Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E3EE6BA2907E11F0A059A0CCDAE4EC9C.roa
File: E3EE6BA2907E11F0A059A0CCDAE4EC9C.roa (raw, json)
Hash identifier: eUkZ+VLWlXU1RMBpT3IzVqo21olqw/TCxNS36DGx5bM=
Subject key identifier: E6:87:DF:56:07:2C:8F:FE:EB:59:86:28:9A:8D:EC:EA:82:30:A3:55
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 15DF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E3EE6BA2907E11F0A059A0CCDAE4EC9C.roa
Signing time: Sat 13 Sep 2025 08:51:52 +0000
ROA not before: Sat 13 Sep 2025 08:51:47 +0000
ROA not after: Mon 13 Sep 2027 08:51:47 +0000
asID: 22773
IP address blocks: 102.129.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5599 (0x15df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 08:51:47 2025 GMT
Not After : Sep 13 08:51:47 2027 GMT
Subject: CN=68c530a7-0448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:b8:81:0a:1b:d9:95:b4:17:cd:ca:57:4d:
44:6d:82:cb:c6:9a:c7:55:1c:f6:a7:b7:ef:6a:de:
6d:f8:32:f4:24:37:1f:16:fa:db:23:cf:ad:00:a9:
0d:de:b4:a4:30:06:e6:76:87:f9:08:8c:51:5e:49:
10:fe:24:bd:00:2e:e7:ff:05:a1:8f:51:4a:52:0b:
d4:b8:a0:a4:0b:13:cb:6a:4e:65:2b:1f:51:cc:b8:
7b:0b:49:6e:ad:5c:8b:04:c1:e8:c0:e1:e2:4c:15:
df:ae:a3:4f:dc:89:90:c5:d6:6e:e0:4a:90:b9:e5:
fc:ad:24:92:ed:c2:fd:4d:93:11:ce:45:e9:6d:fa:
20:f5:3f:17:51:16:a0:ff:fc:82:a8:23:40:4d:48:
c6:0b:eb:49:16:10:56:f5:3a:a4:ee:13:28:a7:5d:
47:9d:4f:26:75:46:ac:07:db:74:04:74:23:8b:54:
c7:a0:5b:01:38:0d:36:73:cd:c2:4a:e3:ab:7e:e3:
f0:f7:07:ec:f7:36:bb:93:bc:9f:9e:02:c9:5a:2d:
8c:b4:83:d9:ff:cd:34:f1:dd:e0:8d:2f:28:0a:09:
2d:4d:e0:5a:c3:c9:cb:89:0b:ef:e4:2b:1a:f4:bb:
1e:fe:7b:ac:4d:8a:5b:a6:bf:5c:c0:7c:fa:32:58:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:DF:56:07:2C:8F:FE:EB:59:86:28:9A:8D:EC:EA:82:30:A3:55
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E3EE6BA2907E11F0A059A0CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:5f:1f:80:38:d8:04:34:6c:c7:6d:f8:f0:b2:26:53:19:f7:
e6:c4:8b:41:3e:4d:57:f7:20:5e:73:82:bd:d7:fd:9e:c4:49:
e8:e0:34:4e:25:7c:d3:57:40:49:c2:96:8c:2e:af:26:49:29:
c1:46:32:4b:08:8e:43:f6:58:dc:2f:69:e0:49:25:bb:41:9b:
2b:44:35:a8:b3:d3:6f:70:34:42:fb:19:fc:1b:aa:37:5c:ef:
49:dc:7f:8c:89:d9:d8:37:b9:4f:b1:16:9c:b3:1c:58:dd:f4:
39:ef:40:e9:76:6b:b2:f5:55:54:2d:e4:8b:bf:6c:eb:93:55:
f3:78:77:b9:69:88:90:75:d1:06:33:e9:6a:12:1e:88:11:d2:
a1:7b:4d:ad:ee:df:42:0f:ae:60:62:7a:d1:f7:4a:d8:c2:09:
9d:40:bb:cd:c4:b3:97:b4:7f:c9:6f:4d:62:59:3e:97:77:51:
f6:b8:3e:9c:94:b2:ab:0e:98:e3:94:18:f6:76:20:aa:51:8a:
34:fd:43:8d:50:ea:ac:43:a3:12:ef:20:66:36:8c:18:bd:83:
83:08:16:10:ee:c6:37:e0:29:13:48:7f:c7:dc:f8:f6:4a:40:
6f:8f:37:7a:f6:27:80:92:85:09:4c:82:6f:38:4b:36:d5:6b:
28:e5:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:42:19 2025 by rpki-client