Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBE3FD781CFC11F0A58DF3E6DAE4EC9C.roa
File: DBE3FD781CFC11F0A58DF3E6DAE4EC9C.roa (raw, json)
Hash identifier: LkX2rOV0B1IsBrEHWydZ2pqnkfrSLRYWau6d2++w6OY=
Subject key identifier: 7A:D2:B4:4C:79:DC:E5:32:6A:40:46:CA:7F:7C:83:3B:B6:D6:87:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBE3FD781CFC11F0A58DF3E6DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:01:20 +0000
ROA not before: Sat 19 Apr 2025 09:01:15 +0000
ROA not after: Mon 26 May 2025 09:01:15 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85376 (0x14d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 09:01:15 2025 GMT
Not After : May 26 09:01:15 2025 GMT
Subject: CN=68036660-477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:18:c9:1b:6b:06:10:18:a6:c4:26:85:a7:
8c:34:d3:e5:ae:31:64:45:d4:96:19:bb:bc:c7:c8:
ac:a8:cf:19:ea:b0:57:c8:18:8d:51:40:8b:78:50:
6e:f7:c9:14:f7:9b:56:8a:e9:a4:77:87:07:2d:cb:
e6:ce:89:7d:99:89:69:34:77:b3:70:dc:11:d6:19:
5b:ef:23:cd:a9:6b:66:ac:dc:0f:47:c8:44:4d:91:
39:e1:49:70:62:dc:87:7b:fd:4b:2b:f4:38:81:23:
ed:9d:ba:d3:99:14:b2:c1:e4:73:55:c8:73:72:85:
90:45:f6:20:f6:27:3b:5a:64:51:9b:bd:f2:bf:19:
99:cd:78:00:ca:53:d2:dc:0e:af:2e:99:d9:d0:e6:
a1:3d:39:b5:ec:32:46:4c:9a:ab:cd:40:9f:ad:55:
cb:a6:9d:74:df:57:5b:bc:54:85:aa:3d:33:ac:a6:
26:d5:d1:9e:8b:32:b6:02:88:38:9f:6a:bf:13:65:
6a:53:45:7e:b4:70:86:16:52:08:7a:28:fc:53:6b:
f2:73:88:1e:58:24:e6:1a:e3:bc:3d:36:3a:c6:4a:
50:15:0f:92:fe:93:c2:eb:db:f1:02:ca:2d:aa:e4:
92:4e:5d:44:d2:44:3d:e0:cb:1c:5d:e3:4f:ab:3b:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:B4:4C:79:DC:E5:32:6A:40:46:CA:7F:7C:83:3B:B6:D6:87:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBE3FD781CFC11F0A58DF3E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:85:87:2f:68:d3:f5:55:fe:e2:d8:77:05:30:67:57:72:ca:
e6:dd:0f:8d:c0:fc:be:0f:4f:94:7f:13:5e:e7:a2:44:d3:33:
af:b3:29:b3:18:c4:0e:b8:00:2c:a1:dc:d7:6e:18:82:2a:4b:
1b:5f:32:46:9e:9d:89:e6:e9:19:9c:0b:81:27:29:fd:72:db:
b0:75:49:87:28:02:d6:05:d9:47:2c:ed:7b:46:14:dc:05:9e:
b9:2e:e7:bb:9c:81:cd:61:57:c8:e3:65:5c:14:4b:ee:47:f4:
78:f4:11:03:1d:40:87:fd:58:66:13:af:31:99:85:3f:d6:2b:
c1:bc:4d:2d:81:3e:55:1e:73:68:0b:1c:df:aa:e1:b7:f7:f1:
58:7e:65:55:48:86:d2:28:8b:09:0d:da:76:34:c0:e7:07:fb:
2b:d9:ed:76:36:a4:96:24:3b:c1:04:b3:2c:fa:1a:b3:e4:b3:
ce:20:24:e8:95:67:33:4d:ca:e7:41:42:be:c5:27:62:d0:28:
31:a3:d2:ab:0d:fa:3e:84:28:c0:c8:33:11:4f:41:33:eb:d6:
77:45:dc:02:85:cb:c6:b3:63:53:31:55:68:7e:68:15:95:d8:
b3:57:56:cc:1b:4b:38:48:1d:7b:20:d3:78:95:b8:05:d1:18:
ef:f8:33:c5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU2AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE5MDkwMTE1WhcNMjUwNTI2MDkwMTE1WjAYMRYw
FAYDVQQDEw02ODAzNjY2MC00NzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArCoYyRtrBhAYpsQmhaeMNNPlrjFkRdSWGbu8x8isqM8Z6rBXyBiNUUCL
eFBu98kU95tWiumkd4cHLcvmzol9mYlpNHezcNwR1hlb7yPNqWtmrNwPR8hETZE5
4UlwYtyHe/1LK/Q4gSPtnbrTmRSyweRzVchzcoWQRfYg9ic7WmRRm73yvxmZzXgA
ylPS3A6vLpnZ0OahPTm17DJGTJqrzUCfrVXLpp1031dbvFSFqj0zrKYm1dGeizK2
Aog4n2q/E2VqU0V+tHCGFlIIeij8U2vyc4geWCTmGuO8PTY6xkpQFQ+S/pPC69vx
AsotquSSTl1E0kQ94MscXeNPqzvfhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHrS
tEx53OUyakBGyn98gzu21odyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQkUzRkQ3ODFDRkMxMUYwQTU4REYzRTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIoMA0GCSqGSIb3DQEBCwUA
A4IBAQBNhYcvaNP1Vf7i2HcFMGdXcsrm3Q+NwPy+D0+UfxNe56JE0zOvsymzGMQO
uAAsodzXbhiCKksbXzJGnp2J5ukZnAuBJyn9ctuwdUmHKALWBdlHLO17RhTcBZ65
Lue7nIHNYVfI42VcFEvuR/R49BEDHUCH/VhmE68xmYU/1ivBvE0tgT5VHnNoCxzf
quG39/FYfmVVSIbSKIsJDdp2NMDnB/sr2e12NqSWJDvBBLMs+hqz5LPOICTolWcz
TcrnQUK+xSdi0Cgxo9KrDfo+hCjAyDMRT0Ez69Z3RdwChcvGs2NTMVVofmgVldiz
V1bMG0s4SB17INN4lbgF0Rjv+DPF
-----END CERTIFICATE-----
Generated at Thu Apr 24 06:53:12 2025 by rpki-client on console.sobornost.net