Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC8D0DE014011EFB2FADB18017001B1.roa
File: DCC8D0DE014011EFB2FADB18017001B1.roa (raw, json)
Hash identifier: YiKrwhEn+u75igheMy+BtD6Dr8zYhmEN0gK7keuPzkg=
Subject key identifier: A9:0E:C4:51:0B:A7:E8:EC:75:FD:95:D8:1A:D1:CE:EE:EA:82:55:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC8D0DE014011EFB2FADB18017001B1.roa
Signing time: Tue 23 Apr 2024 07:12:37 +0000
ROA not before: Tue 23 Apr 2024 07:12:33 +0000
ROA not after: Sat 11 May 2024 07:12:33 +0000
asID: 22773
IP address blocks: 45.196.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33764 (0x83e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:12:33 2024 GMT
Not After : May 11 07:12:33 2024 GMT
Subject: CN=66275f64-49bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:d7:75:74:08:42:c7:a3:48:d5:9c:cf:6d:
22:6d:5c:be:17:c8:96:d7:e0:d5:20:ee:9f:03:bc:
e0:21:25:1f:e7:1a:d5:2e:c3:f6:cd:73:30:e2:85:
9a:60:d4:2d:9f:d1:db:b3:dc:ee:bd:34:4c:7a:e0:
4d:02:8d:86:e9:f5:79:a6:3a:f0:3c:31:36:e8:af:
d7:82:79:44:d4:01:d9:a5:c8:9a:46:2b:96:37:7e:
ab:77:8e:3e:79:67:22:75:45:fc:7c:b7:2e:21:5e:
47:1f:aa:77:19:e7:ea:b4:02:cc:a1:7c:c9:c9:cc:
39:ff:26:08:0b:a8:e4:a7:44:7a:51:98:61:bb:af:
f7:a9:70:aa:96:de:9f:de:3d:6e:25:cc:86:49:6e:
48:b8:dd:b2:f6:f3:86:4e:3d:e5:b0:db:b5:cb:3f:
ee:60:3d:83:0f:6b:e6:ff:12:da:8a:33:5e:8a:10:
f7:03:1a:c2:97:52:52:15:bf:97:3a:af:8f:c7:32:
d4:d6:43:c6:0e:76:f7:27:b9:f7:7a:0e:1c:4a:cb:
67:f7:88:24:da:27:e0:21:6f:af:bc:28:3d:b2:5d:
c9:36:a4:5d:12:bd:d3:0b:21:41:f8:0b:90:e2:e4:
7f:3f:72:25:fd:1a:8a:4f:a9:a6:e8:72:4a:93:ff:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:C4:51:0B:A7:E8:EC:75:FD:95:D8:1A:D1:CE:EE:EA:82:55:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC8D0DE014011EFB2FADB18017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:85:50:54:ed:1f:3b:3f:ed:2b:59:63:44:ac:8a:ee:aa:08:
3b:2a:df:b8:40:33:84:bf:35:c0:29:cf:47:52:f7:96:96:e4:
dc:b5:cc:22:10:dc:0a:1e:04:f2:86:b8:95:68:32:0e:a1:e3:
ed:f1:25:61:c4:f6:2f:bc:a4:63:65:af:07:57:f4:df:c8:7b:
49:52:55:3b:85:6d:c3:a8:f3:14:cc:4f:71:81:c0:ef:3a:b4:
23:61:3f:e4:67:21:cb:02:fb:f9:40:2d:93:a9:ef:3d:41:33:
2f:61:df:9d:00:d6:46:26:3c:e7:85:7c:89:fa:d9:7a:82:82:
e9:4b:1c:93:14:63:95:3c:3f:e2:5d:12:bf:dd:9c:3b:03:fa:
f1:3c:79:a6:27:76:18:14:5b:8c:19:85:1a:41:15:18:d3:51:
fe:62:09:69:cd:0e:7b:fa:d9:4a:47:65:a4:8d:e9:0b:e1:3a:
c8:ba:af:b9:56:73:67:e1:3a:35:52:ec:37:f2:37:a9:bb:36:
3c:4c:cc:c2:a0:95:a6:a7:f7:1a:e9:9d:34:1c:5b:72:1f:92:
55:a2:54:cb:55:bb:0c:54:c3:82:66:f0:ec:77:bf:85:f1:4f:
36:6a:b8:c3:9d:20:c2:e4:6d:8b:a1:e2:c0:ab:73:26:c6:64:
e6:7a:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:25 2024 by rpki-client on console-fra.rpki-client.org