Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07B7E60A8B411EFB87EB467762E951A.roa
File: C07B7E60A8B411EFB87EB467762E951A.roa (raw, json)
Hash identifier: eJ0GEYFJjfdTu654kaQ9S4M7+6ExbJsd9u9q6UNrGjg=
Subject key identifier: 9F:78:2D:C2:09:F0:69:1F:AF:4D:C4:3D:47:05:40:84:0C:E7:33:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D765
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07B7E60A8B411EFB87EB467762E951A.roa
Signing time: Fri 22 Nov 2024 09:32:55 +0000
ROA not before: Fri 22 Nov 2024 09:32:51 +0000
ROA not after: Mon 17 Nov 2025 09:32:51 +0000
asID: 1100
IP address blocks: 45.198.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55141 (0xd765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 22 09:32:51 2024 GMT
Not After : Nov 17 09:32:51 2025 GMT
Subject: CN=67404fc7-7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:44:9f:9a:26:68:71:51:f8:2b:3f:34:6d:
92:d2:25:52:ea:09:74:32:30:77:03:ed:9e:fa:6d:
02:a5:64:4e:4f:18:9f:fc:5a:f5:ac:d9:96:bc:0e:
ca:a4:7a:49:32:25:33:be:52:47:93:f6:e7:c7:f5:
19:50:fd:06:e8:1f:76:04:9f:ba:dd:ab:5e:8c:0c:
01:a5:b9:a8:bf:f0:40:8a:8d:80:9f:7e:f2:b3:ec:
af:25:32:b2:ca:4b:06:a3:6d:b7:de:7c:f0:3c:7c:
e3:72:75:a7:80:6e:5b:5a:d4:10:2c:50:4d:29:68:
86:25:6b:2a:71:a1:87:5a:cb:1a:97:f3:a9:06:52:
5d:83:56:6e:a9:13:ec:4c:30:42:cb:af:de:9e:70:
d1:ac:d2:a9:32:1c:32:69:7b:53:cc:83:a8:86:08:
5b:00:54:f9:04:30:5b:4b:cd:77:c3:03:00:28:e9:
e1:79:d4:31:ca:f3:fe:84:0d:19:09:ff:01:ac:88:
cf:69:05:67:0e:72:6e:55:77:94:1f:20:68:dc:8c:
b6:36:71:8b:21:d3:e8:94:f4:0f:7f:ef:20:0f:79:
c8:df:56:7c:c3:2e:5e:87:de:ff:2d:60:99:86:ba:
48:15:9b:fe:b9:2d:dd:95:eb:c6:e8:75:e0:1a:6d:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:2D:C2:09:F0:69:1F:AF:4D:C4:3D:47:05:40:84:0C:E7:33:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07B7E60A8B411EFB87EB467762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.58.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fb:25:f4:a7:7f:c1:11:ac:05:55:21:45:b2:e1:f0:3c:40:
b6:0f:98:c5:57:b6:fb:c9:25:1d:3e:3d:20:cd:f5:6d:a0:44:
07:1e:a3:16:50:4d:c1:c9:96:33:24:8e:6c:3b:83:88:60:87:
b1:01:48:b6:29:06:a6:5a:54:8b:59:7a:23:dc:67:36:09:78:
04:76:8b:56:fe:ae:dc:e7:10:7a:c8:70:fd:a5:f9:08:88:60:
18:61:a5:75:dc:5c:8f:4a:3b:44:42:3d:07:7d:85:37:b0:d7:
e5:e1:05:19:3d:f8:ae:68:7d:d6:29:3c:da:9a:ae:47:c4:cc:
8c:b8:83:63:ae:6b:35:5c:9d:14:27:60:6c:e9:bb:59:d1:7f:
0f:c0:e4:c0:20:d7:16:8b:8a:76:49:04:77:fd:59:a5:35:fa:
ff:3b:d7:d7:29:e5:82:4a:5d:69:8a:47:f3:06:f7:f5:8d:df:
72:a0:83:61:9c:53:6e:53:20:8a:1f:9c:5e:68:44:0a:f7:53:
7e:eb:48:82:c2:89:69:5e:4c:a9:95:16:de:07:15:b3:97:a4:
5a:4c:d4:b2:3c:3e:e1:5d:ad:f2:a0:6c:ea:ff:ba:94:f2:31:
21:c6:98:7f:74:b1:cd:0a:de:a5:ce:7f:31:e1:e3:bd:d4:51:
e5:2a:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:00 2025 by rpki-client on console.sobornost.net