Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/056431F403B811EFA4BA5832017001B1.roa
File: 056431F403B811EFA4BA5832017001B1.roa (raw, json)
Hash identifier: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=
Subject key identifier: 0A:6F:9E:E6:16:A7:18:23:FE:96:74:B5:96:68:D9:C6:07:80:1F:EC
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01F7
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/056431F403B811EFA4BA5832017001B1.roa
Signing time: Fri 26 Apr 2024 10:30:37 +0000
ROA not before: Fri 26 Apr 2024 10:30:34 +0000
ROA not after: Thu 30 Apr 2043 10:30:34 +0000
asID: 30988
IP address blocks: 41.73.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 10:30:34 2024 GMT
Not After : Apr 30 10:30:34 2043 GMT
Subject: CN=662b824d-8b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:cb:1f:fb:36:0b:a8:e6:0a:72:58:27:79:
a4:4e:9f:71:32:d1:45:d5:c2:9f:0d:1c:aa:b1:53:
b8:46:7c:93:aa:89:17:65:b1:72:54:35:91:52:78:
aa:fd:23:9b:e7:b3:09:e5:af:86:2d:bc:42:1f:e2:
81:cb:e2:4d:e1:a9:f9:45:47:9b:2e:42:31:3d:c4:
f5:05:8b:5f:bf:28:24:93:17:e9:d3:4f:84:22:c6:
b7:76:81:64:96:e4:79:ee:9e:42:cb:53:43:da:d1:
71:18:87:46:a4:bb:6e:da:9d:95:cd:47:18:8a:c6:
e5:3d:b8:a2:75:27:50:5c:5c:f6:88:0f:81:2d:39:
53:4a:0d:bf:ee:46:73:44:55:d2:c6:97:0d:87:3f:
16:58:14:d9:0c:94:29:9c:e0:2f:6a:5b:92:df:74:
8b:94:06:b3:df:f2:e5:90:24:42:49:7f:3e:18:7a:
13:cf:55:3d:1f:6e:f3:50:f1:1b:7a:f8:65:aa:28:
64:d0:78:ac:1b:79:80:0a:67:e9:09:9d:94:a7:f9:
ca:a9:ca:43:e4:4c:b2:7a:89:fc:bf:0f:64:7f:0b:
19:df:e8:27:18:7b:23:cf:1c:6b:5f:5d:55:bd:21:
36:b2:09:b6:8b:2c:82:df:ec:25:47:6c:42:71:c2:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:9E:E6:16:A7:18:23:FE:96:74:B5:96:68:D9:C6:07:80:1F:EC
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/056431F403B811EFA4BA5832017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.142.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:d7:5c:a3:06:0f:41:df:82:bc:21:44:74:e9:e3:9e:dd:
4b:e7:7c:63:e2:61:b2:d2:f2:13:0b:f0:cd:a8:46:6d:2e:48:
60:5f:61:ec:30:66:89:d1:f7:70:a2:6f:52:c6:75:4a:b7:01:
c6:71:b7:21:7e:9f:46:d9:10:cf:2c:15:61:01:0a:2d:0a:29:
f0:b8:c6:3e:85:34:92:b7:0e:83:48:9b:ea:60:62:a5:34:ea:
f2:70:2f:64:de:02:ed:30:1d:d3:7e:73:2d:bb:45:55:96:82:
6a:02:52:e0:60:86:39:31:22:d2:25:da:64:13:71:57:b8:d4:
8b:9c:cb:f5:10:30:b2:b4:55:63:b7:e1:9e:c7:35:1b:13:00:
ef:12:fc:c9:0b:83:e9:14:cb:af:3d:19:18:35:47:61:5e:27:
ef:cd:9f:03:43:80:15:a4:48:97:25:3f:42:ed:f0:dd:a1:1f:
88:bb:ec:d0:9d:dd:06:74:ae:a1:58:77:4b:20:57:7b:aa:0d:
ce:2f:16:d7:d7:44:38:a2:88:36:27:82:f1:60:5c:f0:78:3c:
2c:07:87:d7:b3:db:97:30:6d:54:51:87:ac:40:ac:bc:99:36:
c0:be:14:bf:e6:63:0b:80:bf:cc:84:f8:50:8c:a7:48:cc:db:
16:fe:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org