Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/FF60F386F81311EFA12B167C762E951A.roa
File: FF60F386F81311EFA12B167C762E951A.roa (raw, json)
Hash identifier: E6AA/MQ35BNobVmf7gM/3zri44Qh8PJyk5Jml651Nx8=
Subject key identifier: EE:97:17:04:AF:1A:E7:58:A2:74:C9:DF:99:ED:53:C4:A3:09:F4:EB
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 036B
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/FF60F386F81311EFA12B167C762E951A.roa
Signing time: Mon 03 Mar 2025 09:43:44 +0000
ROA not before: Mon 03 Mar 2025 09:43:40 +0000
ROA not after: Sat 31 Mar 2035 09:43:40 +0000
asID: 198949
IP address blocks: 41.219.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875 (0x36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF
Validity
Not Before: Mar 3 09:43:40 2025 GMT
Not After : Mar 31 09:43:40 2035 GMT
Subject: CN=67c579d0-a9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:61:2a:d9:d2:df:41:33:16:42:e1:a1:0a:
a1:be:c8:8e:d8:ef:86:d8:81:a4:35:92:b6:12:30:
71:67:be:53:a0:47:ee:3e:5e:ee:3d:cb:f8:bf:ac:
35:3c:e9:b7:ab:cb:7b:22:5c:b2:cb:bd:d0:fc:5e:
fa:aa:70:6f:a0:cb:a2:64:b1:49:aa:8a:60:2f:5f:
cc:d4:3c:a8:d8:a9:d0:9e:56:af:0a:24:10:ac:dc:
93:5e:4b:13:5e:6a:45:a0:b1:35:25:8f:e1:0f:4c:
7f:de:43:2e:27:22:cd:82:ec:37:e0:36:be:e1:48:
67:74:a9:fc:6b:29:41:57:6e:ea:4a:a4:9b:4e:61:
33:70:30:8b:34:f7:6f:69:e6:0f:32:99:32:00:a3:
f5:9e:19:89:b6:41:78:69:1c:df:1c:54:59:f8:df:
e3:db:84:bc:7d:27:15:de:48:44:ec:cd:bf:87:ee:
3d:42:64:51:bb:fc:a1:c3:27:6e:94:78:89:ca:b6:
c8:60:80:67:51:7d:e5:8c:fc:98:ef:8b:91:7a:73:
0a:66:58:61:05:c2:2d:3d:f9:08:28:35:08:96:c1:
c4:3e:c4:b2:7f:dd:d0:1a:3a:87:1e:72:92:c4:79:
d0:ec:3b:c8:9b:da:e0:7f:91:6d:82:5b:9c:0e:18:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:17:04:AF:1A:E7:58:A2:74:C9:DF:99:ED:53:C4:A3:09:F4:EB
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/FF60F386F81311EFA12B167C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.219.64.0/18
Signature Algorithm: sha256WithRSAEncryption
62:ee:6a:32:b0:7d:92:52:40:30:3c:d9:fb:ae:67:db:09:74:
e9:0c:39:be:3d:64:9f:e8:43:90:2d:9f:31:73:5e:13:5e:fb:
68:9d:86:a3:b8:81:29:5f:1a:2c:d1:27:e6:8c:b6:8a:20:29:
21:05:b5:2e:92:37:96:dc:4b:0b:03:5e:27:26:1b:4c:5c:ed:
04:88:2c:5b:76:e0:28:a7:22:db:ed:be:02:72:16:25:e9:03:
db:cd:30:77:9e:e1:43:05:f8:2c:8f:2f:63:60:23:d0:64:1f:
87:ba:7c:46:9c:79:9a:8c:59:4c:43:ed:a4:df:c4:44:e4:eb:
d0:18:b7:b2:37:4a:cf:85:1e:78:6d:1e:2b:d3:2f:40:03:60:
a9:9b:a7:25:2e:e9:b3:70:58:8d:4b:08:0c:b9:a5:f3:4a:85:
6f:6b:80:d8:19:3d:95:a8:f3:33:92:49:a0:03:26:db:c2:5a:
b7:43:3b:34:b7:3b:ea:32:60:36:c4:6e:08:6e:ca:5c:49:84:
e6:bc:c5:85:23:7b:99:e6:6a:c1:ae:f6:26:75:40:13:7b:1f:
1e:d2:f6:72:b7:be:69:8c:48:d6:87:86:5e:c2:70:72:6f:fb:
56:9f:b2:6b:18:a7:2e:ab:38:11:bc:67:97:e1:f2:f3:6e:dd:
03:45:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:40 2025 by rpki-client