Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5C93E201911F0AB8E15BBDAE4EC9C.roa
File: B7B5C93E201911F0AB8E15BBDAE4EC9C.roa (raw, json)
Hash identifier: 9dRUFFT01dYZgAL6SsUXHa176Eqnet8hsmXZLxFPXSE=
Subject key identifier: D9:68:FE:7F:BB:DC:FE:32:44:9D:22:D3:B9:F3:7F:7D:82:C6:D7:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5C93E201911F0AB8E15BBDAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:05:29 +0000
ROA not before: Wed 23 Apr 2025 08:05:22 +0000
ROA not after: Thu 29 May 2025 08:05:22 +0000
asID: 214967
IP address blocks: 45.196.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85548 (0x14e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 08:05:22 2025 GMT
Not After : May 29 08:05:22 2025 GMT
Subject: CN=68089f49-a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:ad:4d:47:2d:e4:d8:e4:e9:94:c5:5a:94:
f9:ca:3f:4d:1d:2c:6c:3e:ab:5f:4c:02:3d:e4:dd:
11:7b:75:0f:f1:7d:d2:85:bc:97:8d:12:b8:8b:29:
9c:6b:40:8a:68:1e:7f:58:9c:2e:d4:29:50:2a:bd:
c2:d9:c7:1c:22:7e:f7:b5:99:40:b9:1f:84:6f:f3:
c3:c2:bd:ab:02:74:d7:74:86:24:8c:e7:aa:94:63:
17:4d:e1:04:dc:ed:c3:74:7f:50:0f:ff:b7:5f:3b:
98:d7:97:1e:e1:70:83:be:e4:5a:c9:8c:b8:57:07:
2b:c7:eb:13:05:f0:18:fc:c5:40:db:51:09:f9:83:
af:64:14:0e:c7:be:71:b2:79:1c:5b:fa:ee:46:ef:
f1:6e:7d:fe:bc:cc:db:de:af:3d:df:d0:e2:f6:dd:
b9:98:47:6a:0a:be:82:d1:e2:0e:b7:55:54:aa:7b:
5d:15:52:4f:c8:c7:7c:05:b2:ea:81:70:e7:7e:ec:
ae:6f:ce:11:e3:70:49:24:4f:00:05:5d:40:b5:85:
85:32:bf:25:0f:a5:76:bc:b4:00:ad:bc:6b:57:12:
2b:a4:c2:a6:c7:fe:0c:38:e0:fd:fb:e8:1e:c7:b5:
24:e9:f6:f1:01:25:ea:4f:10:eb:c5:05:74:b7:ec:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:FE:7F:BB:DC:FE:32:44:9D:22:D3:B9:F3:7F:7D:82:C6:D7:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5C93E201911F0AB8E15BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:55:b4:3c:22:6e:ba:cb:73:69:e3:67:18:13:f4:7b:96:eb:
a6:3d:18:e5:74:9e:cb:2f:d7:51:6a:69:40:1e:53:07:68:b6:
9c:5a:e6:c8:fd:58:59:2f:99:fe:8a:76:e6:de:17:30:63:57:
43:66:be:7d:f3:dd:bb:f2:df:e7:13:eb:10:10:34:8f:10:e9:
18:c1:9e:d7:2f:d8:70:c6:2a:a5:c7:75:2e:1d:e1:7f:2f:21:
40:a0:97:9a:7a:28:36:a2:72:e6:35:86:a1:a9:7f:a5:b8:80:
57:6c:03:a9:53:99:4d:20:5e:ca:dc:40:69:5a:82:a7:6f:62:
90:3f:4a:69:bf:03:d3:98:54:f2:f5:74:49:67:8a:b4:5e:80:
f5:14:ec:06:08:ea:b9:16:f9:24:ef:d7:2e:20:27:b3:c0:24:
82:dd:38:9d:e8:bc:2c:6c:5b:86:21:8e:5f:7e:76:0e:4a:7f:
0f:3c:08:27:9e:70:69:c0:d1:a9:9d:eb:63:2b:2c:3d:37:b1:
3e:5a:6a:2f:6c:2c:32:93:08:89:b2:10:79:ba:75:44:cc:65:
17:bf:28:56:59:0c:ac:87:03:61:5f:04:8d:8a:d4:35:99:8e:
f7:34:68:61:ab:3c:d3:11:4c:d1:10:27:05:7f:c1:5f:3e:3e:
fe:a0:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:50:53 2025 by rpki-client on console.sobornost.net