Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBCBBBA0277B11EE8E3AB1894AD9E6FC.roa
File: DBCBBBA0277B11EE8E3AB1894AD9E6FC.roa (raw, json)
Hash identifier: v77xF6xP/EX+f9XHr6U/aZuipkReYT5hseLmBIug+h8=
Subject key identifier: 91:86:8A:AA:6B:A9:A6:DE:9B:83:ED:33:A3:A0:D6:6B:CB:F3:FF:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3185
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBCBBBA0277B11EE8E3AB1894AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:05:42 +0000
ROA not before: Fri 21 Jul 2023 04:05:38 +0000
ROA not after: Thu 13 Jun 2024 04:05:38 +0000
asID: 7018
IP address blocks: 156.248.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12677 (0x3185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:05:38 2023 GMT
Not After : Jun 13 04:05:38 2024 GMT
Subject: CN=64ba0416-5e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:53:7c:bf:79:18:2f:4f:17:00:55:28:8f:
89:b3:c8:ad:e5:4e:6a:16:e3:d6:e4:d5:8d:3f:a9:
02:07:45:84:f4:95:37:b6:05:31:ab:fd:86:61:42:
d6:3c:29:dc:84:c8:38:d5:50:a8:59:65:64:11:f1:
c5:f9:9c:c1:6d:2b:fa:ea:9b:75:70:01:65:71:8c:
91:15:bc:75:ef:6a:e8:5d:95:c6:2d:7f:88:a9:6a:
f6:fd:3a:36:67:36:75:6d:ec:b2:a9:b4:9b:d7:57:
80:2e:52:3f:f4:1f:db:48:da:b2:fc:16:85:35:d1:
f7:8b:a2:b3:65:c8:5e:79:b0:c6:68:22:29:d6:be:
5e:fe:92:81:56:91:5b:99:9e:ad:30:6b:9b:ca:1e:
8e:a7:79:8a:81:7e:60:8f:d0:bf:aa:ec:64:d7:7e:
b4:1e:80:05:38:58:42:59:d5:e2:26:83:ca:ea:3d:
dc:f7:45:99:da:91:97:5e:fe:ae:62:42:63:e8:03:
64:49:e4:4c:d9:dd:b0:6a:04:5e:f8:85:c3:83:7d:
78:2f:c8:bf:09:73:e2:ae:50:a3:7b:cc:bc:21:14:
3b:6a:ac:64:ee:86:e4:c1:c2:07:1a:84:9c:1f:62:
e3:d3:03:e6:16:39:ab:d5:50:87:68:52:75:8b:68:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:8A:AA:6B:A9:A6:DE:9B:83:ED:33:A3:A0:D6:6B:CB:F3:FF:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBCBBBA0277B11EE8E3AB1894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.104.0/22
Signature Algorithm: sha256WithRSAEncryption
54:60:91:12:50:db:fb:15:ee:d5:f9:84:68:27:f7:3c:7d:6e:
10:db:90:dd:15:2c:5b:92:ce:f9:50:44:21:2e:e9:da:b7:71:
81:47:02:44:f9:30:97:9f:ce:c6:db:e6:9e:2b:22:70:8d:14:
5e:bd:16:af:66:fe:af:c1:22:24:ff:6d:e9:b5:9a:80:42:74:
51:59:2c:e2:1b:8a:89:81:a4:18:29:c6:9f:98:31:56:33:b8:
17:de:1f:8b:2f:63:3e:4e:d8:a2:0b:6b:82:b0:c8:1b:a6:a1:
27:20:3d:0d:05:f9:57:76:f1:79:47:4e:32:3a:43:93:3d:99:
e3:e5:17:a6:41:c7:31:d3:ca:b3:c8:06:dc:ac:94:c9:4d:01:
09:c4:e2:03:90:4a:35:04:83:79:96:dd:75:88:af:d5:5b:39:
6b:4d:2b:91:68:2a:d4:de:96:8a:e8:63:5e:d8:b2:01:47:8d:
d0:7a:93:cf:af:46:3b:f7:b7:49:59:fb:90:bb:ef:d7:55:0a:
c5:8c:44:37:9f:29:9b:07:29:9c:69:16:9f:32:2f:7e:39:5a:
86:6b:cd:4d:a4:d3:c4:14:a1:b4:95:bd:d3:84:ce:6d:20:31:
42:0f:44:11:c8:84:a4:22:c7:9a:97:95:15:07:a9:1f:49:b9:
30:22:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:54 2024 by rpki-client on console-fra.rpki-client.org