Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC7B5D64E7711F084D1BCB9DAE4EC9C.roa
File: EEC7B5D64E7711F084D1BCB9DAE4EC9C.roa (raw, json)
Hash identifier: 8PT29oKLx3fIo/vVECbQ3TprPplAhmG2vli12duPILc=
Subject key identifier: 5A:5B:4C:42:75:78:54:6B:D7:F8:24:A9:65:E2:2C:2C:79:BC:7A:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC7B5D64E7711F084D1BCB9DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:15:46 +0000
ROA not before: Sat 21 Jun 2025 08:15:42 +0000
ROA not after: Sun 27 Jul 2025 08:15:42 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89484 (0x15d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:15:42 2025 GMT
Not After : Jul 27 08:15:42 2025 GMT
Subject: CN=68566a32-f479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:a5:7e:72:6e:09:26:8d:f4:54:6d:8d:43:
df:06:89:30:31:44:28:34:5e:51:73:31:53:4e:2f:
32:50:43:c1:42:80:1b:a4:0c:46:c0:31:4b:62:4a:
32:03:5d:f8:23:cc:f6:b6:65:4b:4f:24:49:d8:a8:
e7:12:7d:77:d2:52:d6:a8:e5:7f:ad:9b:00:a3:ab:
d0:b8:83:e2:6a:66:11:35:b9:de:18:0a:6a:f9:78:
af:ea:2c:41:3f:64:d7:7b:3d:6b:06:76:b4:e5:17:
3d:dc:18:3c:7d:1a:12:99:f5:a2:7c:8a:d5:32:75:
83:d2:d9:a0:06:5d:a0:78:95:e8:7f:b3:fd:00:0e:
ec:d2:d9:1e:70:1a:3d:50:3d:e0:49:a0:4e:83:d4:
07:8f:25:e7:ba:c9:bb:ea:96:4a:c3:b6:ed:36:03:
07:c4:c5:7d:75:89:ef:d8:29:fd:c8:18:f3:d8:90:
5d:88:a5:5c:e7:35:f8:c7:a0:16:dd:f7:2c:b1:8a:
b8:43:79:58:89:ed:83:e9:2f:ac:8b:db:75:08:14:
8e:56:f4:ef:ad:54:49:33:d8:a8:cd:2b:0a:46:e9:
8a:af:5d:b4:28:57:df:76:23:3c:27:d6:cf:9c:c6:
bb:59:44:ae:57:c2:e7:d6:94:2f:66:11:0b:9a:ec:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:4C:42:75:78:54:6B:D7:F8:24:A9:65:E2:2C:2C:79:BC:7A:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC7B5D64E7711F084D1BCB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.177.0/24
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.199.212.0/24
45.199.216.0-45.199.220.255
45.199.231.0-45.199.238.255
Signature Algorithm: sha256WithRSAEncryption
27:1b:23:e0:36:41:76:79:ca:7f:46:23:33:38:ef:e3:61:6f:
d6:2b:7a:10:44:0e:ed:a0:20:28:e9:6e:96:eb:ab:9c:3f:35:
5e:0f:5d:12:7d:81:b0:bb:9b:b2:f8:2f:a9:fc:15:41:e2:72:
f9:6a:2c:2b:35:ca:3d:2b:77:a2:d2:1f:e5:1c:2e:fc:de:0c:
4c:41:81:c0:f8:81:7e:e0:a2:af:99:e9:5c:20:95:59:7c:2d:
c4:22:fa:51:c6:4e:0e:01:c9:05:bf:b8:67:6c:85:f8:c2:2c:
8c:61:6c:41:dc:72:65:e8:5d:5d:ae:c4:96:ba:bf:b5:47:53:
b4:32:40:d6:3f:ab:7f:5a:88:75:75:bb:d0:21:9e:72:30:d5:
80:4a:fe:ab:90:75:23:a2:9d:5d:9c:77:62:29:b3:60:3a:f1:
6f:59:6e:d1:9c:af:be:71:65:9f:cd:69:09:75:09:af:3c:48:
ed:3e:a6:e9:2c:fc:3c:be:3e:c6:96:7d:ab:40:65:a1:3b:9e:
2d:65:7f:16:fa:5d:89:08:1d:ec:08:8d:d6:d7:d0:be:09:54:
68:3e:5c:46:07:ce:a6:75:54:26:ca:75:cc:55:40:de:0e:df:
1b:7b:3d:38:0f:b4:77:04:72:1b:3f:d8:50:bf:3e:df:41:bd:
a5:1a:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:27:14 2025 by rpki-client