Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DF255D0003B311EF81582C11017001B1.roa
File: DF255D0003B311EF81582C11017001B1.roa (raw, json)
Hash identifier: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=
Subject key identifier: CC:CA:72:99:00:9F:D0:ED:FD:E1:86:0D:AF:F8:D4:DC:DE:0D:A7:E8
Certificate issuer: /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial: 01CB
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DF255D0003B311EF81582C11017001B1.roa
Signing time: Fri 26 Apr 2024 10:00:55 +0000
ROA not before: Fri 26 Apr 2024 10:00:51 +0000
ROA not after: Thu 30 Apr 2043 10:00:51 +0000
asID: 30988
IP address blocks: 196.200.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Validity
Not Before: Apr 26 10:00:51 2024 GMT
Not After : Apr 30 10:00:51 2043 GMT
Subject: CN=662b7b57-0f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:f7:49:25:22:74:8c:0d:72:b1:10:69:fc:
27:b7:0a:57:34:20:29:17:e5:be:fd:25:2c:b7:d6:
c7:b8:f7:3a:8a:62:f6:ee:1e:ba:4a:62:05:4d:2f:
f1:e0:e0:0b:aa:a8:80:8a:17:90:43:7d:f5:29:f9:
97:ca:6b:07:15:44:2b:83:2b:db:86:e6:a6:04:7f:
d2:14:4e:4a:65:e3:26:7f:a9:78:c3:61:55:cf:c9:
32:05:4c:95:2e:6d:c5:e3:79:3b:97:aa:65:62:58:
db:07:fd:2a:bd:58:83:62:34:37:b9:98:74:06:93:
dd:cf:99:72:35:e1:1e:63:78:c4:41:a6:30:2b:07:
15:2f:aa:cb:db:23:d0:ba:b0:3e:d2:79:f4:74:c7:
b1:c7:1c:4c:28:ad:e6:9e:d4:28:63:7a:6e:f1:84:
43:eb:31:60:3e:94:29:cf:41:ec:3f:ed:71:21:e4:
a1:aa:52:32:bc:0e:3a:78:dd:1c:38:be:72:09:16:
51:84:6e:b2:a9:51:f1:40:43:c9:10:56:2a:43:04:
c8:11:66:58:05:01:85:5d:f2:53:c4:43:87:03:ea:
1e:c6:75:64:5c:92:05:32:01:55:c7:5f:59:6c:c8:
9d:bc:43:73:ff:da:a8:2e:e7:2f:56:e7:4c:4e:45:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:72:99:00:9F:D0:ED:FD:E1:86:0D:AF:F8:D4:DC:DE:0D:A7:E8
X509v3 Authority Key Identifier:
keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/DF255D0003B311EF81582C11017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:39:8a:e6:63:2d:6f:72:63:3b:f4:32:b7:74:c9:01:ba:cb:
1e:21:48:c1:76:b4:92:9e:80:a3:94:2d:21:b9:64:08:bd:b8:
8e:13:e7:f4:50:4e:d9:6f:5f:40:32:0d:1d:02:f0:d7:de:98:
f6:11:be:b5:3b:a1:eb:6b:38:ac:61:e1:7c:10:c9:03:be:7f:
ca:79:0f:66:57:2b:73:e3:07:6f:f3:8e:c9:22:89:6b:86:4d:
3e:12:99:c0:4a:d3:a5:46:df:50:d4:73:9c:6a:68:ad:37:c6:
15:d6:45:95:9b:f9:78:50:ea:72:10:8c:63:1e:f4:25:cf:b4:
b1:66:ee:da:e8:32:52:f2:70:84:c0:9b:a8:0e:f8:af:81:9f:
2f:8d:6e:df:89:64:6e:38:ea:a5:56:dd:9a:a2:18:a4:5f:77:
7f:ca:e0:47:a3:d2:0c:3c:7c:d9:ce:ec:83:bf:04:15:4b:50:
dd:a7:5c:b4:35:81:9c:11:f6:5c:0b:8e:33:d6:82:cb:dc:62:
10:32:7d:44:c5:cb:d8:75:64:2e:66:e3:56:da:1b:04:ad:36:
b4:84:22:18:b6:e8:06:21:90:5f:05:b2:46:2f:f3:9a:48:34:
bd:00:e1:c5:43:78:cb:b8:79:fc:f4:d6:5b:dd:6d:76:8c:82:
7f:61:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:56:15 2024 by rpki-client on console-ams.rpki-client.org