Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBB2B374356211F081D10BA9DAE4EC9C.roa
File: EBB2B374356211F081D10BA9DAE4EC9C.roa (raw, json)
Hash identifier: /9f1Kx6RT5+KErZNzI9GRnb8nxhet8S8nPs2Qjvmn4A=
Subject key identifier: DD:68:07:84:B1:D0:7E:45:F9:2E:65:D0:94:D5:D2:E3:A1:67:1C:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBB2B374356211F081D10BA9DAE4EC9C.roa
Signing time: Tue 20 May 2025 10:12:23 +0000
ROA not before: Tue 20 May 2025 10:12:17 +0000
ROA not after: Fri 27 Jun 2025 10:12:17 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87592 (0x15628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:12:17 2025 GMT
Not After : Jun 27 10:12:17 2025 GMT
Subject: CN=682c5587-0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:5a:d2:c1:45:0c:ce:e7:d7:1d:d5:39:32:
2d:e2:c5:a9:e3:d3:ad:a1:a5:f4:48:ee:8c:e1:c1:
48:7d:c6:82:77:68:4b:09:0e:13:f2:00:c4:0c:4a:
26:48:ce:33:ef:f2:46:43:bb:65:db:ea:b9:03:b3:
12:a4:a4:c9:c7:d6:25:72:9b:42:f8:2d:96:df:a0:
ae:6b:61:46:0e:36:e2:5a:ff:b5:7b:7f:65:69:54:
dc:71:ec:a0:a6:b5:a5:44:2c:79:ec:2a:2c:b4:12:
76:1a:b9:b6:99:38:ad:0f:05:c2:32:d0:5b:2f:d2:
ef:ac:88:44:ba:5f:c3:9f:01:a7:d8:eb:df:3b:ec:
d0:32:bf:d9:ce:4b:03:98:ed:aa:0d:c0:4a:d4:b8:
d9:cd:15:7f:f9:27:ab:c3:fe:5b:51:c4:95:fd:49:
ed:51:3f:24:35:72:e7:f6:9e:93:c6:c4:bd:43:86:
c5:15:6a:03:d6:ae:93:57:bb:d0:bc:c4:c3:af:26:
ed:80:51:96:90:c7:a7:64:c4:17:79:6f:47:b2:54:
9c:ec:8e:53:ca:de:57:82:08:e2:a5:85:21:1e:91:
ec:90:d8:3e:68:30:81:17:54:01:c1:ff:6c:b7:6d:
72:16:b2:8f:40:fe:e3:b1:ff:58:08:44:04:c3:7e:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:07:84:B1:D0:7E:45:F9:2E:65:D0:94:D5:D2:E3:A1:67:1C:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBB2B374356211F081D10BA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:e1:df:8f:0c:79:dd:27:64:dc:48:2e:a6:7f:44:19:0b:38:
de:f5:34:08:5d:20:92:f7:fc:e5:d6:75:34:61:cf:e3:e9:7b:
1d:ac:43:50:65:a2:ef:82:d1:78:7c:3a:90:d7:db:90:95:c6:
8c:12:ba:b9:fd:1d:47:d5:02:7d:9d:a1:6a:dc:2d:ad:89:b3:
9c:00:e9:f8:07:c2:1d:e9:2b:6e:71:43:1e:0d:3e:e2:1a:2d:
6e:31:94:6b:b9:4f:6f:c9:80:ba:69:0c:31:64:20:92:fe:01:
38:86:20:32:86:07:1c:8b:06:81:23:7d:f9:c2:e0:c5:d2:99:
bb:96:db:13:1c:af:88:76:99:7f:04:77:b3:56:e2:22:cf:88:
49:2c:d3:a6:8d:0c:07:72:32:5e:65:80:35:b4:94:e4:03:84:
d8:d8:0f:7a:3c:f5:65:bd:40:10:15:c4:88:4d:ca:1c:21:8d:
d1:f0:5e:dd:38:89:5e:af:a4:1d:37:8c:50:fe:30:18:8f:71:
74:42:12:f2:2c:88:0b:da:00:a2:85:d6:ba:87:e9:a1:ce:42:
df:08:9d:d5:0d:e4:4c:e6:4a:fa:d4:05:c3:29:a6:d7:9e:f0:
b0:d5:25:04:d4:b3:3e:9e:d3:35:00:1c:52:10:c6:cb:29:a3:
fd:4a:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:40:16 2025 by rpki-client