Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B6FF681F5211F08D20358ADAE4EC9C.roa
File: D2B6FF681F5211F08D20358ADAE4EC9C.roa (raw, json)
Hash identifier: XKQK4M8tCzCz9RTEOOyk7dKmUuQYcfcJTb1jJ9TnRlc=
Subject key identifier: 16:8B:53:7A:87:4E:49:90:D3:E4:31:29:5E:15:71:D9:DD:49:77:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B6FF681F5211F08D20358ADAE4EC9C.roa
Signing time: Tue 22 Apr 2025 08:21:43 +0000
ROA not before: Tue 22 Apr 2025 08:21:39 +0000
ROA not after: Tue 27 May 2025 08:21:39 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85482 (0x14dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:21:39 2025 GMT
Not After : May 27 08:21:39 2025 GMT
Subject: CN=68075197-7a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:f6:7a:d8:18:92:ed:a2:14:ec:b8:e6:8c:
38:6c:62:56:7a:80:e0:ef:d5:20:36:97:05:5e:96:
98:2a:91:e5:b6:94:5a:3e:57:ae:4a:5f:60:b4:73:
eb:ff:9e:65:9e:65:ef:30:40:42:76:a2:7f:d5:4a:
86:7e:ef:c1:b3:b6:d9:1d:72:c2:65:3e:51:62:65:
aa:8a:0e:5f:06:78:4a:83:53:31:66:e7:2c:f6:a3:
ec:e3:dc:01:1f:72:dd:03:c7:e0:ad:6e:bf:e5:81:
38:62:20:ec:35:6a:fb:6c:e1:1f:22:97:72:e2:8f:
03:cb:51:a9:35:0a:03:49:60:60:79:b2:57:36:56:
01:3d:52:d6:5f:db:a3:42:6f:ad:cd:41:21:8e:af:
b4:59:18:c4:2e:b9:c7:4d:8c:9b:20:d2:07:1b:53:
5e:fe:63:1f:e2:12:99:26:e5:bd:c6:44:83:47:78:
cf:40:8b:fa:53:73:89:88:dc:27:af:4b:1b:3c:20:
32:a9:2d:c6:72:55:46:59:d8:02:af:8a:ca:8d:bd:
d9:f8:b7:f1:56:c2:0e:4f:7a:ca:29:08:4c:60:1e:
ea:c1:19:20:df:a3:f8:ac:e9:63:16:9d:57:f4:fb:
1c:4f:d2:ef:11:a2:5e:06:c9:f7:be:52:34:52:86:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:53:7A:87:4E:49:90:D3:E4:31:29:5E:15:71:D9:DD:49:77:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B6FF681F5211F08D20358ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:cf:61:e4:52:92:a3:23:b0:20:0f:98:bf:a3:0e:04:f6:58:
3c:f0:b3:b3:9e:da:56:33:d5:b3:5c:64:03:73:d0:66:b4:41:
a2:c5:3d:25:3f:5b:93:a6:3c:a8:8a:f0:8f:2e:e8:ce:25:1c:
cf:a5:15:52:e6:5d:30:b2:ba:09:c1:58:38:55:48:3d:a0:a8:
c4:88:74:b8:9c:e6:7e:de:90:19:b0:3d:25:1e:76:ad:a5:fb:
92:20:57:96:e5:38:c6:cb:8e:5c:b5:33:08:78:4d:c7:98:af:
f1:76:5b:a6:da:c3:6f:11:de:67:55:5f:df:e3:90:8c:4e:f4:
62:e3:86:72:c6:dd:8b:f4:c1:77:98:14:89:7d:6d:e7:d6:7e:
1d:c9:fe:99:1a:02:26:26:4e:0c:7d:24:ea:e1:4c:3e:bb:81:
d1:64:f6:88:24:13:aa:39:4f:42:dd:65:cc:eb:23:d2:5d:2a:
5b:8e:e1:01:15:2a:f0:31:b1:60:88:9f:e3:6b:63:cd:d9:f5:
2f:b1:56:b9:35:ad:7b:6c:3d:0c:72:62:50:fc:83:09:eb:0d:
ea:cc:c6:8c:db:d6:32:e5:f2:18:e1:73:8c:e5:b4:30:a6:55:
d0:b2:ba:aa:ab:8d:88:fa:17:b7:e4:1f:0f:c7:ad:43:cb:85:
91:75:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:25 2025 by rpki-client on console.sobornost.net