Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8726DCA3E2D11F0BE265DA4DAE4EC9C.roa
File: E8726DCA3E2D11F0BE265DA4DAE4EC9C.roa (raw, json)
Hash identifier: QTAX5SJ+DQh1uPdqqVrIOiO1aIGHR6GFmXIJ6zx8njA=
Subject key identifier: AC:22:3B:CF:49:2A:A7:63:C9:83:41:C3:18:AE:B5:95:C1:BB:0B:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01592E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8726DCA3E2D11F0BE265DA4DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:45:35 +0000
ROA not before: Sat 31 May 2025 14:45:30 +0000
ROA not after: Mon 07 Jul 2025 14:45:30 +0000
asID: 395793
IP address blocks: 45.192.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88366 (0x1592e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 14:45:30 2025 GMT
Not After : Jul 7 14:45:30 2025 GMT
Subject: CN=683b160f-f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:25:8c:40:78:a8:4a:be:f3:3f:81:89:6e:
67:6c:b8:90:2d:ab:61:2c:1d:42:e5:4c:3e:42:c7:
b2:a8:0b:3c:71:a3:68:d9:b5:c2:1b:14:e2:4d:ef:
81:f6:de:2b:e0:df:b1:86:37:6f:26:da:e8:e3:14:
79:02:72:80:6d:0e:8e:78:24:89:21:73:ca:97:2b:
e5:64:3e:4f:e2:5a:90:c3:54:25:e6:a1:07:56:e2:
bb:2c:9d:e9:93:aa:2d:95:73:6f:38:95:76:1b:21:
95:0d:f5:10:81:02:94:76:a2:cb:36:a9:80:6e:a0:
ec:b7:a3:c6:f0:c3:53:dc:cb:e1:61:b4:68:58:df:
dd:dc:ae:42:bc:b8:81:ce:3b:4b:07:15:0c:22:a0:
1c:af:61:10:be:08:a0:e5:20:77:cc:d1:01:c6:3d:
99:b3:0f:53:f0:8a:1a:b7:d9:34:f5:f2:a4:45:e8:
b4:b9:48:cd:16:6b:3f:ba:c0:fd:23:e3:d7:19:7f:
19:56:b1:fb:5c:10:35:85:70:44:64:fe:1c:19:94:
cb:dc:80:74:4d:9f:b6:2b:31:b7:82:fb:9f:19:6e:
aa:26:c7:44:f1:2d:20:cb:f7:a6:a6:34:bb:5a:ae:
ee:b3:59:3f:79:57:76:79:f7:3d:43:2f:35:3d:3c:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:3B:CF:49:2A:A7:63:C9:83:41:C3:18:AE:B5:95:C1:BB:0B:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8726DCA3E2D11F0BE265DA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a0:45:9e:8c:b0:8c:5b:1f:39:01:91:d3:cd:7a:6e:ec:a7:
72:a8:06:bc:27:b9:82:92:74:ee:db:74:10:ab:4e:f5:19:b1:
36:cc:3e:91:78:99:72:3f:6e:61:b2:f4:72:58:7a:a2:a9:ba:
69:28:1e:a0:a6:7d:67:37:d3:64:25:0e:86:8b:4a:aa:26:60:
56:1c:12:87:95:8f:72:fb:74:e5:36:44:8c:5e:43:12:59:db:
af:95:13:94:95:dd:55:86:db:99:e2:97:57:ee:9b:5b:bc:7a:
c3:c0:21:7f:f5:57:ac:bc:5b:e6:f0:5c:e3:c0:f9:7e:29:3b:
4c:a4:5a:12:18:51:55:fe:5a:7d:e7:f1:6f:ef:fe:0e:be:91:
65:33:d1:71:64:6d:98:2d:e6:ea:39:72:17:74:d2:b9:7e:ab:
e4:dd:cd:5d:9c:6b:94:1c:e4:9c:39:00:51:f3:da:05:ba:57:
c1:eb:ec:e6:f5:e7:a6:35:26:b0:39:69:26:d7:6d:1f:bb:b0:
17:2c:a9:5a:40:c5:ce:2b:17:f7:f5:20:b3:d7:85:bc:05:1a:
54:e4:18:0f:0f:c0:35:ee:37:fa:59:f1:e6:8f:b6:ad:85:61:
5f:d9:d9:e7:bc:19:30:07:22:12:92:b9:c0:f3:4c:1c:d7:11:
59:ed:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:13 2025 by rpki-client