Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63CE3E6BDBB11EFAA2DD055762E951A.roa
File: B63CE3E6BDBB11EFAA2DD055762E951A.roa (raw, json)
Hash identifier: FxeX9z86gy99urOAQf40l528Qtu+aZ7Zz9//1Vzp9Bs=
Subject key identifier: 5F:29:D8:AA:35:47:BF:C7:D8:CB:79:2A:2C:15:77:10:E4:8E:42:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63CE3E6BDBB11EFAA2DD055762E951A.roa
Signing time: Thu 19 Dec 2024 03:45:39 +0000
ROA not before: Thu 19 Dec 2024 03:45:35 +0000
ROA not after: Wed 10 Dec 2025 03:45:35 +0000
asID: 984
IP address blocks: 45.206.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58681 (0xe539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 03:45:35 2024 GMT
Not After : Dec 10 03:45:35 2025 GMT
Subject: CN=676396e2-2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:28:99:db:de:10:1f:85:fc:da:b7:61:b2:
5a:ac:16:aa:26:b0:9e:5f:c6:e0:f2:01:23:74:0a:
d3:de:0f:32:c0:a2:c3:2e:7a:79:bf:96:e6:25:37:
63:b5:db:bb:cc:1b:74:65:bf:66:28:b8:12:ca:6c:
2a:fe:6b:9c:6e:72:81:50:b4:67:c9:90:67:ef:f4:
f4:d4:c5:fc:bc:86:42:b4:92:04:d3:d6:12:a9:17:
b3:5e:4b:69:e7:62:f9:8f:77:7d:73:8e:51:1a:68:
d7:31:e7:e3:8e:8e:50:f1:dd:ba:90:f0:03:b4:41:
a6:24:13:22:8e:64:8e:63:4b:9c:1a:30:3d:b5:79:
3f:ec:1c:c1:54:dd:cc:41:bb:a3:8b:a6:c0:aa:4f:
8d:72:a0:c2:cb:05:ed:19:13:ff:60:b1:37:89:7a:
3a:87:9e:90:01:a8:3b:ae:0f:61:2b:5f:e3:60:51:
36:e4:ae:9e:0b:30:03:1d:c7:82:ed:f9:4b:2a:dd:
7d:16:02:e9:b1:6a:dc:16:78:0d:6c:ff:b7:ee:dc:
df:50:f8:49:cc:c6:d8:ff:63:fa:73:fd:ec:8b:c5:
ad:6e:9d:4b:70:2d:c8:c7:37:5b:86:a9:90:16:74:
19:17:a3:1e:90:94:28:af:6a:62:b3:69:29:e2:11:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:D8:AA:35:47:BF:C7:D8:CB:79:2A:2C:15:77:10:E4:8E:42:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63CE3E6BDBB11EFAA2DD055762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.45.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4b:ed:55:16:8e:bf:23:49:99:21:52:69:58:c8:57:2f:f6:
bd:54:d8:a1:bd:84:5b:d5:da:ab:dd:47:e3:0b:dd:de:04:a9:
f8:12:4b:13:5f:64:dd:51:6d:65:6f:a3:7a:ee:79:65:32:1e:
27:6d:43:33:83:9f:99:4e:b3:76:fe:78:c5:d6:3c:ac:10:78:
5c:e0:34:ee:cc:3f:51:f7:f5:32:c7:b0:02:b9:be:ee:0d:79:
e0:58:a6:d3:6a:21:65:ca:3f:dd:87:c8:b7:c1:86:cf:7a:11:
c5:0f:c7:bc:9f:06:7c:5a:65:f5:7c:af:69:ba:2d:dd:a8:35:
5a:45:9b:3c:9b:b6:bc:fd:f2:4b:8f:ed:60:f8:3e:d9:9e:cc:
a5:b7:b8:b4:29:85:cc:65:86:19:f1:e7:0f:c0:cb:8f:01:f2:
aa:47:c6:b2:34:b4:10:7e:e6:6f:a7:cd:b1:35:04:61:33:62:
9d:f9:ee:3f:c5:ad:ac:4b:56:b3:60:1a:18:e9:8c:00:01:fc:
f7:44:86:cb:2b:81:47:ad:5f:e7:1e:79:14:4e:91:f9:c0:1e:
8d:80:1d:9b:b0:d3:1f:c5:5b:e4:d1:28:b3:6e:01:29:f2:2a:
17:b4:e2:5f:b0:66:91:3e:b4:04:1f:1e:66:0a:4a:c7:34:9d:
e2:eb:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:50 2025 by rpki-client on console.sobornost.net