Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC639BDA519111F0BFB90CE5DAE4EC9C.roa
File: EC639BDA519111F0BFB90CE5DAE4EC9C.roa (raw, json)
Hash identifier: N436EFUQ67GwWry+TVMoG5g9gBBGHp00QCS3Q4jsfHA=
Subject key identifier: A0:F8:F3:8B:D0:B6:43:0C:19:5C:53:25:B9:FE:94:B8:85:C8:6C:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC639BDA519111F0BFB90CE5DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 06:59:23 +0000
ROA not before: Wed 25 Jun 2025 06:59:18 +0000
ROA not after: Thu 31 Jul 2025 06:59:18 +0000
asID: 44559
IP address blocks: 45.196.122.0/24 maxlen: 24
45.196.123.0/24 maxlen: 24
45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.196.152.0/24 maxlen: 24
45.196.198.0/24 maxlen: 24
45.196.199.0/24 maxlen: 24
45.202.119.0/24 maxlen: 24
45.202.125.0/24 maxlen: 24
45.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89779 (0x15eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:59:18 2025 GMT
Not After : Jul 31 06:59:18 2025 GMT
Subject: CN=685b9e4b-ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:97:5f:a9:da:fa:c9:59:7a:81:fc:0f:37:
44:78:d2:24:d8:5a:49:d6:db:f2:26:c2:68:76:3d:
c6:27:ea:a1:ea:2c:87:76:4d:72:5d:f8:c3:fe:84:
23:8e:4e:22:45:6f:96:bd:43:50:25:94:ae:ac:58:
16:8b:ad:56:6c:c8:18:1b:14:38:25:fe:82:e6:61:
21:fa:06:3d:ab:6c:8f:ba:b9:b5:71:50:a6:a2:4b:
14:84:c3:d8:7c:3f:0f:3d:79:f1:f0:4b:d4:62:44:
67:a5:3a:bb:60:59:14:fb:fb:5d:2b:35:3d:db:18:
c6:f5:00:cd:54:ac:49:03:2b:07:d6:22:df:dd:2a:
b8:d4:9a:22:1d:a4:b2:1b:e5:30:2c:e0:ba:24:fe:
b4:e6:9c:e0:60:36:55:d1:13:6a:d5:46:93:aa:18:
7f:3c:9b:5d:53:30:d6:48:e8:20:fe:ea:a9:30:36:
f5:a3:eb:fb:1c:b9:f6:fe:e8:1d:33:70:87:f6:5d:
c2:8b:57:67:dd:41:cf:bb:67:67:5c:6f:ae:37:dc:
1a:6d:b0:44:05:0d:dd:43:84:0d:b8:b4:83:eb:90:
06:a3:3d:57:90:62:d4:f2:80:bb:93:39:f9:29:8d:
2c:3a:a0:e8:54:f7:af:8e:70:d2:16:cf:6b:f5:b5:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:F3:8B:D0:B6:43:0C:19:5C:53:25:B9:FE:94:B8:85:C8:6C:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC639BDA519111F0BFB90CE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.122.0/23
45.196.141.0-45.196.143.255
45.196.152.0/24
45.196.198.0/23
45.202.119.0/24
45.202.125.0/24
45.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ff:5a:30:25:3a:36:8c:73:59:ad:ff:fa:90:18:0b:aa:f4:
7b:de:6a:d2:94:01:14:8d:2e:74:3f:ff:ce:26:29:58:83:30:
8d:68:81:9e:56:c8:41:f2:0d:fc:07:8f:02:e3:3f:5a:8e:d1:
17:47:03:c5:9d:03:6e:45:6d:c9:ae:a6:30:18:60:fe:c2:9f:
53:35:26:32:ea:b2:43:11:a3:81:33:87:9c:fe:c4:bb:e2:49:
c7:5a:da:1d:c2:ec:50:8f:0f:c4:3b:9f:05:da:08:e4:38:c8:
2a:4d:e4:67:0a:fe:a6:44:00:3a:53:e7:b0:c1:39:de:88:41:
ff:e5:f2:e8:89:60:4f:79:c9:16:47:01:04:41:ca:73:66:7d:
c1:53:fd:8f:03:75:0d:c8:17:ab:55:6c:8b:96:98:31:cc:93:
d4:ce:09:60:17:7a:2c:b4:cc:02:c0:c7:ec:00:b0:a3:10:8f:
47:48:94:a4:7a:3f:3c:c8:5f:ee:13:05:5f:59:54:c0:4c:db:
83:c7:12:d6:fd:47:78:c7:5b:0e:cf:ba:86:d5:a3:62:28:19:
54:27:71:82:4b:a8:9a:11:e3:e0:97:b0:ef:58:2c:c7:85:9d:
9d:8d:61:be:1a:9c:ab:a2:09:17:a7:a3:c7:42:7d:35:75:97:
6e:32:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:06:29 2025 by rpki-client