Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/4556E87403B311EF947EEE0B017001B1.roa
File: 4556E87403B311EF947EEE0B017001B1.roa (raw, json)
Hash identifier: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=
Subject key identifier: 6F:0D:98:C2:96:22:11:FB:19:30:FC:39:39:D1:B4:09:D9:D0:13:63
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01C3
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/4556E87403B311EF947EEE0B017001B1.roa
Signing time: Fri 26 Apr 2024 09:56:37 +0000
ROA not before: Fri 26 Apr 2024 09:56:33 +0000
ROA not after: Thu 30 Apr 2043 09:56:33 +0000
asID: 30988
IP address blocks: 196.200.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 09:56:33 2024 GMT
Not After : Apr 30 09:56:33 2043 GMT
Subject: CN=662b7a55-e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:24:61:2c:b1:d5:83:e8:65:66:17:b7:e3:
bd:44:f5:df:09:da:f2:5a:fc:65:d5:bc:4e:8e:32:
62:0a:c5:8a:34:86:e2:5a:60:2e:6f:e7:73:22:fa:
16:7a:be:2c:1d:6f:c4:55:83:80:c5:6e:91:6a:db:
45:9d:0f:22:5c:0f:87:d8:17:df:ab:35:3b:5d:0b:
60:23:f0:65:b7:9e:77:d1:c0:b7:64:b7:c0:73:11:
13:da:e7:c3:0f:a6:47:46:32:18:2e:d3:b4:f6:bf:
32:8a:3f:35:61:9b:56:02:2b:2d:54:30:b0:29:b3:
51:18:66:5e:c0:05:66:69:9c:62:68:72:40:63:ff:
6a:a0:04:6a:57:36:f3:77:3c:ef:e7:56:b6:0a:55:
ef:0e:71:bf:25:92:cd:c7:48:32:81:49:b2:1d:8f:
90:0e:63:b1:7a:2d:a2:e3:a2:38:8b:70:e8:03:2e:
25:8a:30:41:8a:86:84:70:82:81:4d:1f:b0:0e:a4:
6b:7f:ac:a9:21:0c:a1:32:d9:d9:cc:01:12:04:71:
8c:d2:ca:0b:c1:5a:dd:09:b6:a2:df:ab:bc:a3:45:
1c:2b:fc:a9:df:7e:c6:3f:dd:6e:b5:2b:83:ae:8c:
b5:09:5d:ae:a3:e9:d8:b9:91:b8:61:cc:2b:2d:84:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:98:C2:96:22:11:FB:19:30:FC:39:39:D1:B4:09:D9:D0:13:63
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/4556E87403B311EF947EEE0B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.114.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b6:9c:38:80:50:da:9f:a2:ad:3e:2e:de:88:43:08:57:c7:
ef:58:24:18:6b:3c:ba:64:cd:c6:86:40:32:d0:c1:93:fa:53:
72:e4:30:dc:31:94:1e:1c:09:86:43:61:0e:6a:4a:5d:85:d9:
88:a1:c9:24:cf:d6:4b:10:a7:37:b7:90:52:15:c6:02:04:ec:
d5:69:a7:b8:eb:c1:76:f0:50:8a:e6:3e:d1:a5:21:1a:54:ef:
5b:c0:2e:1f:2d:c2:0d:6f:e3:90:0e:80:88:2c:e2:53:36:bb:
64:5f:e0:03:83:bc:19:6b:80:43:db:04:75:de:70:89:56:ce:
a4:4d:d8:ac:f7:fe:d8:6f:b3:c3:12:0d:3d:13:43:23:3f:70:
7d:0a:d3:99:a3:36:40:d6:d0:95:19:d9:17:55:b1:2c:7a:fc:
39:e1:25:2c:6d:b8:0c:a4:96:28:a6:50:58:70:ee:6c:cd:e4:
32:c6:3d:c6:d7:4d:44:45:a5:0d:76:4d:a3:6b:54:d1:28:16:
7a:44:f4:d8:80:0f:d9:78:97:4f:01:0a:ee:d9:b1:7a:55:7c:
bc:ba:c1:62:7b:a1:d3:d7:bf:7f:4a:3b:af:5d:5e:7a:21:cc:
27:b2:a0:f0:7a:ee:b9:95:2f:b4:ab:2d:1b:6e:3e:10:17:e7:
e3:6e:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:22 2024 by rpki-client on console-ams.rpki-client.org