Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B549A1D6356B11F0A8AE89E1DAE4EC9C.roa
File: B549A1D6356B11F0A8AE89E1DAE4EC9C.roa (raw, json)
Hash identifier: tEbVTD40RZKrkMBCdzp2SxYG/4KhZwoEU50JULsXjY8=
Subject key identifier: 84:46:DF:4B:12:59:50:69:10:D2:84:02:8D:F2:82:9C:E6:E9:7A:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B549A1D6356B11F0A8AE89E1DAE4EC9C.roa
Signing time: Tue 20 May 2025 11:15:17 +0000
ROA not before: Tue 20 May 2025 11:15:12 +0000
ROA not after: Fri 27 Jun 2025 11:15:12 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87616 (0x15640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:15:12 2025 GMT
Not After : Jun 27 11:15:12 2025 GMT
Subject: CN=682c6445-f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:a0:08:cd:89:a9:b0:55:d6:40:95:a9:b5:
10:7c:bb:08:63:1a:33:a5:b0:94:e1:22:b0:5b:6b:
5c:5f:ef:ca:c8:d6:a6:45:f4:ad:73:81:8a:51:e8:
09:1e:47:ad:6e:f6:de:a6:6c:bc:93:13:ba:72:19:
62:86:ea:a1:e6:81:d2:17:42:6a:80:ed:c5:b9:10:
af:61:8b:0a:ba:dc:46:50:32:d2:b2:7c:fe:d6:13:
d6:11:ae:7a:d8:7d:e0:9f:28:95:42:7b:39:04:14:
93:0b:19:ea:08:84:16:c5:64:a2:7d:5e:25:6a:23:
1c:16:0c:c0:53:da:18:e2:52:42:89:49:98:82:0c:
65:67:3c:71:43:2c:4f:11:48:2a:5a:7f:8b:d9:2c:
d6:eb:df:94:d0:38:4d:4d:5c:49:94:0e:29:bb:b5:
3c:60:0e:6d:35:e7:c1:1c:6b:7a:4e:63:ad:fc:c0:
2e:c1:68:ff:dd:7d:0b:7f:1f:5f:96:09:19:5a:2b:
2c:4b:55:24:d7:85:5a:5e:2f:e2:a7:ac:ff:c9:f7:
c0:b3:00:5d:50:3e:e9:8a:e4:67:ba:a9:3f:40:6c:
85:51:5c:43:b8:c7:14:a0:47:35:64:13:18:8c:7d:
23:b9:d5:67:28:e3:00:63:2c:bf:64:35:42:b0:91:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:DF:4B:12:59:50:69:10:D2:84:02:8D:F2:82:9C:E6:E9:7A:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B549A1D6356B11F0A8AE89E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.199.212.0/24
45.199.216.0-45.199.220.255
45.199.231.0-45.199.240.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
85:66:41:eb:08:14:8c:83:04:0e:72:1d:27:5b:93:10:68:73:
cf:a5:90:5f:e8:0d:18:fb:d2:7f:4f:aa:33:7b:04:84:47:16:
eb:f8:ed:1b:14:61:8e:b3:c3:24:13:27:98:60:ef:c6:58:e0:
16:f1:8e:08:44:2b:a1:40:35:c2:e8:24:9d:56:6c:8c:5b:b2:
43:93:5c:05:cd:c2:a8:00:c0:de:a9:5d:66:eb:cd:fe:aa:c6:
74:37:4a:05:4c:ed:e6:bb:3e:6b:7f:87:1f:d2:eb:e9:7c:21:
00:2c:68:26:f5:cd:22:99:0c:60:51:77:e0:1d:49:e6:1d:e7:
1f:d9:7f:3c:fc:2b:f5:81:94:05:05:19:a1:ad:6c:6e:f2:9b:
dd:d6:3a:f9:4f:56:c2:fe:cb:3e:73:ba:22:8f:5f:59:2a:34:
36:3f:5d:58:39:72:15:19:1d:00:f7:5c:a7:b8:58:b5:29:86:
11:f8:eb:72:42:25:ef:e0:af:03:8e:8a:bf:13:2b:4a:e4:17:
8d:37:29:c8:75:2f:b7:fd:11:16:21:24:66:c6:6f:60:03:0e:
32:62:c9:6f:ba:1b:37:73:77:99:e3:e4:a0:a5:2a:65:fb:74:
c2:ac:5f:3c:bf:35:64:37:30:ec:39:6a:14:c0:72:30:82:20:
e6:37:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:58 2025 by rpki-client