Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/D38A415AF83611EE83D53363017001B1.roa
File: D38A415AF83611EE83D53363017001B1.roa (raw, json)
Hash identifier: +SyghC8ZiILJWWHH9KqLVIwAxeCZMQ27SraWuab7p1U=
Subject key identifier: 68:04:BD:F4:99:9A:95:32:A0:A1:0F:C0:57:D9:C1:02:54:79:97:CE
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0453
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/D38A415AF83611EE83D53363017001B1.roa
Signing time: Thu 11 Apr 2024 19:08:06 +0000
ROA not before: Thu 11 Apr 2024 19:08:01 +0000
ROA not after: Fri 11 Oct 2024 19:08:01 +0000
asID: 3320
IP address blocks: 196.44.120.0/22 maxlen: 24
196.44.125.0/24 maxlen: 24
196.44.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 May 2024 00:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107 (0x453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Apr 11 19:08:01 2024 GMT
Not After : Oct 11 19:08:01 2024 GMT
Subject: CN=66183516-0a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:48:34:29:37:2b:3c:23:98:85:f6:71:82:
44:32:da:cb:4b:ed:88:39:71:f2:44:24:a7:17:71:
8a:c8:05:61:86:d2:2c:40:9c:df:eb:cd:f7:7d:9e:
73:2e:da:dc:98:f1:90:1b:f9:bf:21:26:f4:64:05:
f2:32:2a:16:10:be:2c:c1:9c:fa:94:4c:f7:90:f6:
e0:ab:7c:2c:b4:a2:eb:d7:ca:79:ed:0f:c8:e2:b1:
b2:d6:c8:4a:7a:c1:d5:4c:28:38:49:c9:2c:09:75:
73:0a:8a:f1:24:c1:de:cc:7a:af:c5:c5:ec:9d:74:
fd:e2:39:05:18:60:69:a5:d7:fb:6c:dc:c1:5d:87:
8d:98:aa:25:d7:89:64:5e:44:29:e1:5f:df:eb:18:
79:e0:21:74:54:15:24:e8:48:22:85:97:3b:72:bd:
d8:54:6f:bd:12:13:00:f4:df:a7:5d:c2:5e:f5:03:
9b:d4:c6:7e:56:89:16:e5:de:6d:1e:1b:b1:d1:4e:
da:76:64:89:47:1b:a5:c1:e3:54:d4:d4:a2:7b:67:
63:bf:77:b8:dc:09:ef:49:ff:80:be:8f:97:31:f9:
95:ac:08:5f:8f:24:41:7b:36:c1:9d:77:3a:09:88:
82:7c:e4:89:85:b6:d6:a6:b8:00:df:cd:cc:a1:e6:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:BD:F4:99:9A:95:32:A0:A1:0F:C0:57:D9:C1:02:54:79:97:CE
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/D38A415AF83611EE83D53363017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.120.0/22
196.44.125.0/24
196.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
03:34:95:5b:ee:0b:b4:10:52:21:8d:23:e2:d1:77:9e:ff:7f:
3a:48:3f:92:67:5a:87:39:2c:07:a6:aa:5b:81:87:9e:6a:6e:
7b:56:dc:62:2f:24:8b:2c:54:89:82:43:47:03:a5:3e:e9:33:
d9:24:e7:9a:69:ae:4f:25:f5:34:63:1c:20:af:fb:3b:29:7f:
4a:94:a0:6f:2f:fe:30:f0:0d:b7:9f:32:df:0a:c5:80:08:1d:
a9:72:8a:1b:95:1e:b0:ab:6c:e2:b5:8d:8b:2f:e2:55:f3:13:
87:79:30:02:d5:00:1d:5a:79:74:08:31:0d:39:a8:ec:b1:c0:
d4:ac:95:31:54:5c:70:80:95:ef:27:2e:13:89:a7:c1:02:17:
34:63:be:62:db:f0:7b:f4:47:83:2f:ab:82:c3:3a:ef:65:eb:
f8:16:de:8c:e7:92:cc:4e:24:23:08:cf:9f:af:29:1e:ba:1d:
2f:d3:68:d4:8b:7b:3c:e4:a1:88:75:4e:b1:62:bb:ee:f2:7f:
0b:21:69:aa:dd:ac:00:ce:f3:10:78:70:2e:62:2c:e2:e6:76:
02:ec:d2:66:0f:e2:56:e6:81:aa:4b:d7:63:b2:df:3b:d7:46:
ef:69:86:10:9c:7d:85:46:df:95:c2:f5:99:be:a7:ad:fd:b8:
cc:a6:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:29:15 2024 by rpki-client on console-ams.rpki-client.org