Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BDBE112003B311EF8DDE9910017001B1.roa
File: BDBE112003B311EF8DDE9910017001B1.roa (raw, json)
Hash identifier: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=
Subject key identifier: 1B:95:8C:A4:17:46:FC:1E:7B:1C:EC:3C:46:6C:CD:EA:A4:9A:54:4C
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01C9
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BDBE112003B311EF8DDE9910017001B1.roa
Signing time: Fri 26 Apr 2024 09:59:59 +0000
ROA not before: Fri 26 Apr 2024 09:59:55 +0000
ROA not after: Thu 30 Apr 2043 09:59:55 +0000
asID: 30988
IP address blocks: 196.200.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 09:59:55 2024 GMT
Not After : Apr 30 09:59:55 2043 GMT
Subject: CN=662b7b1f-1c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:14:05:d4:46:64:53:90:7f:40:25:65:c4:
79:38:8b:01:a2:9b:a1:f3:c4:0f:02:df:a0:a7:23:
27:51:ab:68:f4:c4:28:24:2b:da:7e:1b:62:ae:c6:
bc:7d:2c:cf:bd:55:7f:00:e0:d5:f5:50:34:fe:ad:
5f:cc:e6:b7:9a:19:c9:9c:87:f5:56:07:42:1f:fa:
ce:32:2e:7a:02:b8:13:96:d9:31:59:ca:81:eb:54:
fe:05:09:34:ad:c0:27:1a:75:f9:85:46:71:9f:03:
86:c5:8b:80:13:8e:9b:4f:c1:63:4a:62:67:a3:13:
65:9e:99:57:c8:de:df:65:d6:a7:0e:50:65:81:be:
d0:90:93:de:71:31:f1:41:01:ae:b2:4c:fe:6c:ea:
e0:a6:93:34:4f:72:22:68:9f:81:da:5d:e8:96:83:
b7:de:89:7d:a7:6b:ff:6f:61:e8:3e:5c:15:f2:72:
9c:fc:6b:2d:e9:e6:31:d6:d6:08:37:76:3a:1d:8e:
88:db:c3:79:e1:b5:15:36:57:6d:b3:ab:17:c2:fb:
3a:d4:16:09:ea:58:d4:c9:4b:01:6b:73:ec:c7:45:
c8:a7:b4:6c:bc:6e:fb:4d:a2:d1:d3:27:b0:67:59:
57:38:e2:c4:7a:79:09:c2:cc:86:f9:91:41:54:ec:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:8C:A4:17:46:FC:1E:7B:1C:EC:3C:46:6C:CD:EA:A4:9A:54:4C
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BDBE112003B311EF8DDE9910017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.118.0/24
Signature Algorithm: sha256WithRSAEncryption
00:48:3d:ee:bc:dd:07:56:29:fc:34:b1:14:f2:99:72:6a:8c:
45:8c:b4:71:ad:b3:d7:f3:6b:fc:45:09:22:df:b6:33:3a:fa:
87:8c:52:a7:be:0e:be:02:d5:78:6c:5b:b3:8d:7f:b9:4a:f9:
5a:55:2c:03:36:92:f3:4d:9b:c7:aa:fd:3d:99:bb:e0:79:d5:
3a:8c:72:38:52:14:3c:fd:9c:7d:0e:1e:c9:61:1e:f2:d8:6c:
e5:51:c7:6c:57:f7:58:ed:e1:6b:1b:bc:8a:a4:1f:d4:3e:e8:
4d:04:0e:6f:3d:4d:e0:dd:92:fc:45:50:33:9f:d4:2c:50:94:
a5:20:6c:ee:52:d7:0a:75:3d:27:c2:bf:cc:8b:19:1f:ef:78:
6a:0a:92:3f:1b:29:70:06:c5:e4:55:b3:61:34:f9:4f:2b:f9:
b6:c4:12:4f:66:56:fa:84:a1:a8:38:5d:bd:f4:f1:53:79:6e:
c0:03:19:e6:8d:2b:79:84:08:e5:90:a1:12:97:34:f9:9d:cf:
7b:e0:8c:6b:c6:83:09:b1:da:b1:58:bb:41:30:fa:1e:6e:a1:
26:a4:4e:90:d9:b1:7c:60:4c:f4:4b:7e:28:1a:b0:b2:78:76:
d6:7a:62:e8:83:c4:9e:44:b6:a9:11:9a:da:69:9a:7d:ec:89:
e8:db:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org