:b6:e6:fa:90:40:
91:7d:b1:99:cb:dd:74:60:37:99:c4:78:05:6b:52:
b3:49:41:06:c9:c2:7d:45:28:4d:28:34:89:e0:ed:
68:e2:7b:15:e5:64:2a:ee:55:f6:d6:e2:9c:6f:92:
fb:87:86:ff:3f:e6:59:5a:87:88:1a:0c:f1:fa:21:
69:84:14:d9:e9:7a:79:6d:99:23:6c:16:f6:b6:21:
6a:21:39:e6:e7:49:50:a5:81:7f:3e:54:f4:af:b8:
c9:40:4d:dd:24:1b:f0:c3:df:20:b7:21:83:a5:0e:
04:b6:4c:01:2f:cc:cc:2f:1c:54:7d:8f:e7:f2:8b:
82:f3:3e:17:66:36:0d:6e:0a:fe:8a:d3:05:e0:28:
30:18:ce:02:a5:98:57:72:2e:1e:23:dd:d3:5e:60:
fb:dc:93:9d:41:73:ec:21:3c:54:95:81:90:a6:c9:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9D:75:FE:D4:8E:A1:7D:2E:15:22:4B:87:74:7C:C5:38:76:C5:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B414E29A1C5111F08F6661E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
64:98:d9:2e:f9:20:ae:47:9c:d9:f5:97:a6:0b:a9:b8:b2:dd:
ba:ce:ca:fd:8d:4f:c2:c5:10:57:37:83:ed:8b:58:29:ae:bd:
ac:59:1c:10:a5:a4:34:db:ba:81:1f:20:04:65:82:04:75:f0:
15:56:6c:70:d3:a2:ed:6c:c4:54:87:30:f6:97:73:be:ed:f5:
60:79:f3:d1:45:61:77:fe:70:3c:04:95:65:49:d7:71:46:30:
ac:19:89:f6:4b:47:40:fe:3f:de:f9:3d:13:6b:db:68:17:1b:
e3:e6:fc:e5:c1:ed:4a:68:32:a0:1b:20:25:4a:8e:fd:63:ce:
61:47:f9:ed:a9:e3:4c:f2:24:2e:eb:46:ef:b9:9e:b7:bc:0d:
cf:30:43:b6:44:ef:15:53:28:ee:e9:e0:41:47:fc:b2:60:cc:
76:e5:11:2c:12:74:37:18:51:ff:b6:5c:dd:d8:df:e1:51:e5:
47:42:4d:56:59:22:83:bd:85:7d:5d:0f:a0:7e:ed:81:8d:1a:
f3:a7:f2:7d:38:0c:53:ee:8b:d5:07:3f:44:18:75:92:47:b4:
7a:5e:24:31:55:de:0e:00:ce:55:01:8b:75:e9:d7:eb:5f:0c:
a1:4f:bf:84:04:b0:f8:79:a4:de:bf:ac:62:87:c0:7b:db:7d:
38:43:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:05 2025 by rpki-client on console.sobornost.net