Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B536471613DE11F0AF547C4D762E951A.roa
File: B536471613DE11F0AF547C4D762E951A.roa (raw, json)
Hash identifier: FycUAAIb5swBMAjsEtM/zZ5ci6GjRsg4PbkOvW1nHlk=
Subject key identifier: 6D:1F:26:8A:39:88:A4:3A:6D:92:72:5C:76:6F:60:0B:06:DD:65:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B536471613DE11F0AF547C4D762E951A.roa
Signing time: Mon 07 Apr 2025 18:32:49 +0000
ROA not before: Mon 07 Apr 2025 18:32:45 +0000
ROA not after: Tue 10 Jun 2025 18:32:45 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84657 (0x14ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 18:32:45 2025 GMT
Not After : Jun 10 18:32:45 2025 GMT
Subject: CN=67f41a51-0b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:8a:71:a1:4a:53:0e:12:2a:18:8d:12:43:
c3:2e:62:01:8f:25:61:99:17:3f:6e:0a:c7:5d:af:
2f:ef:ae:30:83:a4:b8:58:17:fc:12:4a:32:14:f7:
a8:b9:a9:77:d4:0c:1d:c9:34:8c:5c:41:cd:89:08:
3d:ff:04:bd:e7:49:ac:78:21:70:a8:9e:3c:07:f4:
33:4e:85:41:cf:38:a5:6f:24:b2:2f:1b:96:b1:a9:
b3:c5:ca:04:bc:44:8c:9d:49:ac:b5:c5:a7:3b:8e:
16:52:22:0b:50:15:88:cd:4e:e1:55:cc:3e:0d:88:
f7:39:81:6d:45:36:77:9f:7a:35:eb:9f:b5:d4:95:
65:22:c1:af:12:98:67:a8:98:7d:ee:7b:16:75:43:
74:51:2a:fe:11:44:76:d6:7b:9d:ee:59:83:d4:6b:
c0:1c:9f:72:51:16:ca:c1:45:ae:db:51:d5:20:6f:
6a:17:cb:04:c0:5b:b7:f6:f5:db:1e:a2:84:02:9f:
ab:ae:44:05:21:5f:e2:28:00:22:c5:16:71:e0:d5:
bd:c6:93:5a:49:52:58:76:88:e7:9b:44:b2:5a:40:
9e:39:d6:9c:52:c7:7d:d3:30:39:ae:4f:fb:49:52:
cd:fe:c5:aa:ce:18:32:e8:4a:57:0b:d1:95:ef:48:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1F:26:8A:39:88:A4:3A:6D:92:72:5C:76:6F:60:0B:06:DD:65:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B536471613DE11F0AF547C4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.195.133.0/24
45.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:46:14:7a:40:fb:68:58:b7:6f:80:db:13:df:21:39:4a:87:
32:7f:76:aa:25:9c:d3:41:a6:0f:50:76:13:b6:0b:52:4f:f8:
59:f1:d4:42:42:e7:cc:f6:7e:55:94:b3:53:b3:8d:5d:bd:69:
d9:e6:d9:e5:bf:99:5d:0a:b1:c0:c4:6a:f4:20:ef:b1:d1:4a:
e0:47:e8:12:2f:81:7d:68:26:a4:44:12:b1:2c:44:36:ac:b0:
82:89:75:ef:58:33:ce:dc:2a:85:f2:f7:f3:b0:98:00:24:d0:
b9:ab:e8:ce:e1:49:0c:17:0c:9f:af:67:60:83:dd:7f:e1:1d:
a1:08:53:70:11:af:ca:9f:a5:e2:70:83:58:7a:4a:2a:4f:94:
da:97:73:b9:59:b9:f9:44:26:4c:13:d0:82:a5:58:50:aa:68:
5b:f7:a2:6f:c2:dc:01:ac:78:b2:50:e3:74:f8:ba:dc:5f:62:
ae:d6:b8:fa:6c:d5:14:16:cd:ce:25:c5:af:c0:4e:9c:a3:47:
a3:3f:8b:7e:cc:f5:5e:b4:3d:2d:7b:a4:74:58:5a:5f:3a:b6:
c6:67:83:98:ee:85:e1:40:d4:49:5e:c5:25:9a:11:76:58:e8:
71:cd:67:df:d5:c2:cd:a6:f1:aa:03:81:91:7e:25:05:df:9f:
90:49:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:06 2025 by rpki-client on console.sobornost.net