Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66DC3501C8011F0B6E9859FDAE4EC9C.roa
File: D66DC3501C8011F0B6E9859FDAE4EC9C.roa (raw, json)
Hash identifier: ehZYm8dV+/85BLHZTQpuBtOsHuLPdzsEQC0VhF3UjVc=
Subject key identifier: E5:BC:D6:C3:74:B6:38:BE:BC:65:D3:DC:2B:4C:A8:46:6C:71:FF:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66DC3501C8011F0B6E9859FDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:13:33 +0000
ROA not before: Fri 18 Apr 2025 18:13:28 +0000
ROA not after: Tue 27 May 2025 18:13:28 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85319 (0x14d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:13:28 2025 GMT
Not After : May 27 18:13:28 2025 GMT
Subject: CN=6802964d-0a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:ca:e2:6b:1a:6c:09:f0:c5:98:e2:96:3a:
ed:a6:52:c0:e1:84:48:56:89:06:4d:54:73:ae:93:
aa:3d:f0:b8:88:0e:8d:c1:b1:5c:61:1d:29:f2:03:
76:3c:42:ac:00:58:a7:65:1c:f6:d3:f3:49:e7:fb:
7e:5a:cc:33:1c:7f:07:61:17:1e:bd:1c:3c:35:ba:
af:15:b8:37:b2:4e:45:19:f6:41:d4:0e:08:a7:b7:
16:b8:df:e3:26:03:a6:59:b0:19:81:8f:ab:35:57:
8c:ee:df:ae:84:5d:17:41:83:74:5f:cd:db:49:b4:
a9:79:03:79:c5:44:a4:e3:09:7b:f0:68:fc:df:40:
80:53:f6:2b:12:9e:94:3c:f5:7a:ea:f2:60:ee:d3:
64:f0:97:dc:bf:ef:00:05:4e:f5:89:b1:f1:69:e1:
85:f8:ae:11:a7:0d:e9:ea:cb:5a:6a:aa:b9:b9:4c:
fd:5b:9c:46:4e:d0:13:da:5d:3e:3d:ab:a5:18:42:
58:fb:8a:85:78:35:d3:21:f8:6a:f9:14:f2:b2:28:
5e:d4:6d:dd:40:cf:96:86:ff:33:89:b3:7b:9b:7f:
c7:c3:00:84:f9:b8:1e:74:09:9a:90:e9:9f:8b:b3:
13:b0:d3:bc:85:bb:92:32:23:12:ff:2a:91:dd:ce:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:D6:C3:74:B6:38:BE:BC:65:D3:DC:2B:4C:A8:46:6C:71:FF:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66DC3501C8011F0B6E9859FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.199.212.0/24
45.199.216.0-45.199.220.255
45.199.231.0-45.199.240.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
08:41:d5:28:84:81:c8:a1:ff:b0:b9:6a:f3:1f:3a:a8:23:57:
f7:eb:b5:2d:56:a9:fb:a1:fd:94:0d:1f:64:5a:27:b4:61:30:
71:2b:62:31:df:21:20:86:e5:de:d9:09:93:a5:5f:28:0d:d1:
64:7e:2a:85:dc:3f:e2:2a:c3:43:33:31:dc:d7:83:de:ab:11:
47:ab:73:97:5c:5d:24:06:75:83:b9:2f:ac:76:a8:7a:1e:7d:
99:13:3c:92:32:45:c9:da:7a:3b:87:ad:7d:52:b7:33:7c:9a:
23:26:53:b3:cd:29:05:a4:56:dc:5c:58:49:3c:d8:66:9d:6f:
2a:9b:c6:d4:17:7f:f6:85:73:c9:4e:f2:b2:f9:2c:af:04:49:
d1:7c:4c:2b:45:b4:b4:42:05:7c:1c:6c:60:e3:6f:95:10:22:
e9:fe:2d:a2:2a:e4:19:58:01:96:43:50:fc:00:a2:88:9b:2e:
e4:04:4f:6d:65:b1:30:ee:4d:b7:f0:80:86:12:22:b0:2d:4a:
aa:90:39:13:e6:40:14:03:16:bf:0a:3d:72:db:a9:47:5c:0e:
7e:69:cd:3b:ff:ba:cc:66:17:24:84:e7:56:c1:66:d9:4c:ce:
ee:66:dc:05:a9:be:e7:52:70:67:ea:16:14:02:c4:43:29:62:
44:c1:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:20:52 2025 by rpki-client on console.sobornost.net