Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/6F610D6EB15211EFBDDE33A8762E951A.roa
File: 6F610D6EB15211EFBDDE33A8762E951A.roa (raw, json)
Hash identifier: hU8BoAyDFHgCQ5xHdbCUfglrlvg4aN+lgDNHGzvLeys=
Subject key identifier: 00:46:F0:E7:B8:90:78:EF:9D:45:5F:5A:99:3E:33:54:6C:89:AB:38
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0553
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/6F610D6EB15211EFBDDE33A8762E951A.roa
Signing time: Tue 03 Dec 2024 08:41:49 +0000
ROA not before: Tue 03 Dec 2024 08:41:45 +0000
ROA not after: Wed 03 Dec 2025 08:41:45 +0000
asID: 7018
IP address blocks: 196.44.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF
Validity
Not Before: Dec 3 08:41:45 2024 GMT
Not After : Dec 3 08:41:45 2025 GMT
Subject: CN=674ec44c-6c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:52:ac:f1:a1:f7:39:a0:18:f6:c8:cb:61:
d0:96:12:02:b7:2d:fd:a4:cc:5e:e4:b1:44:6c:83:
cd:92:be:ab:99:61:60:b2:99:de:47:8e:59:05:70:
ca:72:e4:93:d5:d9:ca:34:fa:ff:25:bb:a2:96:01:
a6:40:36:21:73:28:85:19:be:46:54:fa:94:24:61:
29:3a:21:ba:6c:22:1a:57:f2:f3:d4:68:67:cd:c5:
4b:a4:3b:b4:67:84:f9:28:29:c1:3c:3a:3d:3f:1f:
4e:60:eb:e0:d9:58:af:30:87:4c:42:01:21:9d:0a:
8d:dd:43:42:30:76:45:19:e9:8d:f4:82:82:78:ca:
11:92:52:71:de:09:93:28:32:35:83:24:f1:e1:e9:
75:ab:84:9f:a9:22:6a:51:87:d3:c4:f7:b5:e8:d9:
b8:b6:3d:c4:35:0c:ba:dc:f0:d3:01:7a:0f:b1:25:
9d:b3:34:69:e5:d1:22:90:be:ed:d5:c2:63:39:46:
ef:24:7f:7f:1e:53:83:7b:df:66:4e:33:e2:b6:7a:
34:05:d1:12:38:04:15:0c:49:a9:0a:a2:0d:b7:d1:
3e:81:b1:19:fc:ed:ed:33:1c:dc:83:57:d7:21:15:
d4:31:46:57:68:a2:7c:38:b5:c1:5c:21:d2:66:64:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:F0:E7:B8:90:78:EF:9D:45:5F:5A:99:3E:33:54:6C:89:AB:38
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/6F610D6EB15211EFBDDE33A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.126.0/24
Signature Algorithm: sha256WithRSAEncryption
35:25:5d:d1:30:83:cb:59:0c:ce:c6:f5:99:8e:cb:0a:1a:32:
fd:cc:26:25:4f:e6:ae:97:a3:ab:c3:0e:60:34:9c:0d:43:30:
89:7c:63:ab:23:20:cc:dd:d1:ba:23:42:47:55:3d:d0:55:e7:
27:73:0e:d8:e7:ab:f7:cb:af:eb:b7:19:a2:a4:66:a0:e0:98:
22:3f:89:47:17:52:ec:ef:f1:64:58:bd:89:42:fa:e2:84:d7:
5d:23:0e:d4:47:da:d1:c0:ab:d5:52:fe:f8:5e:b7:bb:43:e3:
09:a7:bf:5b:40:65:f3:80:7b:80:62:64:d6:05:5b:9e:2f:dd:
2c:b9:75:05:3a:ab:e1:dc:bd:41:6f:90:b7:87:d8:42:e5:3c:
dc:36:a4:be:0a:14:2e:81:56:22:52:f2:bd:9a:80:92:e9:ba:
4b:22:26:0e:b8:7b:89:80:df:a1:52:67:99:93:00:b1:28:79:
2c:3c:d1:fc:19:86:f0:28:45:1d:e5:3a:1f:d3:83:8a:84:70:
25:39:0a:83:ba:99:69:37:13:40:98:37:36:33:55:bf:2c:4d:
53:b5:be:e1:e2:9e:63:89:95:0c:3c:98:bb:a4:6d:15:6c:44:
89:50:83:fd:b1:55:99:42:df:8b:ed:88:1d:e7:48:4f:d3:03:
9a:7b:e6:43
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNDEyMDMwODQxNDVaFw0yNTEyMDMwODQxNDVaMBgxFjAU
BgNVBAMTDTY3NGVjNDRjLTZjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXxVKs8aH3OaAY9sjLYdCWEgK3Lf2kzF7ksURsg82SvquZYWCymd5HjlkF
cMpy5JPV2co0+v8lu6KWAaZANiFzKIUZvkZU+pQkYSk6IbpsIhpX8vPUaGfNxUuk
O7RnhPkoKcE8Oj0/H05g6+DZWK8wh0xCASGdCo3dQ0IwdkUZ6Y30goJ4yhGSUnHe
CZMoMjWDJPHh6XWrhJ+pImpRh9PE97Xo2bi2PcQ1DLrc8NMBeg+xJZ2zNGnl0SKQ
vu3VwmM5Ru8kf38eU4N732ZOM+K2ejQF0RI4BBUMSakKog230T6BsRn87e0zHNyD
V9chFdQxRldoonw4tcFcIdJmZDf1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAEbw
57iQeO+dRV9amT4zVGyJqzgwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzZGNjEwRDZFQjE1MjExRUZCRERFMzNBODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELH4wDQYJKoZIhvcNAQEL
BQADggEBADUlXdEwg8tZDM7G9ZmOywoaMv3MJiVP5q6Xo6vDDmA0nA1DMIl8Y6sj
IMzd0bojQkdVPdBV5ydzDtjnq/fLr+u3GaKkZqDgmCI/iUcXUuzv8WRYvYlC+uKE
110jDtRH2tHAq9VS/vhet7tD4wmnv1tAZfOAe4BiZNYFW54v3Sy5dQU6q+HcvUFv
kLeH2ELlPNw2pL4KFC6BViJS8r2agJLpuksiJg64e4mA36FSZ5mTALEoeSw80fwZ
hvAoRR3lOh/Tg4qEcCU5CoO6mWk3E0CYNzYzVb8sTVO1vuHinmOJlQw8mLukbRVs
RIlQg/2xVZlC34vtiB3nSE/TA5p75kM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:56 2025 by rpki-client