Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/6A0C7B08DD5F11EFAC5D7A7C762E951A.roa
File: 6A0C7B08DD5F11EFAC5D7A7C762E951A.roa (raw, json)
Hash identifier: PbOc0rH6HsLdll3C/DDTeZ+xtTIsbBYGvnSDWgrs3mk=
Subject key identifier: 21:0F:4D:D6:1B:5D:A0:0D:97:CA:AD:6F:AB:CE:09:D4:1B:5C:6C:A2
Certificate issuer: /CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Certificate serial: 0468
Authority key identifier: BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/6A0C7B08DD5F11EFAC5D7A7C762E951A.roa
Signing time: Tue 28 Jan 2025 10:05:34 +0000
ROA not before: Wed 29 Jan 2025 10:05:31 +0000
ROA not after: Sat 30 Jan 2027 10:05:31 +0000
asID: 37580
IP address blocks: 197.215.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E82AF
Validity
Not Before: Jan 29 10:05:31 2025 GMT
Not After : Jan 30 10:05:31 2027 GMT
Subject: CN=6798abee-06de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:f1:f4:09:d4:aa:cb:40:a5:ce:bb:15:ff:
6e:bf:82:91:12:79:4f:39:17:c1:9f:cd:88:cc:2e:
ae:9f:d5:4a:68:84:2a:ac:91:78:80:e9:8d:de:a4:
44:aa:0c:3e:2a:97:75:6c:57:9d:a9:b6:7e:b6:ca:
be:1a:7b:80:67:7c:43:e6:97:64:26:58:cd:be:31:
85:a3:07:2a:bd:7c:a6:c4:f3:42:aa:48:b5:36:3a:
4c:fa:ee:60:1b:b6:bc:4c:ef:33:f6:c6:de:aa:c2:
55:78:16:ba:96:d5:9f:c9:13:b9:d0:9d:84:3e:3d:
99:70:47:91:9a:d8:64:07:63:46:b4:17:98:3a:02:
0e:91:24:e9:df:19:70:4e:01:87:f6:ce:fc:20:bf:
49:8e:cc:4a:f5:b2:fa:8f:0b:3f:14:ce:e0:8f:24:
35:0f:3a:a5:23:5b:cc:0c:7a:d9:b5:7f:e7:1d:f8:
fe:f4:32:10:73:e8:d6:58:45:92:68:55:44:62:78:
e4:f2:e3:bd:d9:be:6b:9f:72:10:6b:b7:81:ee:da:
91:ba:69:74:5c:6e:2f:34:ee:a6:fe:7f:d4:54:b6:
a1:2b:8b:e3:ab:a7:65:f1:ab:df:32:da:09:e1:32:
be:c6:c7:b1:7f:a5:36:16:45:eb:50:d9:f7:9a:c6:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:4D:D6:1B:5D:A0:0D:97:CA:AD:6F:AB:CE:09:D4:1B:5C:6C:A2
X509v3 Authority Key Identifier:
keyid:BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/6A0C7B08DD5F11EFAC5D7A7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:73:4a:0f:e1:4a:ce:4f:75:92:98:98:98:73:23:b6:eb:89:
27:d5:9a:bf:e8:e7:ec:ff:2c:ea:f1:63:ce:d8:ed:c2:4c:57:
1a:a2:8e:16:a6:a8:61:ca:f5:7f:0b:78:fc:69:58:c7:31:c9:
c5:d2:9f:b1:28:72:ac:a9:92:11:84:89:f5:5a:a8:08:1d:f4:
b3:13:b6:fa:1b:48:a7:be:53:8f:ce:20:9e:1d:e1:1f:02:3f:
94:7e:0b:77:8e:23:d4:79:16:fa:f6:80:86:ac:35:c4:4f:5f:
9b:c3:d0:cd:20:90:f1:9c:0f:fd:cb:4b:f6:e8:11:5e:05:d3:
71:15:12:af:38:83:c0:da:f4:29:a7:c4:94:90:fb:7e:29:3e:
d4:fe:81:e9:44:67:5e:6d:d8:2d:26:a7:cc:41:ca:e2:b5:56:
68:bd:90:c9:69:5b:c4:d3:36:f1:da:21:1b:1c:c1:bc:9e:59:
c7:6a:12:84:21:50:b4:62:f4:15:8f:4c:ca:07:7c:97:dd:4b:
f2:56:8b:ad:b1:c9:7f:c5:38:20:87:97:4e:c2:b0:06:75:b6:
7d:92:ed:07:f2:f0:4e:71:38:04:ba:1a:ac:ce:58:12:71:39:
5c:16:54:64:a7:e2:af:d6:e5:a7:f9:72:d1:df:7b:f1:29:32:
f4:4b:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:13 2025 by rpki-client