Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/02FBA6E209DD11EAAE30A965F8AEA228.roa
File: 02FBA6E209DD11EAAE30A965F8AEA228.roa (raw, json)
Hash identifier: UjMEQO4Yg/mIe5J6p6TDEB4Br8TIYLbi49hJmMSr4yc=
Subject key identifier: 9A:AB:18:A2:59:75:C4:8F:42:65:6C:C7:B6:DA:1B:71:75:FD:A8:70
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 44
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/02FBA6E209DD11EAAE30A965F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:25:43 +0000
ROA not before: Mon 18 Nov 2019 08:25:37 +0000
ROA not after: Sat 17 Nov 2029 08:25:37 +0000
asID: 327687
IP address blocks: 137.63.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:25:37 2019 GMT
Not After : Nov 17 08:25:37 2029 GMT
Subject: CN=5dd25587-6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:e9:7d:f7:a1:26:c9:d8:48:ac:42:07:e0:
a9:3f:34:ff:23:5d:0e:de:95:75:71:c8:fa:b1:73:
4c:7e:38:b6:b1:7f:67:13:23:34:c5:73:87:d6:0a:
9e:ed:8d:fb:fc:41:c1:7d:dc:cb:eb:a6:a7:8f:b7:
c6:ac:50:a7:a5:cf:88:dc:d9:52:f0:7d:fd:21:33:
26:27:82:cd:5f:29:db:17:e9:81:ba:1c:67:84:43:
d1:60:e5:77:52:60:5f:47:12:a2:31:01:f6:a8:57:
21:e5:ee:a7:58:80:60:7d:6f:c9:1d:72:a8:e1:93:
b0:b9:d6:e4:23:5c:b8:97:e1:1b:34:fb:3c:0d:92:
c8:e2:fb:ec:b9:e0:c5:7f:12:f9:cc:fa:a6:de:d3:
01:92:50:8b:f5:bf:ff:b4:6d:42:c7:81:e7:0d:dd:
44:bf:d4:01:4a:ef:1f:21:9b:1d:96:ce:1d:b2:7d:
84:18:8c:44:fe:a6:ef:8c:7a:7c:d1:e1:c4:da:d9:
fc:cd:32:93:91:4f:87:f7:d9:05:e4:5e:9b:79:ad:
4a:b2:07:be:d5:81:e1:0b:2f:7a:ee:c9:f0:6c:7c:
13:c7:31:2e:72:4e:67:db:6b:78:0c:eb:f9:11:bb:
97:f6:d6:c4:90:62:b3:14:84:16:36:0a:00:cd:00:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:18:A2:59:75:C4:8F:42:65:6C:C7:B6:DA:1B:71:75:FD:A8:70
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/02FBA6E209DD11EAAE30A965F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.150.0/24
Signature Algorithm: sha256WithRSAEncryption
19:15:d0:98:ce:9a:38:35:08:22:5b:ab:e5:a9:28:09:46:38:
c2:8b:96:0c:6a:e3:b2:50:84:d3:ff:45:7b:f9:8f:b2:2c:ae:
ab:59:15:a1:87:e0:62:7e:19:dd:e9:18:0b:e2:98:b2:af:35:
2f:9f:42:08:a2:bf:ea:cb:69:31:44:8d:e8:34:f0:b3:24:ac:
ed:b2:1f:72:f8:04:71:09:34:17:bb:f5:f9:26:21:4c:96:e8:
2a:52:c3:6e:95:55:fa:ef:dd:62:1a:5c:c0:08:2b:79:2b:f8:
a1:20:8b:70:e6:6c:fc:28:04:59:38:30:9a:af:6b:cf:a0:f9:
f8:6f:ee:9e:3c:8a:f6:06:ab:db:e2:07:0b:23:d5:0b:97:73:
34:27:79:f4:76:f6:23:f7:58:66:cf:77:23:e9:39:46:1d:fe:
22:9f:ec:39:77:64:72:8d:c0:c4:43:d1:7a:2b:54:91:57:c9:
bd:5c:b0:86:80:58:96:6a:48:e5:28:4e:30:ef:ed:7b:98:8c:
97:94:03:a9:3e:a7:30:89:2c:4e:70:bd:1a:ac:14:09:b8:ae:
58:2b:43:c3:9a:62:ca:d0:21:48:a8:c6:78:8c:74:2e:76:33:
b3:dc:29:c5:50:57:26:57:83:32:d1:a6:53:e7:42:82:b7:d7:
20:32:da:e2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBRDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA4MjUzN1oXDTI5MTExNzA4MjUzN1owGDEWMBQG
A1UEAxMNNWRkMjU1ODctNmQ3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEh6X33oSbJ2EisQgfgqT80/yNdDt6VdXHI+rFzTH44trF/ZxMjNMVzh9YK
nu2N+/xBwX3cy+ump4+3xqxQp6XPiNzZUvB9/SEzJieCzV8p2xfpgbocZ4RD0WDl
d1JgX0cSojEB9qhXIeXup1iAYH1vyR1yqOGTsLnW5CNcuJfhGzT7PA2SyOL77Lng
xX8S+cz6pt7TAZJQi/W//7RtQseB5w3dRL/UAUrvHyGbHZbOHbJ9hBiMRP6m74x6
fNHhxNrZ/M0yk5FPh/fZBeRem3mtSrIHvtWB4Qsveu7J8Gx8E8cxLnJOZ9treAzr
+RG7l/bWxJBisxSEFjYKAM0AeOsCAwEAAaOCAmswggJnMB0GA1UdDgQWBBSaqxii
WXXEj0JlbMe22htxdf2ocDAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvMDJGQkE2RTIwOUREMTFFQUFFMzBBOTY1RjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+WMA0GCSqGSIb3DQEBCwUAA4IBAQAZFdCY
zpo4NQgiW6vlqSgJRjjCi5YMauOyUITT/0V7+Y+yLK6rWRWhh+Bifhnd6RgL4piy
rzUvn0IIor/qy2kxRI3oNPCzJKztsh9y+ARxCTQXu/X5JiFMlugqUsNulVX6791i
GlzACCt5K/ihIItw5mz8KARZODCar2vPoPn4b+6ePIr2Bqvb4gcLI9ULl3M0J3n0
dvYj91hmz3cj6TlGHf4in+w5d2RyjcDEQ9F6K1SRV8m9XLCGgFiWakjlKE4w7+17
mIyXlAOpPqcwiSxOcL0arBQJuK5YK0PDmmLK0CFIqMZ4jHQudjOz3CnFUFcmV4My
0aZT50KCt9cgMtri
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org