Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D21E0DF6469B11F0B373BFF4DAE4EC9C.roa
File: D21E0DF6469B11F0B373BFF4DAE4EC9C.roa (raw, json)
Hash identifier: 9MSz8l15FJq/aaUXC2UboJ+Vwl1nc3TPNT+o/7+kz9I=
Subject key identifier: 75:94:D1:90:D7:84:89:DE:0E:30:19:C7:28:13:8B:09:58:CF:C1:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D21E0DF6469B11F0B373BFF4DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:12:31 +0000
ROA not before: Wed 11 Jun 2025 08:12:26 +0000
ROA not after: Fri 20 Jun 2025 08:12:26 +0000
asID: 44559
IP address blocks: 45.192.59.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.161.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 08:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88885 (0x15b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:12:26 2025 GMT
Not After : Jun 20 08:12:26 2025 GMT
Subject: CN=68493a6f-6922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:85:29:dd:99:54:f5:d8:6c:ca:89:1f:10:
20:c5:0f:f1:6a:90:fe:0d:85:cf:54:70:93:de:9a:
31:c8:7a:41:33:64:36:18:a5:d4:03:a7:7e:b2:41:
ae:a4:82:8f:05:53:d5:fd:9e:68:ad:24:fc:16:d7:
9f:7d:e1:c0:c5:9f:bc:f9:de:e0:89:60:90:82:99:
a2:40:f6:32:36:95:ae:d6:ce:00:e8:53:11:12:d6:
5d:38:a5:b4:fd:e8:d6:36:6b:4c:11:a0:8a:f2:d3:
91:8f:69:24:74:18:60:45:a7:23:66:a3:60:a0:b4:
ae:9a:a6:1f:15:00:af:86:53:18:34:e4:92:39:46:
46:5b:3a:29:0c:84:b5:27:7d:6b:ba:ab:99:13:de:
2d:01:ad:c4:d4:3b:3b:a5:9f:e8:55:d0:18:bf:ca:
1e:43:97:72:51:81:79:38:c9:5b:96:1c:6c:db:06:
21:54:65:52:3c:ff:08:1e:a2:50:4f:b2:00:6b:9d:
6e:95:17:ef:87:3e:9a:6f:f4:dc:63:a6:87:7c:3c:
32:26:92:dc:59:fe:ac:b2:16:46:ed:73:42:da:e9:
0e:58:a0:ef:e1:6c:67:d1:d6:a1:14:83:71:88:7d:
7a:6a:a3:54:20:66:3b:8e:3d:a7:44:00:b6:47:15:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:D1:90:D7:84:89:DE:0E:30:19:C7:28:13:8B:09:58:CF:C1:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D21E0DF6469B11F0B373BFF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
45.192.63.0/24
45.195.161.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.195.189.0-45.195.190.255
45.199.207.0-45.199.208.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
Signature Algorithm: sha256WithRSAEncryption
9b:eb:c0:b8:bf:44:2f:41:32:d4:f9:78:06:2b:e5:ff:5c:29:
9d:42:1d:4c:e9:46:15:49:2d:a7:b1:9b:0f:f1:08:b7:1e:d8:
66:f9:26:ea:0a:01:c9:e6:37:10:d4:65:dd:67:f5:99:79:f4:
18:8d:55:69:3c:06:90:46:66:c8:28:d1:c3:0c:18:52:78:cf:
20:ff:7c:1f:d2:7a:9f:8b:ec:e8:fe:75:64:df:3f:cf:e7:19:
05:5c:9e:a5:ee:05:76:d4:ef:ad:4b:4b:e5:31:bd:3d:46:02:
bf:4e:a5:0c:36:80:90:33:8e:df:aa:b2:97:03:c3:31:3a:da:
86:48:3f:4e:06:d1:52:22:33:64:87:f6:3d:24:1a:53:d7:16:
61:e6:fa:fc:e6:61:de:28:f2:94:c6:2f:92:f7:8f:cc:fa:24:
66:20:b4:8e:a0:e1:98:93:95:a1:fc:ca:87:c9:0b:0e:52:6f:
cd:b5:2d:64:8e:5d:5b:40:36:0c:25:da:7f:c4:0d:39:65:e4:
e2:23:a9:8d:dd:29:17:bf:db:07:3e:4d:c1:ff:fc:fe:6e:16:
ea:a6:34:a3:95:ae:b5:b6:04:32:27:ce:87:a7:e7:4c:5a:43:
11:c5:72:32:e4:2e:d6:3f:53:62:ca:2f:7c:d5:9f:5f:6c:a3:
c1:9d:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:13:44 2025 by rpki-client