Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEE9A40356011F0A9419D9BDAE4EC9C.roa
File: EAEE9A40356011F0A9419D9BDAE4EC9C.roa (raw, json)
Hash identifier: hPsGzqva6FM3j6MjBuscKCNMaxPQRMhEYydn4vR62ds=
Subject key identifier: B5:AE:06:70:2C:D4:20:8A:3A:0E:45:EB:FE:48:90:3E:BB:D1:B5:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015624
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEE9A40356011F0A9419D9BDAE4EC9C.roa
Signing time: Tue 20 May 2025 09:58:03 +0000
ROA not before: Tue 20 May 2025 09:57:58 +0000
ROA not after: Fri 27 Jun 2025 09:57:58 +0000
asID: 202656
IP address blocks: 45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.199.206.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87588 (0x15624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 09:57:58 2025 GMT
Not After : Jun 27 09:57:58 2025 GMT
Subject: CN=682c522b-f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:d5:4a:aa:4d:bf:53:f6:6a:86:b7:11:af:
4c:5b:3f:a3:78:3e:70:c6:dd:f0:bd:88:f3:32:d2:
5c:51:48:d6:d7:1d:f3:89:ae:d3:6a:2b:76:6a:5d:
12:8f:b7:f7:a7:cc:84:33:e0:e1:ab:6c:10:28:7c:
6c:84:80:84:c3:e0:fb:12:0e:d9:2d:01:eb:41:13:
43:44:42:fd:9a:ae:2d:e5:44:3e:86:a1:9c:76:64:
c8:ab:05:c3:4f:49:d9:7c:a8:98:cd:a6:89:cc:6a:
25:0f:73:5f:01:07:1a:14:75:7c:c9:c2:12:42:32:
a3:db:c7:3c:98:ff:bf:ca:3b:b1:03:d5:1d:ee:70:
84:34:e4:9a:4a:65:3d:3b:56:58:d0:05:86:62:09:
32:9b:67:18:e8:1c:68:e9:1a:f1:8f:01:2a:4c:81:
2d:23:d2:8d:66:f1:49:5e:af:e0:06:0a:0b:84:81:
58:da:fe:43:96:f5:15:78:c6:bc:5a:7b:d3:d0:83:
c5:b8:4b:c0:b9:cc:50:25:b5:87:50:54:45:46:b6:
4e:ec:0f:c6:ef:fd:8e:70:55:4b:56:b6:8c:64:d3:
5e:a2:77:4c:f8:02:cd:5c:34:12:51:bf:c7:4e:9a:
53:a2:d9:49:99:b3:6a:d7:39:fc:e1:01:ef:5c:9c:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:06:70:2C:D4:20:8A:3A:0E:45:EB:FE:48:90:3E:BB:D1:B5:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEE9A40356011F0A9419D9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.175.0-45.195.184.255
45.199.206.0-45.199.208.255
45.199.255.0/24
45.200.160.0-45.200.165.255
Signature Algorithm: sha256WithRSAEncryption
7a:6f:59:51:f8:90:58:33:4c:71:78:7b:2f:b5:b8:03:12:83:
0a:05:06:30:51:9f:5c:ca:d6:57:1f:f2:a9:3f:13:53:f6:54:
b5:40:38:ae:40:c5:1a:b7:d9:bb:96:96:33:f3:92:26:b5:bf:
00:ff:a3:c4:29:9d:2a:32:1d:12:90:1e:ea:66:a6:fd:d2:ce:
11:e9:ad:5a:29:35:e2:db:b1:e2:fa:5b:96:f5:8f:f9:df:da:
88:36:3f:05:a4:e5:3b:f2:db:92:6e:7c:e6:28:58:de:14:46:
94:3a:b2:35:91:30:73:68:2e:03:cc:a4:4b:6f:4b:c0:cf:52:
5e:e4:c5:ff:0a:56:ac:c7:fb:65:43:1d:0d:6e:53:b7:f2:1d:
30:ef:7f:c9:19:27:75:c0:c6:fa:e8:07:3f:df:ee:60:7e:51:
d0:1c:cd:87:e9:f3:90:7a:78:69:cc:c5:d6:2c:4a:e0:21:4b:
f6:c1:d9:13:ce:17:cd:79:1c:85:58:91:a9:bb:9f:7a:d8:93:
e1:da:57:6d:b0:bf:9e:8b:67:56:cd:c0:2f:f8:92:67:15:98:
ea:48:2f:ef:16:9a:d0:a6:49:16:19:c3:20:40:ae:01:95:4b:
77:00:8e:43:ef:48:e5:20:77:b9:12:4c:93:cb:80:e0:df:13:
42:6e:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:56:20 2025 by rpki-client