Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2581A79A5CE611F0AEF77D97DAE4EC9C.roa
File: 2581A79A5CE611F0AEF77D97DAE4EC9C.roa (raw, json)
Hash identifier: xWPfUl4ZvI9AsJz9DeRWMIDKxgIOk7Hx1Ej2UMsU0yI=
Subject key identifier: 1A:07:F6:DF:F8:62:07:45:4E:D3:F0:9F:41:20:23:48:E1:05:E7:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016426
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2581A79A5CE611F0AEF77D97DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:59:59 +0000
ROA not before: Wed 09 Jul 2025 16:59:54 +0000
ROA not after: Wed 10 Sep 2025 16:59:54 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91174 (0x16426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 16:59:54 2025 GMT
Not After : Sep 10 16:59:54 2025 GMT
Subject: CN=686ea00f-38fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:a0:46:19:49:64:20:d4:e5:3e:19:59:00:
a6:ed:e3:3c:7c:a2:0b:ef:ca:b5:55:d6:9b:8c:a1:
4d:de:59:0e:dc:e9:91:70:ea:f8:70:aa:b1:b7:13:
e4:4e:00:01:cf:98:59:ab:0e:d7:41:62:9e:e3:6c:
ff:a4:4d:d9:53:02:8b:cd:45:ad:7f:22:2d:f9:5e:
d3:20:66:f8:59:48:b7:9b:6b:51:4c:b2:71:8b:cc:
05:4b:4d:a6:f1:26:39:4b:be:8b:1e:05:6a:28:34:
01:27:0e:67:64:34:66:64:50:9c:cd:f0:5b:02:74:
41:dc:8f:1d:6e:32:49:3c:1b:3d:e5:2d:c4:6e:80:
43:02:25:16:40:83:94:73:3b:79:d1:c3:85:3f:0f:
1a:44:59:1e:34:81:bd:9c:23:1e:3e:7d:8f:76:3d:
95:7c:0a:6b:5e:a5:e0:40:22:81:63:32:08:59:d7:
e3:3a:c3:ce:90:f0:ed:f7:26:8a:95:e7:8f:37:47:
6b:2d:90:49:22:39:3c:9c:62:e8:42:11:d2:f1:be:
f4:f9:5f:06:0e:aa:db:5f:f3:ab:cf:a2:73:cd:db:
39:89:f0:65:fd:ee:e8:da:51:90:54:17:57:e3:b9:
da:af:31:f5:2e:70:6b:ca:b6:e6:6e:12:e5:47:48:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:F6:DF:F8:62:07:45:4E:D3:F0:9F:41:20:23:48:E1:05:E7:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2581A79A5CE611F0AEF77D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
45.195.133.0/24
45.198.228.0/22
45.201.28.0-45.201.32.255
45.204.147.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
17:36:f4:26:1d:ea:e8:a3:0c:24:59:05:6f:e2:3a:be:b6:42:
e5:09:1e:0e:ce:23:9e:30:92:67:31:4d:53:26:3e:91:1b:ca:
aa:c2:ed:3b:2f:40:f9:9c:a0:57:12:ed:bc:5c:c1:a0:d5:c5:
96:9e:34:c3:03:b6:3e:79:84:db:0c:36:e4:b6:4e:d4:ac:d5:
d8:78:75:eb:be:5a:1e:d7:50:fd:8a:a2:0b:35:f8:eb:85:ea:
40:ba:f6:c0:6d:4f:70:2b:cd:cc:29:0f:d5:67:1e:d5:50:0d:
23:01:26:b4:d6:71:57:40:52:61:90:d0:9a:d4:ad:a1:54:89:
e3:13:d3:b1:e3:5b:73:43:4d:78:6c:88:f4:69:34:a8:97:2f:
5e:47:4e:87:f9:00:d2:95:83:59:ae:c6:2b:4d:0d:e9:cd:6b:
35:a7:d8:12:56:a6:26:45:ce:5d:c7:05:80:ad:08:8a:20:2d:
d2:72:e4:a1:8f:aa:81:ab:f2:cc:5b:00:4f:d5:bc:bf:e5:cc:
d3:0f:b0:8a:22:8c:69:5e:04:c7:4d:b2:b9:f0:f8:a6:a9:a3:
d8:87:c8:f9:44:f0:f7:3c:1e:da:c1:44:74:4e:f2:10:c1:f3:
c4:d9:1e:a3:28:b4:3e:da:fb:ce:44:86:e1:c9:60:21:9b:b3:
cf:44:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:27:47 2025 by rpki-client