Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BF6DDF5603B211EFA0BA490A017001B1.roa
File: BF6DDF5603B211EFA0BA490A017001B1.roa (raw, json)
Hash identifier: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=
Subject key identifier: 47:5D:E8:55:18:47:50:B4:75:8B:A3:0F:E7:A2:77:71:98:B6:49:57
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01BF
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BF6DDF5603B211EFA0BA490A017001B1.roa
Signing time: Fri 26 Apr 2024 09:52:52 +0000
ROA not before: Fri 26 Apr 2024 09:52:49 +0000
ROA not after: Thu 30 Apr 2043 09:52:49 +0000
asID: 30988
IP address blocks: 196.200.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 09:52:49 2024 GMT
Not After : Apr 30 09:52:49 2043 GMT
Subject: CN=662b7974-49a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:63:14:62:fd:cd:ef:f8:60:c8:9e:af:47:
01:e3:1d:94:0b:f7:5b:07:34:60:42:2b:a9:5b:04:
5f:71:50:09:df:59:bd:89:7b:7b:e8:ff:da:06:dc:
b4:11:29:1c:fa:2e:76:ec:35:77:07:f0:5d:3c:d6:
25:5c:e7:84:05:c1:13:ed:c7:3d:9b:0b:29:63:f0:
df:6d:44:0e:c6:81:41:16:e5:7c:9b:1d:ef:0c:2d:
5b:6a:0c:2f:18:0a:ba:ca:1d:28:a0:ce:71:e9:8f:
e2:ed:40:46:b0:85:f5:6e:ea:28:e6:7a:4e:19:7c:
f9:71:6d:01:62:95:a5:d7:57:39:d1:fb:7e:80:7b:
64:a5:9b:17:4f:7d:25:e9:c2:86:ab:02:18:98:19:
89:ba:ad:14:48:86:66:37:df:3c:cd:b4:9e:34:ab:
dd:ba:47:57:30:a4:be:ae:86:aa:17:e6:67:f4:1f:
b5:e5:dc:f9:e3:25:c6:53:91:c2:5d:5f:57:84:f3:
f1:6f:58:3b:16:31:f4:3d:7a:9d:d4:58:72:c4:bb:
67:f9:42:5f:39:70:f4:f6:1e:50:14:fb:1f:a2:8e:
0f:5c:b7:6c:97:43:86:14:6b:02:7d:f0:6e:dd:b3:
1e:50:19:35:88:65:3f:89:5f:f7:79:a3:aa:e6:2a:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:E8:55:18:47:50:B4:75:8B:A3:0F:E7:A2:77:71:98:B6:49:57
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/BF6DDF5603B211EFA0BA490A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7b:75:12:a5:b5:41:fb:31:64:10:3b:22:3a:2e:3b:0d:85:
7e:3f:4d:3e:26:da:9d:5e:34:a2:7f:38:bf:f6:12:e0:33:60:
7c:10:bf:8c:02:6a:dd:09:11:b0:72:f5:0c:c4:76:3f:5b:ce:
16:19:5d:a3:42:d2:1b:c6:3d:8c:23:f4:61:07:91:79:00:d4:
9d:db:5d:26:28:7f:f8:56:bd:8e:fd:3c:8e:f4:28:1f:45:b8:
6a:c6:df:bb:99:9a:c7:3f:58:d0:01:56:7b:fb:71:ee:59:36:
2d:f8:1a:0e:7c:e7:a1:29:fe:e5:a1:b1:29:e8:da:92:32:87:
95:24:8f:00:f2:79:be:04:df:fb:3f:e0:8d:4f:5b:30:f6:f7:
f3:29:b2:fd:7f:6d:17:78:63:3c:18:d1:8d:bb:4a:c0:5c:4c:
fe:be:3b:64:be:76:ce:21:5f:75:9d:fd:3f:71:b2:2a:9a:91:
b4:38:55:c7:a5:7c:89:88:e9:86:37:7c:06:73:25:4e:7a:84:
30:b1:e5:83:24:e9:4b:4b:fc:f0:c9:c1:7a:64:de:c3:a7:e2:
88:6d:92:ef:7d:6c:a8:18:45:a0:5e:bb:0f:bc:3e:f0:41:5d:
db:a7:65:c2:e7:c4:7a:bd:0a:62:55:0f:d3:aa:a1:ba:c5:55:
c4:48:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:23 2024 by rpki-client on console-ams.rpki-client.org