Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBE1BE216B911F080D4F1B16DB8BCC6.roa
File: EFBE1BE216B911F080D4F1B16DB8BCC6.roa (raw, json)
Hash identifier: mLf8T1zA1R5d1J+0/r+EXI4E4NI7XZLliChnLwanBVs=
Subject key identifier: D9:63:A9:B9:E2:5D:66:AB:6F:01:DC:80:FD:A7:04:77:0B:9E:85:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBE1BE216B911F080D4F1B16DB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:47:10 +0000
ROA not before: Fri 11 Apr 2025 09:47:05 +0000
ROA not after: Sat 17 May 2025 09:47:05 +0000
asID: 9304
IP address blocks: 45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.196.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84917 (0x14bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 09:47:05 2025 GMT
Not After : May 17 09:47:05 2025 GMT
Subject: CN=67f8e51d-a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:c6:0e:b1:3a:8b:75:22:65:b9:63:00:ad:
ff:f4:40:a9:c4:fb:99:e6:c0:ef:60:b2:80:4a:2e:
99:be:91:1a:af:13:5c:a0:f9:30:33:b8:ce:12:8e:
ef:a7:d4:89:7b:43:06:3b:f6:0b:53:08:13:86:0e:
67:62:ca:5a:5c:82:f6:ed:56:64:a5:77:bd:c4:a6:
bb:3a:ed:7a:79:f1:21:78:a2:69:9a:da:74:ea:39:
64:56:cd:2a:7c:fd:89:28:30:34:c4:8e:b4:5c:fc:
7c:3e:1e:36:35:b5:bd:1f:ec:ba:2a:4f:7a:ea:7d:
be:92:c4:1e:2d:31:04:80:1f:5b:81:26:11:1d:df:
94:86:55:65:f2:94:1b:2f:41:0b:8c:c6:4a:4b:8f:
9f:e9:06:f9:03:fe:62:ae:34:be:94:2a:ee:35:73:
46:16:e3:83:9f:a8:d8:63:38:c2:a5:4b:5a:2a:da:
e1:bf:37:4a:f6:38:5e:53:e3:10:0a:19:db:22:26:
1c:d0:dc:5f:5c:65:87:58:ca:1c:f0:45:ca:25:48:
49:96:b4:c5:cc:f2:14:ac:6f:5a:4b:70:cb:bc:02:
89:ca:ae:a4:51:48:02:19:ec:dc:15:fb:b9:7d:3f:
4f:db:03:b0:8b:b9:69:00:fb:09:92:ca:e0:7c:5e:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:63:A9:B9:E2:5D:66:AB:6F:01:DC:80:FD:A7:04:77:0B:9E:85:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFBE1BE216B911F080D4F1B16DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.225.0-45.196.228.255
Signature Algorithm: sha256WithRSAEncryption
5f:2b:f0:07:4d:3f:86:c5:d7:9b:7f:b3:6f:dc:b1:c3:bc:b4:
7f:5e:40:5e:08:95:9a:f4:32:72:df:49:51:35:36:1c:69:88:
9e:6d:cb:5c:78:1e:b0:f7:89:d5:d9:48:12:c7:a3:fc:db:3a:
75:3e:3f:14:f1:5d:35:11:9f:37:c4:16:78:57:e5:9b:51:1c:
b7:5d:32:d6:46:d7:68:82:14:b5:0f:2e:4c:a2:d0:5c:ee:c9:
e7:43:94:88:e3:47:2c:1a:c9:49:0f:a8:74:84:a5:bc:93:42:
da:e8:04:e7:26:2a:5c:fe:28:66:2c:79:de:99:e3:e8:86:bd:
de:79:46:cb:2a:8f:58:9d:02:53:81:e4:1c:f4:19:3a:82:df:
99:d8:81:9d:7f:33:28:63:0b:c9:7b:d8:ff:1d:ac:d0:22:07:
d9:b3:b5:2a:e5:17:55:83:18:bb:0c:ea:e3:29:47:c8:d6:58:
4e:6d:b5:46:d7:5b:ca:f3:a4:86:93:29:9b:ac:a7:f7:a0:d4:
a3:d0:85:96:13:78:57:b8:c5:7d:2c:da:37:36:87:f8:a4:e9:
67:0c:bf:aa:02:84:8d:1f:89:f6:16:3b:cf:6f:2a:75:76:bd:
8d:81:50:fa:4f:52:5c:a1:66:8c:f3:78:9f:43:6f:c1:e0:21:
6f:32:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:44 2025 by rpki-client on console.sobornost.net