Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5093E1C14D711F0BBAF3E0A6EB8BCC6.roa
File: F5093E1C14D711F0BBAF3E0A6EB8BCC6.roa (raw, json)
Hash identifier: 38f4ssNIUr47uRm3nWqvjZ9c8yNnzAoKpOTA3nxhQAs=
Subject key identifier: F2:33:B7:74:05:52:2B:FC:3F:7A:3B:1D:1C:79:31:03:AC:30:0A:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5093E1C14D711F0BBAF3E0A6EB8BCC6.roa
Signing time: Wed 09 Apr 2025 00:17:01 +0000
ROA not before: Wed 09 Apr 2025 00:00:57 +0000
ROA not after: Tue 29 Apr 2025 00:00:57 +0000
asID: 62468
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84721 (0x14af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 00:00:57 2025 GMT
Not After : Apr 29 00:00:57 2025 GMT
Subject: CN=67f5bc7d-d5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:42:bd:f2:0b:b7:17:d5:c1:0a:18:1d:53:
b6:d3:80:03:b1:f3:66:7c:1a:c7:65:38:99:93:82:
3f:48:e5:e1:30:c1:a8:3d:e8:a9:6e:c9:17:3f:ea:
6e:4c:9e:89:f7:e9:0b:f1:62:a1:3e:d9:05:41:e9:
cb:ff:32:e4:b4:74:cd:c7:4a:44:c8:2b:54:40:72:
86:40:82:21:33:ce:86:39:ba:58:c5:42:8a:b1:2d:
ee:ff:55:17:6d:e0:da:7e:e6:59:06:42:bc:30:48:
fa:61:ac:58:be:cc:35:99:0c:eb:f5:bf:5c:52:7a:
7b:39:18:44:d8:df:bc:75:e6:e0:04:b5:4d:c5:61:
6a:e3:5f:df:e7:bd:64:de:2e:a3:64:88:48:81:c1:
f3:37:f3:8d:5c:90:45:0e:3a:77:7c:2f:8b:7e:f5:
0b:81:f4:52:1c:94:7b:8d:61:9d:e9:b5:fc:ac:f9:
6c:36:aa:38:f7:30:30:69:24:87:0c:7a:8e:d6:d7:
3f:e9:e5:4e:a5:ad:d3:d0:63:ac:3c:b5:35:2b:91:
a2:af:f0:94:8f:f0:df:c6:68:fe:50:25:cb:ba:59:
16:90:57:3e:24:5c:eb:02:85:89:aa:78:ca:88:bd:
cf:88:31:3b:83:f7:e8:7a:c0:cc:6b:f0:84:a2:2f:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:B7:74:05:52:2B:FC:3F:7A:3B:1D:1C:79:31:03:AC:30:0A:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5093E1C14D711F0BBAF3E0A6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
96:51:cd:3b:67:4d:ea:52:3a:08:4f:00:0d:63:54:f2:f3:c0:
80:24:ca:3b:33:a1:75:be:38:b5:d0:9f:ea:e0:b0:34:6c:47:
bb:bd:73:10:08:8b:ff:dd:2b:e3:46:a2:f8:0b:fd:2a:e7:34:
6c:93:50:4b:8b:9a:c5:ff:7d:aa:13:16:f8:5c:04:c5:4a:f1:
35:cd:b2:28:09:3b:5e:0b:58:5c:54:41:37:3e:4d:43:c0:7a:
cd:23:fe:14:5c:e6:a5:db:b0:98:2f:2d:cf:27:a5:3d:3a:4c:
e6:3e:b5:48:c5:8d:bb:2b:6c:34:78:b2:4b:dd:7d:f3:f8:f1:
56:73:1f:78:74:68:7e:c3:97:bd:f2:5d:d2:2a:3f:d8:d5:e5:
4e:a7:21:22:02:db:3a:e3:46:8a:e8:c4:36:73:73:ff:bc:0b:
25:96:86:a8:db:fc:32:f2:1c:d9:80:b6:b5:1c:7d:5e:39:ab:
ff:43:dd:80:93:e4:a2:10:03:51:16:8f:26:e5:00:65:13:d8:
f7:a0:be:8e:b2:90:31:a7:e5:19:2a:7e:70:6b:52:ee:df:d5:
e4:bb:61:04:67:a1:e4:33:e0:d4:83:ec:be:17:7c:9a:2d:c8:
9a:9a:8b:4b:46:c5:29:6d:c7:b1:d1:e7:10:c5:49:fc:c1:97:
7f:af:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:56:19 2025 by rpki-client on console.sobornost.net