Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4B962E519011F0967715DDDAE4EC9C.roa
File: EE4B962E519011F0967715DDDAE4EC9C.roa (raw, json)
Hash identifier: IWyW3WAnIy6nOD/TGx743MOQw67BEav79FSZ9IDmv2I=
Subject key identifier: 4D:E9:F3:67:A5:D6:24:D2:44:09:DE:1E:0C:65:1E:5E:64:A5:2C:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4B962E519011F0967715DDDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 06:52:17 +0000
ROA not before: Wed 25 Jun 2025 06:52:12 +0000
ROA not after: Thu 31 Jul 2025 06:52:12 +0000
asID: 44559
IP address blocks: 45.192.253.0/24 maxlen: 24
45.192.254.0/24 maxlen: 24
45.192.255.0/24 maxlen: 24
45.195.96.0/24 maxlen: 24
45.195.97.0/24 maxlen: 24
45.195.98.0/24 maxlen: 24
45.195.99.0/24 maxlen: 24
45.195.100.0/24 maxlen: 24
45.195.101.0/24 maxlen: 24
45.195.102.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.195.252.0/24 maxlen: 24
45.195.253.0/24 maxlen: 24
45.196.121.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
45.196.139.0/24 maxlen: 24
45.196.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89775 (0x15eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:52:12 2025 GMT
Not After : Jul 31 06:52:12 2025 GMT
Subject: CN=685b9ca1-fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:f7:5c:8f:5a:5f:a3:04:58:4a:ca:60:b4:
8c:68:5e:d9:29:5a:43:cd:5d:56:91:ef:31:f3:1e:
8e:d7:4e:ee:ec:25:b4:62:9c:5e:17:d4:20:6e:29:
df:c1:ff:16:b0:e7:ef:c3:48:cd:6c:23:fe:e4:01:
23:72:8d:8c:b4:0c:74:c0:13:b9:b5:ce:d4:b3:3d:
78:fe:97:d5:04:1c:bd:51:bd:7f:2b:cb:42:39:11:
89:95:3e:d7:e8:98:36:d8:ee:23:aa:4b:70:60:0c:
fe:eb:14:9f:cd:cb:6c:b3:88:cc:00:e1:04:d5:aa:
ca:05:34:34:e7:2f:26:ba:ad:cf:8d:19:ca:bf:d1:
ef:3d:30:bb:fd:dc:f8:84:66:73:38:0b:22:25:24:
a4:17:f9:db:36:e1:8e:ac:27:8f:56:2e:94:3c:b1:
e7:bf:2b:5f:6b:4b:44:d8:82:7c:d9:b3:f8:58:b7:
f7:23:05:20:f8:79:e7:9e:6b:2f:c7:23:af:24:6d:
30:32:f0:3f:20:a0:01:ab:73:83:a2:a4:bb:8b:56:
44:92:74:21:42:53:69:f8:ba:55:6e:40:82:14:60:
1a:cc:0c:26:3d:f8:6f:e4:bc:61:25:51:62:c1:61:
88:fa:40:8f:e3:6a:7c:7d:20:6a:4b:79:3b:01:0d:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:F3:67:A5:D6:24:D2:44:09:DE:1E:0C:65:1E:5E:64:A5:2C:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4B962E519011F0967715DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.253.0-45.192.255.255
45.195.96.0/21
45.195.252.0/23
45.196.121.0/24
45.196.124.0/22
45.196.139.0-45.196.140.255
Signature Algorithm: sha256WithRSAEncryption
19:57:c2:6e:b8:61:5e:33:90:a0:4d:20:81:9e:c8:48:48:38:
17:b5:55:2c:3e:39:a7:6b:41:cd:ac:31:54:c5:1a:84:b2:44:
7b:40:19:00:d4:0a:9a:42:fb:8d:ed:5b:15:9b:a3:ec:49:e9:
15:75:16:cb:74:ae:18:ab:1b:6f:3b:3c:ad:28:25:84:45:61:
b8:a7:33:34:4e:d5:ec:25:05:96:a3:33:2c:65:a1:3b:f3:3e:
11:75:02:fb:8a:c3:98:6e:4c:da:ed:1a:68:1f:5a:9d:c1:14:
6e:a2:47:e1:99:6c:02:72:29:f7:4c:7b:46:e4:d4:0c:f0:40:
bb:16:2c:f0:9f:55:04:ca:78:6d:0c:2a:5b:09:f7:53:c4:06:
d2:ee:c9:00:d4:29:9c:80:27:43:7e:39:be:c4:1b:5d:04:04:
e8:9c:a4:df:19:fa:26:49:a1:d8:d1:a9:a6:3d:8c:8d:2d:c2:
35:8c:1a:cf:af:65:36:09:4b:51:16:10:cf:53:85:01:9e:48:
2a:b3:0c:92:95:63:c5:d8:47:e8:f8:c3:59:ce:f6:63:e2:88:
e9:ad:50:4c:12:37:a2:cb:0f:18:f3:4d:aa:90:55:7c:bc:1f:
e1:0b:0a:d7:c0:79:5c:7a:d2:d3:eb:8c:93:ee:d4:78:93:3c:
47:58:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:29 2025 by rpki-client