Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0C5A77F809DE11EA9DFE7666F8AEA228.roa
File: 0C5A77F809DE11EA9DFE7666F8AEA228.roa (raw, json)
Hash identifier: 6SiwaDb1uvGbBT9dyGO8j6/t4gU17MUpOWl4GBTXgJ0=
Subject key identifier: 5F:C4:2E:D9:90:F9:2F:9F:2D:2D:0D:7E:1F:2B:B5:4C:9E:D8:AD:52
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 4A
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0C5A77F809DE11EA9DFE7666F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:33:09 +0000
ROA not before: Mon 18 Nov 2019 08:33:03 +0000
ROA not after: Sat 17 Nov 2029 08:33:03 +0000
asID: 327687
IP address blocks: 137.63.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:33:03 2019 GMT
Not After : Nov 17 08:33:03 2029 GMT
Subject: CN=5dd25744-35f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:34:26:ed:e7:0f:11:a4:dc:2f:3d:f6:86:
17:72:ba:a4:9f:c3:80:85:70:b0:b0:70:c4:6e:e0:
4e:99:55:2b:0f:a3:a2:00:53:46:87:ed:46:05:dd:
5f:9d:63:84:e8:02:34:4d:e3:4b:21:1d:d3:21:65:
18:e7:b1:57:73:60:ff:59:55:ed:cf:24:e8:00:d3:
5c:67:d7:ba:9a:67:f4:3c:5d:e1:7a:f0:4a:b4:1b:
47:5e:67:12:3c:ad:4e:8c:ca:a3:65:2a:f7:ce:f3:
eb:b8:41:41:81:7c:05:02:ad:29:90:59:a7:3a:27:
ce:aa:19:94:3e:61:06:95:a7:eb:85:49:97:27:5d:
d6:2b:9e:55:91:bd:94:33:29:bf:34:48:24:a6:7c:
6d:16:b0:6c:8b:23:33:88:80:e0:18:eb:a1:9c:51:
f6:aa:77:95:11:cc:1b:09:c4:a0:32:2f:4a:2b:4b:
e0:ff:83:8e:73:40:55:74:a1:31:a5:5d:27:7a:2c:
ff:aa:b1:82:88:b8:70:5e:fe:54:7b:cb:78:10:1d:
57:96:06:fa:a9:08:30:5d:f2:bf:57:d1:88:d5:b4:
58:8b:f4:fb:9c:c5:fb:09:9d:83:b3:f7:1a:8b:96:
51:2f:f1:a8:e1:ca:66:bb:f6:6f:65:d9:a0:fb:19:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:2E:D9:90:F9:2F:9F:2D:2D:0D:7E:1F:2B:B5:4C:9E:D8:AD:52
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0C5A77F809DE11EA9DFE7666F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2f:39:e4:46:2f:96:b1:f3:80:e5:f9:96:7e:b3:81:9b:7d:
17:7e:13:2c:e4:62:26:9c:2e:88:04:15:a4:77:a6:4e:21:dd:
01:99:e4:eb:31:9e:b4:5b:6d:19:aa:1e:e1:30:f7:d3:1d:78:
a8:84:48:43:2f:d0:11:da:ac:27:56:4b:ed:b5:99:b2:b4:ec:
f6:22:d2:0e:6c:e9:08:9c:f9:97:61:e3:ff:75:c4:fa:15:5d:
7a:d0:f8:c3:7c:a3:67:a1:b9:1d:2a:ea:0f:8c:68:9f:75:35:
cd:2c:55:ca:c7:1e:7f:60:41:2b:8d:f6:6d:3f:df:5b:1b:c1:
15:ba:e5:3e:6f:76:9f:ea:17:0c:0b:47:14:b9:b9:32:42:54:
c8:16:dc:26:c8:41:2e:c2:03:c9:1d:28:7d:e5:bc:58:73:5e:
aa:28:49:a5:55:d8:81:fd:e5:07:03:b8:11:d1:c3:99:36:3e:
ce:e6:03:ad:be:82:09:f8:d0:7c:35:fa:1b:f2:e5:38:2f:d2:
8e:e4:0c:d9:9f:c1:2a:ff:47:5e:b5:99:d7:ea:50:5d:20:5d:
9c:e9:05:b8:28:6a:4c:bc:f7:cf:e5:df:c1:bb:02:29:7e:d2:
06:5e:1c:17:10:10:f3:18:25:98:84:75:3c:4b:b9:2e:51:05:
be:d7:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org