Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/10A0595805BF11F08B582351762E951A.roa
File: 10A0595805BF11F08B582351762E951A.roa (raw, json)
Hash identifier: LQJrOYXWlKMFH/S9MJpDgdbBKn/U/CutzSAB+yVYU8I=
Subject key identifier: 99:C1:6B:5F:C6:20:26:10:3C:DD:77:4D:BA:AB:A5:89:15:7F:91:82
Certificate issuer: /CN=F36FDD86AF/serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
Certificate serial: 11
Authority key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/10A0595805BF11F08B582351762E951A.roa
Signing time: Thu 20 Mar 2025 19:11:02 +0000
ROA not before: Thu 20 Mar 2025 19:10:59 +0000
ROA not after: Tue 20 Mar 2035 19:10:59 +0000
asID: 37522
IP address blocks: 196.43.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 03:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDD86AF
Validity
Not Before: Mar 20 19:10:59 2025 GMT
Not After : Mar 20 19:10:59 2035 GMT
Subject: CN=67dc6846-6d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:8e:8c:35:c8:f9:07:22:89:55:71:c5:33:
86:d0:83:22:2b:8a:c1:13:27:39:cc:ac:7e:05:69:
22:46:de:f2:d0:b4:98:78:17:6c:9d:11:c8:89:c4:
3a:eb:4f:ea:10:b2:28:df:ed:50:80:17:a2:98:1e:
c3:89:cb:63:8f:eb:1e:94:33:eb:dd:70:86:46:8f:
5c:9b:5a:8f:4c:a3:93:e6:8c:7e:6c:e6:f6:f1:8a:
b3:fe:be:04:79:7f:0d:a5:0a:ff:6f:68:80:f1:7e:
bd:77:53:0b:ca:7d:76:b3:c1:b5:d7:ff:83:65:ed:
44:a5:ae:8f:42:47:c4:cb:04:ff:e8:0b:d8:ce:0b:
d8:81:8b:f4:84:b2:45:3b:02:b6:75:ac:2e:5f:64:
5d:3d:5a:1d:1a:98:a7:ba:f7:2d:cc:42:a5:ff:51:
25:63:19:ab:90:64:86:d0:66:45:69:d6:4a:7e:68:
fe:7b:28:8d:7e:de:2c:4e:b7:ab:85:ae:3c:01:35:
40:71:2c:39:6f:11:fb:dc:72:ea:91:19:dd:72:75:
2d:6c:f0:43:b1:be:a3:5f:a8:af:c3:08:bf:ff:92:
c4:ef:2d:02:7d:82:32:00:7f:60:e3:2e:a6:90:f7:
2e:2f:12:4e:43:3f:13:74:80:e7:bb:e7:88:c8:b7:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:6B:5F:C6:20:26:10:3C:DD:77:4D:BA:AB:A5:89:15:7F:91:82
X509v3 Authority Key Identifier:
keyid:10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/10A0595805BF11F08B582351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:37:bf:7a:6a:e7:87:32:ff:88:e9:d3:82:97:7b:07:3c:ba:
17:c2:ae:84:b0:18:e3:a1:6e:f8:5f:a8:d8:11:71:f6:36:6e:
b0:13:13:17:2d:46:9e:4c:af:aa:d0:75:89:23:fc:c3:be:20:
d8:ee:f5:25:d8:df:a6:54:3d:7e:a5:9d:e3:59:b1:ba:b5:bb:
be:fc:7f:a0:04:41:b7:af:9b:de:0f:0b:93:a4:ae:19:16:88:
c1:16:43:b7:da:6a:80:07:de:5a:5b:79:18:14:e5:e6:bd:74:
b4:a6:c3:11:80:87:64:8e:f6:cf:b4:a8:a7:d6:6c:70:56:db:
71:90:46:8d:84:0a:ac:78:0d:61:b3:c5:3b:85:3e:72:63:d1:
50:7b:b0:70:b0:da:fa:57:c9:7e:7a:e1:65:6d:3f:0f:ab:ff:
4f:19:ae:77:88:37:95:e0:fb:09:45:50:56:65:dd:45:0a:68:
fa:49:0a:8d:1a:ef:5b:a2:0c:89:59:ad:f6:89:cf:5d:c9:57:
c4:e1:df:47:86:7b:b7:b6:29:08:3f:de:f9:2d:13:0b:31:49:
b2:6f:60:b5:77:c0:52:d2:1d:6a:08:a9:06:3b:bd:ff:9b:b9:
e5:ba:75:c3:f6:f5:3e:b1:2e:55:2f:2b:c2:79:de:f4:c6:cb:
28:b5:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:05 2025 by rpki-client