Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA0C424689611F0B133709ADAE4EC9C.roa
File: EEA0C424689611F0B133709ADAE4EC9C.roa (raw, json)
Hash identifier: hcCVPNkxUNarcH5w68DyOrD2Af/dypDyGE64KX2zYKE=
Subject key identifier: 1F:1D:E0:BF:A4:0C:CD:FA:8F:7B:17:9A:30:B3:27:45:0B:D6:E6:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016785
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA0C424689611F0B133709ADAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:03:11 +0000
ROA not before: Thu 24 Jul 2025 14:03:06 +0000
ROA not after: Thu 28 Aug 2025 14:03:06 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92037 (0x16785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 14:03:06 2025 GMT
Not After : Aug 28 14:03:06 2025 GMT
Subject: CN=68823d1f-6995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:51:74:f8:d6:e6:88:a1:c5:fc:fa:34:d6:
9c:78:ee:7d:63:2e:b0:7f:dc:c8:04:c1:5b:6e:8f:
58:4b:20:95:39:6c:e2:9e:c5:a4:e7:13:f6:42:4c:
ab:a0:dd:bd:1b:3c:38:32:21:aa:2f:28:f2:9d:b3:
36:ad:86:eb:16:ec:a2:21:e6:04:5e:0c:5f:ae:05:
b3:6c:ab:51:34:09:99:d8:e4:83:c6:d6:eb:9e:97:
63:47:b5:33:97:39:94:20:e1:e7:9b:c7:6d:49:64:
b0:45:49:77:60:21:58:77:3e:0f:94:d9:4e:8e:b2:
59:9b:66:14:b0:f6:31:79:41:ea:84:2a:c9:e0:35:
4f:61:7b:87:a2:e7:13:f5:b6:61:2e:b3:9b:a3:5b:
59:9f:77:54:06:ff:1c:76:8d:64:80:be:c9:6d:a7:
44:32:73:c3:e8:b9:9e:ab:95:69:5c:46:76:96:c9:
fd:37:d7:28:66:7c:63:79:45:18:bc:ea:59:a2:4e:
ec:40:b0:2e:37:f6:5a:18:d2:63:63:8d:bb:a4:43:
ed:33:b5:43:11:3d:d4:3f:74:d3:b9:cf:b1:6e:6b:
e5:2c:10:78:2a:08:d7:e5:18:59:ec:f3:99:68:28:
d7:19:7d:fb:99:8a:5e:84:2a:2b:3e:1b:26:fb:9c:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1D:E0:BF:A4:0C:CD:FA:8F:7B:17:9A:30:B3:27:45:0B:D6:E6:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA0C424689611F0B133709ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0-45.192.37.255
Signature Algorithm: sha256WithRSAEncryption
6e:35:21:40:b7:ec:05:94:fa:fa:4a:4f:9a:01:84:e7:d1:c1:
3e:f7:b2:68:5e:52:83:61:29:5c:c0:7a:b7:56:c2:76:24:86:
93:02:15:14:18:c4:99:76:1d:16:d5:05:1e:7b:45:12:8e:9b:
39:ea:8d:91:b6:fa:26:99:ee:8e:9e:20:65:0b:fa:72:54:e5:
87:c9:37:a8:f6:a0:a6:92:c5:c8:ec:f0:c2:52:d7:10:aa:3e:
12:a8:9b:fc:84:bd:25:9b:a0:e9:c8:da:d3:6e:d0:3a:2e:86:
87:1f:9d:b9:5a:2b:60:53:7f:bb:a7:e0:25:a8:0b:2b:7e:a3:
a0:19:7c:38:99:ed:07:4f:ce:25:3a:cf:d1:3f:63:87:a2:bc:
38:5c:06:f7:83:38:c0:c0:c5:58:b9:00:38:cd:69:fa:6a:0d:
25:c2:e7:0e:32:4a:37:07:02:7b:f4:72:f3:62:eb:4b:6e:b8:
66:38:05:72:4b:2a:2c:40:13:c4:72:99:21:69:59:e8:d6:a5:
aa:2b:9a:4f:bb:4a:88:41:5f:b4:0b:99:63:59:15:78:fe:77:
2a:bd:a7:e2:fa:33:e7:05:52:79:7f:a2:eb:3b:b2:2d:96:61:
a2:4b:b2:2d:fc:01:1e:8f:fd:51:ff:4d:5d:22:a2:f4:b8:78:
76:8b:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:25 2025 by rpki-client