Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC639CA331911F08ABFA6D6DAE4EC9C.roa
File: 5BC639CA331911F08ABFA6D6DAE4EC9C.roa (raw, json)
Hash identifier: P486G56lY++utwm1zG7jG1uUE1POHso21hYKlvnnqVw=
Subject key identifier: 64:3C:8B:BE:E6:71:65:E2:B9:5F:75:5C:56:98:42:F1:21:AE:84:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC639CA331911F08ABFA6D6DAE4EC9C.roa
Signing time: Sat 17 May 2025 12:20:46 +0000
ROA not before: Sat 17 May 2025 12:20:41 +0000
ROA not after: Fri 08 Aug 2025 12:20:41 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87385 (0x15559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 12:20:41 2025 GMT
Not After : Aug 8 12:20:41 2025 GMT
Subject: CN=68287f1e-bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:39:fc:e7:cb:42:6c:f4:08:cd:80:e4:49:
36:93:3c:1c:ed:ae:4b:af:ca:bf:d3:ec:cc:44:54:
3a:fa:f8:5e:a2:e3:ec:b2:60:92:88:9f:f4:a2:50:
f3:5c:b4:11:02:79:62:bb:30:04:82:69:a3:7a:1e:
cd:40:cb:5e:63:51:34:71:45:ce:c7:01:fd:fd:57:
dd:0b:4d:a5:0e:63:97:6d:ac:18:29:cf:a4:39:f0:
65:b1:0b:b7:38:b0:6d:f8:6f:27:08:6e:76:76:e1:
49:0e:1b:3c:87:3c:26:89:59:fc:da:65:53:8d:cd:
19:79:c9:d7:a0:6e:35:eb:25:9b:a7:79:a0:2d:7f:
25:e4:30:39:8c:36:d1:13:9d:3b:e0:21:d8:22:ea:
49:87:fd:5e:87:fa:0b:bd:58:71:cf:a8:19:48:90:
84:03:a2:4e:d8:22:db:93:9f:ce:53:3e:aa:5d:56:
de:23:91:56:ae:4e:2d:9e:b3:84:e8:3f:b6:5c:f6:
ae:b3:3c:3b:20:ca:47:f5:2d:58:84:cc:95:5b:69:
09:dd:6b:48:65:9e:91:6f:45:9f:1c:ca:8b:46:0e:
a8:5a:aa:63:fe:bb:9e:25:9a:3f:65:63:8e:52:4a:
fe:2f:1f:58:9b:4d:22:0f:41:57:bf:d2:80:74:20:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:8B:BE:E6:71:65:E2:B9:5F:75:5C:56:98:42:F1:21:AE:84:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC639CA331911F08ABFA6D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
86:a6:07:94:3c:fd:00:70:10:5a:3c:90:a9:30:52:79:2d:6d:
e3:f9:d0:ab:a5:50:f2:93:c5:28:bc:47:5e:02:20:5c:6d:00:
14:af:e1:35:e2:2b:8c:cb:b0:a8:3e:d1:ea:da:62:db:89:69:
3b:83:f6:55:6e:e7:66:60:2c:c0:f6:18:9e:82:9c:94:51:80:
6e:62:56:66:06:07:70:ce:6a:df:a4:25:d7:03:ca:c6:df:de:
fa:7a:15:fb:d9:f0:b0:9b:af:1a:63:bc:93:e1:d0:50:15:85:
11:78:47:1d:d5:a6:01:56:9e:a3:c2:c3:6f:51:f1:d5:fb:38:
78:42:e1:95:6b:d9:cd:cc:74:6e:28:d2:7a:b9:0a:ec:ff:a8:
06:a9:84:c6:0c:81:97:44:5b:64:50:61:a6:ee:5a:35:90:14:
f5:dc:6c:03:e8:d0:89:ca:c4:04:42:cd:c7:0a:0e:b9:88:37:
c4:92:87:f9:a6:0f:fd:f9:9a:80:1e:c1:d1:08:af:c2:94:cb:
ff:0d:5c:9e:a1:a4:ba:f6:99:ac:9f:2b:a7:7d:ab:ab:0f:1a:
26:e9:63:06:e2:11:a1:f2:df:5b:cc:34:66:be:b5:52:bc:af:
9b:bc:2a:b6:71:f5:c0:82:00:98:20:30:78:9e:70:cf:8c:71:
53:55:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:37:33 2025 by rpki-client