Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0A21E50009F911EAAD9DDE7AF8AEA228.roa
File: 0A21E50009F911EAAD9DDE7AF8AEA228.roa (raw, json)
Hash identifier: t5MEtBOTeLcbaoO2EYVaHe/hVTigc5RidpcC9H6o4Kc=
Subject key identifier: 19:B9:91:E2:6B:CC:BC:BF:79:CA:C7:2E:51:64:90:7D:66:03:1D:A3
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: A4
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0A21E50009F911EAAD9DDE7AF8AEA228.roa
Signing time: Mon 18 Nov 2019 11:46:21 +0000
ROA not before: Mon 18 Nov 2019 11:46:16 +0000
ROA not after: Sat 17 Nov 2029 11:46:16 +0000
asID: 327687
IP address blocks: 137.63.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 11:46:16 2019 GMT
Not After : Nov 17 11:46:16 2029 GMT
Subject: CN=5dd2848d-ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:86:41:10:4b:d9:f0:9e:a1:3a:e1:05:9b:
54:71:8b:bc:d7:a5:22:55:08:a6:1a:65:d1:7b:23:
9c:a3:03:36:8b:83:fb:14:43:ce:df:fa:ff:af:a9:
6e:47:3a:f7:d5:da:4f:d0:91:25:f5:ef:07:b1:b3:
77:eb:8b:db:76:ef:c2:76:6b:86:f5:12:24:bd:c6:
f5:90:aa:d1:fa:f2:58:6f:77:bc:9b:0f:3c:1b:86:
92:24:f0:bd:28:53:77:02:27:29:08:17:93:b4:a1:
40:5b:f8:13:13:cf:4f:8e:99:be:09:ec:ae:4f:a8:
a4:9f:ea:64:c9:04:72:a7:a5:66:06:ec:fe:91:e6:
2f:72:70:d6:92:76:6e:b2:88:6c:41:ba:ae:2e:1c:
b3:1a:1c:b0:35:86:c3:51:22:a4:71:bf:2d:5e:13:
15:17:a5:5a:ff:c7:99:83:b0:da:36:be:a0:ba:0e:
80:e3:20:b3:70:d9:d3:4d:11:f5:e0:83:5e:fa:6e:
1a:0c:eb:82:de:db:63:80:c2:25:69:fd:95:8c:c9:
db:f8:6c:56:8c:49:b3:4b:b2:b9:ee:33:5b:ad:ed:
3e:eb:50:1a:62:94:43:b8:b2:b2:09:91:73:08:80:
56:85:54:6f:d9:77:dc:5a:71:b8:e8:43:36:dc:07:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:91:E2:6B:CC:BC:BF:79:CA:C7:2E:51:64:90:7D:66:03:1D:A3
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0A21E50009F911EAAD9DDE7AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7d:8a:6a:82:f8:26:b8:71:1c:11:0b:70:48:9f:c4:9d:59:
e8:6f:2c:74:ab:d8:42:be:2b:ee:e0:d4:65:b0:88:99:de:d6:
2a:0d:db:b0:87:26:9b:29:12:2e:77:b7:2b:1f:d1:b9:60:58:
47:7a:a9:f2:fb:bd:58:f5:c2:ed:86:1f:1b:d0:cf:9b:bf:cf:
dd:a5:fe:fd:cc:85:2b:88:89:59:04:ce:ff:5d:e9:fe:6f:c2:
6f:ae:47:26:55:d8:5f:14:5f:2f:e9:91:07:ad:d2:6a:9d:df:
17:8c:be:6b:7b:dd:15:45:ec:99:6a:8c:fa:20:6c:63:7b:5a:
69:07:a7:d3:88:f8:c1:81:d2:89:07:e5:4e:a9:1c:69:aa:67:
f0:20:01:98:62:d0:de:53:e0:1c:63:cd:1b:66:f1:13:a8:82:
f2:e6:67:13:81:38:de:0f:05:30:9a:10:66:06:d2:6a:38:84:
8c:55:ad:24:30:f1:25:19:56:ae:d2:31:49:e5:57:11:95:d1:
95:47:3d:c7:5d:63:f7:ab:aa:ff:3b:93:dd:11:5c:35:fa:27:
41:68:84:e3:3e:2a:92:fd:21:53:8b:ad:78:ef:a8:0b:9f:d6:
b5:77:13:31:a3:48:3d:95:9b:9b:cb:fc:5a:ca:fb:50:f1:b6:
e0:ef:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org