Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D36C29D6210C11F085EFE58FDAE4EC9C.roa
File: D36C29D6210C11F085EFE58FDAE4EC9C.roa (raw, json)
Hash identifier: oyrgvUCYJy4C7Hpa0NsPR2IsV/O0FW103G9BCeuGCW4=
Subject key identifier: 67:7F:9A:44:EB:36:6F:F6:9F:A4:A4:F8:72:3A:A7:D6:72:D1:AF:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D36C29D6210C11F085EFE58FDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:05:42 +0000
ROA not before: Thu 24 Apr 2025 13:05:38 +0000
ROA not after: Sat 03 May 2025 13:05:38 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85596 (0x14e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:05:38 2025 GMT
Not After : May 3 13:05:38 2025 GMT
Subject: CN=680a3726-cbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:85:b1:ef:89:a3:fc:b0:29:05:4c:95:4b:
cd:b2:bd:9d:5d:6c:f9:08:74:d4:14:a3:1b:31:21:
3d:a7:dd:ef:c8:f2:7a:50:32:81:d7:44:9d:f5:f3:
fe:39:73:65:e7:9d:ee:af:b3:f6:9f:01:24:47:20:
d4:e0:86:17:c9:aa:c7:31:ad:69:96:77:25:ce:b6:
98:5b:51:fc:b8:54:9a:b9:e9:79:d0:d8:47:c6:d0:
4b:49:be:dc:ee:27:b6:88:95:af:c1:3b:ab:c1:9d:
46:50:62:f5:2d:95:28:e0:ba:3f:fd:5c:b4:7c:fc:
80:2a:27:c8:da:db:70:9c:32:cf:c6:b5:ab:8e:c5:
7c:a8:ca:01:37:6f:11:dc:71:15:f5:0f:0f:d3:a9:
e6:cd:32:4f:fe:2d:a0:a4:35:d5:f4:4b:d2:85:77:
f2:17:ce:75:35:5c:a8:8c:9f:3b:b3:b9:16:bf:fb:
aa:e1:36:3e:20:26:1e:15:80:78:85:d0:cd:10:55:
fe:4e:ff:93:45:b3:72:02:a0:12:8f:91:39:26:fd:
60:07:c5:68:09:a4:47:44:37:16:4a:2c:57:90:d2:
d6:e1:aa:56:57:7f:64:d6:cd:cf:c6:e2:8c:be:95:
8d:cf:fc:eb:f0:65:51:0d:55:a4:7b:a0:4f:1c:be:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:9A:44:EB:36:6F:F6:9F:A4:A4:F8:72:3A:A7:D6:72:D1:AF:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D36C29D6210C11F085EFE58FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:7d:c9:03:e4:c1:a4:36:2f:05:02:99:4c:57:ce:cd:0f:2f:
26:6e:41:3e:29:46:c9:85:a1:a7:61:dd:f2:6d:73:6f:df:92:
72:41:1a:5f:cb:c9:cf:d7:71:d2:0d:2d:9d:1a:a7:70:a9:d4:
65:f5:38:6b:38:81:a9:6b:4a:fc:d7:1a:7a:6d:79:07:6d:4c:
ea:22:1b:92:b6:59:6a:3d:dc:17:b2:bb:82:50:2d:15:18:25:
f0:f3:7d:ed:4f:d2:6b:9d:4f:90:24:70:10:54:f0:1f:9a:e1:
ff:32:13:81:75:f0:d8:75:17:25:6d:9f:03:f4:25:76:7c:6c:
b9:3d:9a:da:47:5f:3f:d0:68:fb:be:e6:b9:d8:f5:e9:65:08:
5e:57:54:4f:f8:99:db:ae:45:56:19:71:a3:e6:c2:79:61:71:
55:39:eb:3f:db:ff:a4:20:79:cc:6d:6a:1b:5c:56:90:cb:fa:
7b:c4:ea:27:ce:d5:bb:a7:3f:15:57:c3:13:1f:22:7c:52:05:
c3:98:78:cc:25:61:9d:5d:5c:3c:a6:ab:32:3c:05:4b:5e:07:
fb:03:30:be:a4:38:67:a1:05:f1:68:90:83:92:a0:a2:0d:b8:
b3:46:cc:34:77:1e:d4:fe:c9:af:12:12:db:0a:07:1c:37:21:
03:34:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:26 2025 by rpki-client on console.sobornost.net