Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D3FE9980926311E9AC9B3D57F8AEA228.roa
File: D3FE9980926311E9AC9B3D57F8AEA228.roa (raw, json)
Hash identifier: k+tP9kkRYqNuPlHHDfKmXRa9tcEV2O5bcyJHIwCTg6w=
Subject key identifier: 64:76:DF:45:A8:39:A1:CC:76:E6:54:F3:86:BC:99:DE:79:1A:30:87
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 0B
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D3FE9980926311E9AC9B3D57F8AEA228.roa
Signing time: Wed 19 Jun 2019 07:28:27 +0000
ROA not before: Wed 19 Jun 2019 07:28:22 +0000
ROA not after: Tue 19 Jun 2029 07:28:22 +0000
asID: 37049
IP address blocks: 41.242.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Jun 2024 00:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 19 07:28:22 2019 GMT
Not After : Jun 19 07:28:22 2029 GMT
Subject: CN=5d09e41b-ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:10:f4:c5:59:5a:38:61:68:95:48:0b:24:
37:ec:8f:e2:5e:27:8f:a4:c9:6e:28:a6:66:c9:b6:
ec:a5:3d:96:0d:8d:78:45:8f:a9:eb:d8:e0:c8:39:
0d:0c:8d:2a:f0:b4:6b:de:00:e9:84:5a:77:3c:ce:
72:40:5b:bf:53:86:91:e7:8f:a1:df:58:89:42:20:
9e:e7:52:ae:a5:fa:94:bb:e4:3f:ad:d8:18:87:de:
b4:a8:1e:e2:5a:b2:48:a5:cf:da:8d:b7:88:2d:e5:
c6:e1:1b:d5:62:e3:aa:c1:21:c4:10:95:a1:21:78:
5c:d8:a2:05:c8:a0:de:74:f1:a4:7a:96:98:22:23:
b8:6a:c6:30:3c:c8:f5:e6:a8:cf:0b:a0:97:80:2f:
a5:10:89:69:76:5f:d4:16:1e:b7:cf:2c:90:b2:60:
af:10:e6:5c:2b:6d:a9:39:3f:5b:58:e8:4f:4f:73:
76:53:05:84:f6:17:dc:a8:45:5b:6d:34:99:72:4f:
1a:f8:0a:1f:2c:ae:76:88:dc:7a:4c:0a:55:44:67:
33:bb:10:8f:c3:2a:9c:34:75:ea:f5:45:55:fd:54:
f6:c8:66:80:7f:33:9b:41:7a:3e:21:25:37:26:6c:
f5:15:56:f2:a2:f1:a2:f2:4f:c4:da:f7:9b:2a:6f:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:DF:45:A8:39:A1:CC:76:E6:54:F3:86:BC:99:DE:79:1A:30:87
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D3FE9980926311E9AC9B3D57F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
96:94:b9:03:5f:0f:e0:f0:7b:ed:48:6c:fc:d7:cf:ea:f0:36:
78:84:7a:16:05:de:83:6e:7a:0e:86:71:28:4d:33:ef:19:be:
8c:2f:e8:5e:3c:4c:85:69:c3:a0:e2:f1:f3:b9:95:15:a8:58:
53:65:23:5c:04:26:dc:6e:da:67:d6:b1:c0:3d:fd:01:d0:28:
82:1e:5d:d9:8a:0b:e8:6d:b3:ba:15:01:e7:69:91:a4:42:09:
fc:d5:f1:93:14:f6:6c:12:54:c0:4b:4b:25:d3:c7:f2:bc:71:
03:27:7a:bb:91:e0:2f:a8:a5:ba:b6:eb:69:4d:ef:ae:92:6c:
64:37:da:f7:92:ad:5d:a8:79:37:0f:59:95:2b:a8:5f:9d:3c:
b8:ce:74:27:2f:f1:59:ad:bd:9b:56:6f:50:1a:9b:9b:ce:7f:
a9:9f:52:98:5c:7a:9f:31:20:f4:f0:a1:db:fb:06:0b:7e:8e:
1e:ed:c5:1a:c2:e4:f2:ca:b8:15:90:86:65:72:e8:27:c1:53:
b9:86:25:c3:f2:08:5e:e4:53:80:61:a1:0c:b6:58:bb:10:d5:
e7:a3:d1:35:e7:d0:b8:83:5c:50:8f:e6:92:a8:06:76:25:68:
6c:a9:4f:e0:2d:9b:c6:0b:28:22:1c:e0:74:32:53:53:86:89:
0b:9b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:55:04 2024 by rpki-client on console-ams.rpki-client.org