Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEFAA2AC774E11F0B893BA82DAE4EC9C.roa
File: EEFAA2AC774E11F0B893BA82DAE4EC9C.roa (raw, json)
Hash identifier: glQs/JJoxt7gaIejLMrpNUiiY1uK62ZJWRKYtTiBuGM=
Subject key identifier: B5:B9:26:B6:73:0E:7E:F8:30:42:AE:D6:78:BD:E4:D4:F3:48:B8:DC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1582
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEFAA2AC774E11F0B893BA82DAE4EC9C.roa
Signing time: Tue 12 Aug 2025 07:35:35 +0000
ROA not before: Tue 12 Aug 2025 07:35:30 +0000
ROA not after: Thu 12 Aug 2027 07:35:30 +0000
asID: 212238
IP address blocks: 102.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5506 (0x1582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 12 07:35:30 2025 GMT
Not After : Aug 12 07:35:30 2027 GMT
Subject: CN=689aeec7-5bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:d0:15:7e:7a:10:b5:c5:87:91:11:2d:1e:
36:3b:e0:ef:8b:7a:99:34:94:39:db:b7:e7:55:54:
45:38:0b:b5:b3:15:d7:00:81:4f:0e:f8:0b:6e:0c:
77:eb:8d:62:60:d4:b8:c0:cc:4d:9e:fc:8a:66:8f:
f6:29:a4:9a:3b:e2:a6:a6:a3:c0:93:c3:ec:0f:18:
84:2d:fb:4b:93:0a:86:76:75:16:ab:d8:4f:68:05:
e0:f8:86:ae:b0:3d:1c:4d:d0:ca:b7:2a:c1:89:77:
4f:18:1b:92:e2:39:93:d8:ca:c5:de:92:b9:bb:78:
10:be:2f:70:f2:5e:47:92:df:f0:4d:1d:d6:17:1f:
3b:4d:d0:07:52:40:aa:66:13:f9:97:57:76:7d:62:
df:9f:00:1b:89:d1:dc:b3:5c:b2:90:e5:42:6f:05:
9e:95:6a:bf:93:8e:37:5e:8c:ea:27:b9:e7:4d:e8:
d7:d6:be:e1:fd:e6:ed:8b:8f:8d:fc:b1:d9:f7:c4:
b6:4b:1c:33:2b:58:c2:a7:d7:7a:fa:30:48:5e:54:
cf:96:f6:c9:6b:4a:f5:b5:fb:4a:15:4e:26:2a:54:
63:b2:d5:e6:5b:25:40:ce:fb:bf:41:09:32:c6:cf:
60:ac:eb:6d:a8:cb:e9:3f:6c:26:e4:1b:d9:56:17:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:26:B6:73:0E:7E:F8:30:42:AE:D6:78:BD:E4:D4:F3:48:B8:DC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEFAA2AC774E11F0B893BA82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9e:ca:3c:6e:51:76:3d:73:f5:59:3b:6b:7a:77:9d:f9:82:
e6:58:e1:60:45:19:ff:2e:1a:41:c2:69:b1:fa:d1:35:0b:f8:
35:7a:27:1b:5b:13:da:f5:bd:0c:e1:33:78:f4:9a:c0:ec:02:
83:12:eb:7a:6c:2f:4a:96:0b:c3:f9:51:a3:08:4b:f7:9d:2f:
51:da:3a:97:70:cb:c3:9d:ee:64:b3:22:1e:37:59:c1:97:e2:
b3:bc:ab:01:08:f9:18:89:f2:2c:d5:ce:5a:f2:fa:94:7d:64:
cd:5f:a7:78:59:82:e1:e0:03:41:07:d5:a5:cf:93:d1:fe:85:
90:32:62:0b:36:a9:03:d2:c0:2c:24:c2:2b:5f:5d:4c:56:c9:
59:0b:79:02:70:63:a5:52:66:2e:7f:1b:21:75:6b:24:eb:82:
8c:2c:bf:a0:40:90:ef:84:d5:9a:a4:ee:9c:65:0a:42:7d:70:
14:05:ee:60:8b:3d:84:de:af:6b:82:f9:05:b3:b7:bc:d6:e0:
c8:89:67:ce:1c:78:30:64:18:ae:23:a8:7d:aa:e1:f2:df:2c:
67:fd:14:33:30:45:6d:ff:21:46:df:ca:aa:be:80:b1:56:25:
0b:1a:cd:7f:b8:7e:84:30:8e:e9:72:17:24:0d:10:22:88:93:
91:54:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:30 2025 by rpki-client