Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/34279B9203B411EF914AA515017001B1.roa
File: 34279B9203B411EF914AA515017001B1.roa (raw, json)
Hash identifier: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=
Subject key identifier: D0:96:C6:C3:B9:29:29:74:C9:CB:87:CC:F9:5F:30:21:21:88:3A:50
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01CF
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/34279B9203B411EF914AA515017001B1.roa
Signing time: Fri 26 Apr 2024 10:03:18 +0000
ROA not before: Fri 26 Apr 2024 10:03:14 +0000
ROA not after: Thu 30 Apr 2043 10:03:14 +0000
asID: 30988
IP address blocks: 196.200.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 10:03:14 2024 GMT
Not After : Apr 30 10:03:14 2043 GMT
Subject: CN=662b7be6-8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:01:3c:85:bb:55:7e:72:05:11:6c:d0:7d:
db:98:1b:e9:c9:17:86:7e:21:19:83:a4:aa:f0:22:
a1:cd:1f:2e:e8:3e:59:40:92:40:10:8d:0e:29:10:
e3:35:34:ad:d6:1f:4c:00:f2:78:20:90:ed:d1:28:
22:cc:08:6f:2b:28:8f:db:03:9e:ee:b3:29:7e:e3:
cb:1d:90:7f:2d:6c:a0:02:63:b9:48:36:0a:bc:45:
53:4a:91:a3:55:f9:f4:b5:27:53:41:82:77:10:b4:
35:bc:7f:dc:2f:7f:9c:b6:72:9d:60:f2:44:39:c8:
5d:29:b1:16:81:2d:5e:74:3d:b6:2b:30:87:33:ef:
7b:db:98:20:24:89:32:e2:bd:88:d3:16:b5:55:26:
ed:43:f8:19:07:a6:a5:f6:34:e6:e1:80:51:83:b6:
cd:dc:80:fb:d1:32:24:c3:d6:6f:75:79:96:8e:19:
47:d8:e8:ad:bb:55:d1:98:ff:4b:51:73:b8:c8:2e:
85:25:ed:16:fd:ea:9f:9f:cf:07:a1:90:3f:a1:f8:
cf:a6:08:44:2c:c0:37:9e:60:1e:6b:77:03:ac:22:
4b:f3:c4:c4:5c:1b:95:79:da:e6:9a:80:07:29:a6:
eb:6c:3e:5c:00:ee:e4:7c:01:c6:a8:b1:fb:b4:7a:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:96:C6:C3:B9:29:29:74:C9:CB:87:CC:F9:5F:30:21:21:88:3A:50
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/34279B9203B411EF914AA515017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a3:66:d3:a2:fa:05:b5:86:1e:36:75:8d:f0:c1:64:ee:35:
3e:87:9c:0f:61:ba:f0:1e:15:8c:71:e5:3d:40:e4:11:0a:3c:
ba:da:b8:34:28:ee:af:2f:bc:c2:0f:c0:a2:2e:dd:eb:2e:25:
09:c5:58:03:1a:29:e0:6e:b0:6a:47:98:f8:37:db:b4:3c:a3:
8b:56:87:14:6c:80:77:0e:17:de:c1:00:99:02:5d:0d:41:ab:
ba:4c:31:04:66:b2:69:42:f8:25:24:f1:c5:88:e2:05:4b:b9:
19:15:aa:c1:35:0b:72:f1:f1:37:42:fa:ed:17:87:d3:21:ab:
95:c6:15:d0:5e:f1:de:a9:d3:05:f4:2e:88:32:e6:e7:8f:80:
7d:b0:57:ae:d4:5b:86:21:19:89:96:4d:2b:96:ff:71:83:a9:
11:51:b0:b4:36:5b:89:8b:99:26:b2:28:10:94:94:53:31:c9:
64:c5:d0:45:fa:4c:5d:fb:20:0f:91:00:63:3c:0b:98:0e:bf:
f1:6a:29:c7:24:c6:41:f9:d7:eb:f0:a4:a9:03:14:7f:fc:c4:
ad:ac:37:b6:18:47:0c:6d:aa:b6:a6:72:94:50:66:12:17:f6:
b5:8e:51:a3:99:7e:48:cf:e5:00:8d:cf:2d:aa:93:e3:29:6b:
91:78:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:22 2024 by rpki-client on console-ams.rpki-client.org