Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C632E4D44E7611F0967523B3DAE4EC9C.roa
File: C632E4D44E7611F0967523B3DAE4EC9C.roa (raw, json)
Hash identifier: /uvSbpZmDfEBV8xc8p5m6DKGXc2aVw7JzdN0SdS+QEk=
Subject key identifier: 3D:5E:C8:56:40:B2:F5:63:29:72:8A:33:89:91:A5:89:F7:54:62:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C632E4D44E7611F0967523B3DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:07:29 +0000
ROA not before: Sat 21 Jun 2025 08:07:25 +0000
ROA not after: Sun 27 Jul 2025 08:07:25 +0000
asID: 44559
IP address blocks: 45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89482 (0x15d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:07:25 2025 GMT
Not After : Jul 27 08:07:25 2025 GMT
Subject: CN=68566841-5074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:12:aa:ab:df:44:24:c7:2d:66:13:09:f2:
9d:be:02:2e:a7:b9:da:71:89:f8:3d:fc:b0:63:7b:
6b:fe:a8:bf:a6:6d:84:1d:c7:ab:6e:7a:a1:0c:e5:
45:56:69:5b:de:91:40:ee:97:2b:a8:fc:df:52:5c:
7c:67:43:7a:62:6e:6e:2a:c6:50:85:53:f6:e3:13:
95:bd:70:2a:ce:27:76:6b:2f:f3:8d:f1:1d:9a:07:
81:00:c9:1c:2b:c0:41:b4:91:8a:79:1a:00:fa:ef:
61:73:49:2e:0c:68:db:2c:7b:5a:b2:dd:ea:cd:40:
f3:ce:fe:e3:df:8f:af:c0:b4:e4:59:76:ae:c7:81:
8f:4f:6f:8f:72:1c:17:8e:98:8d:34:51:d8:36:53:
77:e0:03:3d:a1:16:c5:22:46:61:be:d8:7a:c8:5f:
17:e1:d5:c2:88:54:ee:d0:f7:3f:6e:58:68:9e:ff:
15:e8:81:fa:37:95:15:4d:0a:c3:58:7b:1f:ab:bd:
de:f2:41:9f:fc:2f:38:60:5e:5b:a9:bf:8d:6e:47:
f8:53:c0:9d:28:82:ae:09:26:74:f7:e5:ae:a1:50:
66:c3:1f:98:b7:9e:30:fe:d4:ca:ad:17:a2:62:53:
1e:14:8b:7f:4e:68:b7:f4:91:a4:fe:f6:81:da:c9:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:C8:56:40:B2:F5:63:29:72:8A:33:89:91:A5:89:F7:54:62:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C632E4D44E7611F0967523B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.162.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.176.255
45.195.189.0-45.195.190.255
45.199.207.0-45.199.208.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
Signature Algorithm: sha256WithRSAEncryption
48:19:fe:90:34:f9:30:57:22:3d:1d:ca:79:0c:7b:e3:55:0a:
af:28:ce:c0:c8:3b:90:9d:a4:b3:0e:7e:e8:bf:c4:98:1c:e7:
ae:e8:65:d6:ae:c5:52:ef:e8:73:d2:f5:b2:05:20:30:34:a9:
0c:d3:1b:b7:f9:0e:7d:03:11:ec:55:84:6c:f3:69:38:08:f6:
b1:3d:51:c2:59:9c:29:ea:02:b2:60:bb:6b:1a:3c:60:9a:6e:
07:fe:8e:10:f8:5e:24:ac:f8:40:13:c6:ba:9a:60:4c:62:e7:
be:4b:ed:b8:3b:b4:f9:10:01:0d:46:ba:b3:ff:d1:7a:2a:20:
a4:4b:1e:8c:ae:5a:c4:ef:d3:e0:63:ea:52:40:73:a1:32:ad:
e2:7e:2e:4c:08:0e:33:86:d8:72:a4:82:a3:22:8c:87:cb:83:
79:c2:28:bf:06:fb:01:7e:91:04:4e:0f:cb:4a:cf:9d:31:11:
e1:00:2a:dc:37:c7:dd:ce:7e:1d:af:1c:3b:45:66:2d:70:8f:
eb:32:c1:fc:ae:b7:70:22:d8:39:63:49:9f:b1:cc:fb:25:cd:
dc:66:20:cc:2c:83:ea:67:80:49:87:da:48:8f:dd:5f:e2:3e:
e6:d5:ba:b2:cd:e0:26:7c:35:6b:77:cd:49:4f:4a:48:e4:c8:
c5:6b:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:51:44 2025 by rpki-client