Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DB7A727A0D4111EF81833565017001B1.roa
File: DB7A727A0D4111EF81833565017001B1.roa (raw, json)
Hash identifier: AbRA8rOsZXnRjJUJfGD/6/FYoK6f09B3h6sxYsTTNtE=
Subject key identifier: 97:DA:EA:10:26:91:8A:03:15:2B:87:DE:49:02:C5:42:B3:ED:A3:01
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0617
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DB7A727A0D4111EF81833565017001B1.roa
Signing time: Wed 08 May 2024 13:49:58 +0000
ROA not before: Wed 08 May 2024 13:49:54 +0000
ROA not after: Wed 31 May 2034 13:49:54 +0000
asID: 20011
IP address blocks: 197.88.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 8 13:49:54 2024 GMT
Not After : May 31 13:49:54 2034 GMT
Subject: CN=663b8306-6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:7f:20:dc:fe:7c:4b:b2:29:1f:f7:b0:c9:
7c:73:99:3b:46:ea:22:4e:b0:f1:84:c7:08:35:c2:
51:43:ad:00:75:0d:79:15:ab:0d:c8:6c:21:16:a4:
39:41:79:00:86:38:d4:e7:bf:17:90:3f:16:81:61:
94:4a:84:34:de:45:8e:14:31:85:76:8e:74:be:ed:
8a:e2:ba:a9:6e:98:97:fa:6f:e7:97:f3:54:6c:26:
89:51:45:f5:1e:ec:03:0d:3a:9c:72:61:f8:b9:90:
21:f5:44:16:52:44:79:eb:e4:6a:dd:d7:a3:7a:f4:
03:e1:b6:b3:cf:5e:d1:15:d5:8c:91:6a:1e:d6:77:
5c:81:b5:0c:4a:56:c3:30:a0:8d:ba:93:8d:52:5a:
c0:18:4c:01:aa:52:b3:fa:29:e3:e7:72:7e:24:22:
0b:42:b1:81:5a:69:06:a6:59:c5:4e:60:27:6c:28:
41:15:10:ec:88:66:77:a1:54:f2:e6:2f:82:b2:d3:
0e:21:3e:77:2e:ab:0f:c3:d9:04:f1:28:bc:a1:43:
b9:43:8b:8e:49:b5:1b:04:ad:62:bc:87:84:36:2e:
3a:0f:f4:49:e6:64:be:6a:0f:19:3c:6c:a2:90:eb:
a0:b6:41:15:b8:06:9d:bf:b9:9b:14:3e:c0:ea:29:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DA:EA:10:26:91:8A:03:15:2B:87:DE:49:02:C5:42:B3:ED:A3:01
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DB7A727A0D4111EF81833565017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.88.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:c7:ed:52:ba:30:bb:2b:c8:ca:17:f0:73:00:0d:b5:21:d7:
03:01:4e:e7:d0:c3:f6:7b:de:c7:09:c9:48:2f:c5:ff:4e:57:
b9:8e:aa:90:b0:a5:1d:ee:ae:d6:98:32:9c:d7:38:a2:e8:a2:
9b:51:4a:5a:12:3a:e4:58:a4:dd:c6:0c:93:c0:5f:0d:c4:b9:
18:e7:71:9b:12:0f:7e:de:87:ae:72:d4:02:d2:2b:3c:a7:f3:
ef:f3:9f:2f:59:3e:84:59:e2:40:17:91:70:c5:83:b9:86:50:
25:1b:14:46:25:6f:6c:bd:d0:14:6b:29:95:84:76:a8:42:6c:
d4:24:be:4e:d2:c7:a2:08:8f:34:1c:9e:1c:73:51:a6:81:ca:
1b:34:ef:22:40:c9:7f:e0:45:25:1a:a8:f7:05:b8:3d:4a:98:
bf:ef:92:57:a1:d9:4d:1c:9f:44:71:e1:58:27:ea:2a:ef:a7:
fb:7a:93:8f:24:5f:74:86:ed:b6:e1:2c:34:75:4e:4e:57:c1:
ed:29:db:92:04:43:dc:99:8d:f8:46:89:b7:6b:92:b1:07:97:
73:7e:79:45:e4:61:59:9e:3a:11:d1:20:f6:99:76:33:17:60:
ec:b4:31:77:00:33:ae:86:80:c6:1b:1d:05:a5:6b:92:06:36:
7e:bf:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org