Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7A937E3BB111F0987A6181DAE4EC9C.roa
File: EE7A937E3BB111F0987A6181DAE4EC9C.roa (raw, json)
Hash identifier: TRFKafRSkyF3gGbq6NpUVgQPxItYPFXxqCQubytZLYY=
Subject key identifier: 68:AB:99:78:1A:E3:32:D2:3C:D6:2A:CC:C9:E6:DA:57:25:FE:EF:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015849
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7A937E3BB111F0987A6181DAE4EC9C.roa
Signing time: Wed 28 May 2025 10:53:05 +0000
ROA not before: Wed 28 May 2025 10:53:00 +0000
ROA not after: Fri 04 Jul 2025 10:53:00 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
45.192.169.0/24 maxlen: 24
45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
45.192.215.0/24 maxlen: 24
45.192.216.0/24 maxlen: 24
45.192.217.0/24 maxlen: 24
45.192.218.0/24 maxlen: 24
45.192.219.0/24 maxlen: 24
45.192.220.0/24 maxlen: 24
45.192.221.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
45.192.225.0/24 maxlen: 24
45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88137 (0x15849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 10:53:00 2025 GMT
Not After : Jul 4 10:53:00 2025 GMT
Subject: CN=6836eb11-adc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:c1:47:28:43:3a:e5:e2:cc:13:d8:7a:ed:
ac:08:47:5e:cd:9e:a0:14:6e:1e:8b:d9:fa:d1:44:
48:4d:df:a1:48:5f:d7:16:d9:de:b4:f5:50:41:cd:
aa:20:a1:ae:d8:07:c7:4e:3f:17:bb:10:6d:c9:94:
b3:2b:27:a4:fe:09:53:08:b1:e2:28:dc:ec:17:a9:
a1:a3:03:b1:c2:66:96:bd:11:43:c9:a4:55:e4:36:
39:58:db:5e:23:42:67:b9:81:78:c2:43:a2:11:69:
c5:87:76:11:98:31:88:9f:6f:5d:3b:66:f7:62:0e:
58:a5:4a:d0:42:74:b9:49:34:99:27:07:4e:d2:a0:
04:d8:14:3f:e5:b3:26:2d:3e:8e:90:c8:71:b3:79:
aa:90:88:45:ec:7e:b8:08:2c:6b:3f:34:43:e9:ae:
90:23:63:f9:ac:8f:12:ef:03:57:53:3a:d7:76:08:
71:e8:16:6c:02:03:66:a0:a4:7f:10:1a:87:6f:b5:
1a:25:cf:79:b0:74:a8:f6:b0:68:9b:77:40:08:6d:
9b:4c:86:58:8e:2f:4d:80:12:a1:65:ea:df:78:84:
3b:66:66:dd:1e:c4:b7:61:0b:d0:7f:94:aa:92:f4:
56:6b:74:ca:6c:9d:1a:82:a9:be:e1:28:90:46:6a:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:99:78:1A:E3:32:D2:3C:D6:2A:CC:C9:E6:DA:57:25:FE:EF:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7A937E3BB111F0987A6181DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
45.192.169.0/24
45.192.208.0-45.192.221.255
45.192.223.0-45.192.226.255
Signature Algorithm: sha256WithRSAEncryption
b8:7a:50:f3:25:65:5c:0d:94:0a:68:c0:4b:11:bd:ea:23:8f:
5e:f0:7a:3f:09:24:85:ab:0f:31:a7:18:98:5b:ed:81:43:f3:
23:5d:2a:58:60:82:bd:f9:34:6b:e2:ca:08:c5:db:85:dc:b9:
b0:05:7b:33:e3:41:88:55:c5:1d:22:90:35:cd:7c:2f:6f:d6:
71:de:94:d6:61:f2:b4:05:7c:25:d4:5a:11:ca:3d:06:21:a5:
18:c3:c6:e0:35:15:cf:ef:f4:dd:98:04:5f:4a:70:5b:3b:5a:
01:18:db:7e:c1:ae:ff:53:cb:2d:02:5e:25:cf:7d:78:b6:1e:
5e:43:05:21:9d:0a:46:9f:e0:b1:34:bb:5a:62:f5:fb:f6:bc:
f8:4f:45:05:1d:d8:61:29:15:78:d7:60:46:71:5f:af:ce:92:
a0:8c:05:7b:e3:69:34:7b:2b:bb:e7:41:a4:87:b2:92:13:ec:
28:3c:c0:2b:97:42:f6:09:36:bc:5d:10:3f:56:35:4c:3d:d9:
11:aa:71:79:8f:cd:07:54:3f:8c:b7:4b:8a:8f:a1:cf:25:17:
2c:85:9c:e8:b9:ac:52:4b:3b:f4:fb:8a:e8:87:5b:70:28:11:
fe:52:49:d6:a9:c4:98:4a:29:54:3a:46:57:e4:f4:13:51:65:
15:f3:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:36:05 2025 by rpki-client