Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/5861C26CBC5511EF90F9D982762E951A.roa
File: 5861C26CBC5511EF90F9D982762E951A.roa (raw, json)
Hash identifier: eB1InoySBqZLX3x4VP2uOavu6C8qTlq0DiXebO5lSp0=
Subject key identifier: E9:68:6B:78:49:5C:B4:15:7C:D4:A8:0F:F0:4A:03:03:27:22:57:2F
Certificate issuer: /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial: FC
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/5861C26CBC5511EF90F9D982762E951A.roa
Signing time: Tue 17 Dec 2024 09:00:21 +0000
ROA not before: Tue 17 Dec 2024 09:00:18 +0000
ROA not after: Wed 31 Dec 2025 09:00:18 +0000
asID: 328245
IP address blocks: 196.43.247.0/24 maxlen: 24
2001:43f8:3d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3530AF
Validity
Not Before: Dec 17 09:00:18 2024 GMT
Not After : Dec 31 09:00:18 2025 GMT
Subject: CN=67613da5-1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:e5:a0:e8:10:77:e8:44:3b:49:d9:de:ff:
39:4a:e3:c3:a3:f5:15:5a:7d:37:4c:a5:71:08:4b:
d1:c9:81:a4:2c:c3:13:82:73:af:f1:a4:61:5e:3c:
17:22:63:17:ea:d0:7d:7e:20:00:83:29:04:42:25:
b5:cf:18:14:a9:fc:8e:b5:f6:89:e2:2b:4f:c0:88:
29:bd:41:38:b3:e3:09:da:f5:b5:b9:fa:20:29:23:
e3:c3:f6:79:fe:6a:18:7f:d0:f5:d4:f5:18:41:cb:
c5:02:cd:9f:96:1b:52:2f:aa:d5:7d:05:d1:fc:48:
23:88:2e:54:3a:32:98:46:70:c2:16:ac:9b:81:e6:
ba:23:db:f6:77:6e:1b:63:55:41:e6:77:2e:b5:af:
9f:02:b5:a9:08:20:72:28:e2:06:a6:c1:d8:28:c0:
c3:c6:69:99:46:e2:38:71:b5:87:1c:39:29:82:e0:
8c:b9:f8:17:9d:44:4f:53:23:ef:1a:eb:f1:44:c1:
41:0f:01:94:76:cb:67:e9:1c:90:e3:b8:bc:47:84:
f0:69:1b:31:e5:00:43:2a:b2:e3:c2:ee:4c:b3:51:
63:25:48:24:e3:ba:ea:71:42:26:e2:7f:ba:cc:4d:
7e:47:9d:ee:3d:ed:48:22:f6:13:ff:5d:39:64:df:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:6B:78:49:5C:B4:15:7C:D4:A8:0F:F0:4A:03:03:27:22:57:2F
X509v3 Authority Key Identifier:
keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/5861C26CBC5511EF90F9D982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.247.0/24
IPv6:
2001:43f8:3d0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:6d:0b:71:e5:b6:82:35:6d:ca:bd:32:97:fe:ce:d6:23:ef:
40:21:3b:f7:1c:14:41:09:11:f8:39:ab:b5:1d:bd:c2:45:7e:
bf:60:12:11:47:d4:29:1f:a5:87:6e:b8:32:7c:dd:74:92:72:
d9:93:d3:6b:62:c6:6c:eb:f8:1f:fd:06:94:53:5d:33:f3:28:
55:21:b6:62:8c:9f:e0:a2:f7:bb:38:39:3e:77:27:75:96:d9:
97:3e:bd:69:f9:88:d9:89:78:05:09:a9:8b:1d:29:1e:3b:53:
4e:e4:fb:1c:4c:a6:c3:07:94:76:1e:9c:5c:6d:e0:91:2c:ba:
e1:d3:43:b9:0d:c5:a9:6d:eb:fe:30:e4:16:63:53:d2:6b:63:
a0:55:1b:27:30:32:ac:8b:17:64:3a:2b:92:e0:bd:36:84:dd:
71:96:5a:ec:c8:87:1c:31:86:7b:fd:bd:27:07:e6:cf:7e:71:
79:0b:6d:4d:ff:a9:76:d2:b5:9f:fd:bc:46:a4:a6:6b:59:21:
f6:6e:2d:35:b3:70:3d:3c:b0:25:7b:2c:10:bf:ff:29:40:7d:
f7:5c:c9:99:b7:e1:94:d6:67:7c:6d:fa:c4:63:54:34:e3:49:
00:03:1a:78:4f:c2:29:88:86:a4:ef:61:40:a1:5e:29:a0:51:
18:31:17:71
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM1MzBBRjExMC8GA1UEBRMoNjRFNDhCNzVFMjE2NzRGODZENEU2QjVGNDIzNjlB
N0E3M0JFMjU0MTAeFw0yNDEyMTcwOTAwMThaFw0yNTEyMzEwOTAwMThaMBgxFjAU
BgNVBAMTDTY3NjEzZGE1LTE1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQBuWg6BB36EQ7Sdne/zlK48Oj9RVafTdMpXEIS9HJgaQswxOCc6/xpGFe
PBciYxfq0H1+IACDKQRCJbXPGBSp/I619oniK0/AiCm9QTiz4wna9bW5+iApI+PD
9nn+ahh/0PXU9RhBy8UCzZ+WG1IvqtV9BdH8SCOILlQ6MphGcMIWrJuB5roj2/Z3
bhtjVUHmdy61r58CtakIIHIo4gamwdgowMPGaZlG4jhxtYccOSmC4Iy5+BedRE9T
I+8a6/FEwUEPAZR2y2fpHJDjuLxHhPBpGzHlAEMqsuPC7kyzUWMlSCTjuupxQibi
f7rMTX5Hne497Ugi9hP/XTlk3xwHAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU6Whr
eElctBV81KgP8EoDAyciVy8wHwYDVR0jBBgwFoAUZOSLdeIWdPhtTmtfQjaaenO+
JUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNTMwLzY0MDUxRjY2RkRBQTExRUVCOEQ0Nzg1NTAxNzAwMUIxL1pPU0xk
ZUlXZFBodFRtdGZRamFhZW5PLUpVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pPU0xkZUlXZFBodFRtdGZRamFhZW5PLUpVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNTMwLzY0MDUxRjY2RkRBQTExRUVCOEQ0Nzg1NTAx
NzAwMUIxLzU4NjFDMjZDQkM1NTExRUY5MEY5RDk4Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEK/cwDwQCAAIwCQMHACAB
Q/gD0DANBgkqhkiG9w0BAQsFAAOCAQEAem0LceW2gjVtyr0yl/7O1iPvQCE79xwU
QQkR+DmrtR29wkV+v2ASEUfUKR+lh264MnzddJJy2ZPTa2LGbOv4H/0GlFNdM/Mo
VSG2Yoyf4KL3uzg5PncndZbZlz69afmI2Yl4BQmpix0pHjtTTuT7HEymwweUdh6c
XG3gkSy64dNDuQ3FqW3r/jDkFmNT0mtjoFUbJzAyrIsXZDorkuC9NoTdcZZa7MiH
HDGGe/29Jwfmz35xeQttTf+pdtK1n/28RqSma1kh9m4tNbNwPTywJXssEL//KUB9
91zJmbfhlNZnfG36xGNUNONJAAMaeE/CKYiGpO9hQKFeKaBRGDEXcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:35 2025 by rpki-client