Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F58424B8331F11F0B6D8FD83DAE4EC9C.roa
File: F58424B8331F11F0B6D8FD83DAE4EC9C.roa (raw, json)
Hash identifier: z9D/tX/ySzT83sqIJXe1tBjqbWwbG3e1rviVz2LO7s8=
Subject key identifier: 0A:9B:0B:6A:07:EB:51:FA:16:5E:7A:FD:47:72:78:C9:5E:AF:1C:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015573
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F58424B8331F11F0B6D8FD83DAE4EC9C.roa
Signing time: Sat 17 May 2025 13:08:01 +0000
ROA not before: Sat 17 May 2025 13:07:56 +0000
ROA not after: Fri 08 Aug 2025 13:07:56 +0000
asID: 150706
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87411 (0x15573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 13:07:56 2025 GMT
Not After : Aug 8 13:07:56 2025 GMT
Subject: CN=68288a31-6c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:bb:e6:21:7a:54:c8:21:42:7a:fd:f5:c6:
d3:71:25:ff:67:b2:6e:26:37:7d:97:66:b7:c1:b0:
bf:ee:35:a1:c9:e6:e0:e5:57:1e:c4:de:06:c0:6d:
0f:10:87:03:7c:4f:d1:b9:ad:38:54:45:bd:26:61:
fa:1a:71:a4:68:93:d1:5b:7a:84:6d:70:6e:8d:91:
81:21:c3:91:be:6c:d7:b9:73:d1:13:9e:f8:7e:25:
5e:e1:9d:7d:cd:b1:fa:57:65:84:11:5d:4f:8a:05:
41:bd:88:12:d2:9d:7f:9e:f2:b2:80:57:ca:57:55:
0f:fd:db:0c:4e:57:92:de:de:8c:86:5a:08:08:e6:
57:b6:78:33:ac:10:10:c1:39:34:85:a2:d1:ea:c2:
37:e6:72:b1:2b:6a:c1:18:ae:4b:4c:72:6f:a9:36:
6e:bf:62:96:63:5e:b4:d4:25:be:87:da:5c:e6:98:
b7:bc:46:4c:37:dc:c4:5a:3e:05:2f:13:6f:82:5d:
3f:14:4d:a0:76:e4:e0:94:ab:8a:76:27:4e:b6:b5:
57:f8:d5:88:6c:7d:32:dc:72:8c:a3:59:81:28:0e:
da:5b:21:16:2b:4a:aa:44:c5:e8:d3:31:3e:92:76:
fd:c1:ce:69:cc:84:e7:6e:d8:c6:db:b3:fa:ea:45:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:0B:6A:07:EB:51:FA:16:5E:7A:FD:47:72:78:C9:5E:AF:1C:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F58424B8331F11F0B6D8FD83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
77:fa:f1:ee:08:a3:ee:70:7a:1b:99:9c:5d:0b:dd:77:9c:22:
4c:c8:cb:23:4b:08:6b:a8:9d:db:a1:1c:ea:3a:1f:26:35:a3:
05:24:45:57:8b:c9:50:99:22:96:12:74:83:78:ad:86:0d:3b:
98:4f:29:94:d2:9a:c5:57:d0:68:44:09:60:2a:36:1f:61:60:
c7:dc:63:47:f4:8f:d2:90:6b:0e:12:0a:75:33:30:6b:17:a0:
5b:67:62:c2:64:c0:b1:fd:bf:5d:12:29:1d:16:51:b4:52:da:
84:51:8b:f2:fe:8f:00:78:fa:4e:0d:b9:f2:54:f6:13:46:35:
8e:40:24:14:7b:e3:2e:6c:a3:17:71:b7:08:7f:fc:3d:20:a4:
a1:73:83:13:5f:bd:95:83:af:26:c8:cc:10:b9:64:92:0d:47:
d0:95:74:0c:ba:65:e4:98:89:6a:90:4c:07:af:12:20:78:e6:
1f:7a:ce:29:df:d1:85:f0:a3:e5:1c:24:d8:3f:ef:38:b7:45:
97:98:8a:49:aa:cd:1f:1d:cc:9c:7c:9c:55:4b:3c:2d:cf:4d:
d3:dc:2a:98:44:16:58:93:c8:8a:d2:1d:85:0e:ed:9d:68:3b:
e8:e4:ae:54:09:34:b9:b9:fa:c0:0e:ed:92:59:53:3a:78:a0:
20:72:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:30 2025 by rpki-client