Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa
File: 0D4C979209DC11EA8A2AE064F8AEA228.roa (raw, json)
Hash identifier: fCgpTez6iXBeosxDtOt9UerwpyN/z3HHAK8Okwt56Ps=
Subject key identifier: 8E:19:4C:92:41:C9:65:58:20:83:D4:F6:1E:B6:B3:BB:4F:A6:97:F7
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 3A
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:18:51 +0000
ROA not before: Mon 18 Nov 2019 08:18:47 +0000
ROA not after: Sat 17 Nov 2029 08:18:47 +0000
asID: 327687
IP address blocks: 137.63.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:18:47 2019 GMT
Not After : Nov 17 08:18:47 2029 GMT
Subject: CN=5dd253eb-2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:a2:f2:8a:cd:2e:72:d1:53:4f:37:1a:6d:
d8:38:27:42:31:a2:50:5b:94:a4:88:80:4b:a3:88:
38:80:25:b2:8d:ee:ea:1b:14:63:6a:bb:0e:00:d2:
19:67:f5:f8:53:9d:c3:ba:ad:b2:7e:19:38:27:27:
7d:ae:91:02:a4:9d:66:20:e3:6f:74:1f:af:c2:31:
77:7c:40:36:64:90:5d:20:e0:fd:04:4b:cf:d2:ba:
11:eb:c9:de:c5:55:e8:17:de:e8:e1:c9:49:ba:c8:
be:73:ac:26:80:be:5e:96:41:73:ef:79:28:a5:be:
ad:c9:f3:7e:ca:ab:36:8a:27:73:6d:52:c3:c0:3b:
5f:ba:9f:51:c3:ce:f3:f9:ef:3d:8b:94:96:e7:61:
3f:ec:cb:1d:93:9c:8f:f8:85:97:ef:61:d3:56:fd:
da:49:9f:de:6c:69:f5:11:e6:a4:5b:b4:16:64:37:
67:d8:69:24:7e:23:da:55:31:75:c8:24:3e:22:2c:
00:e7:e7:20:c2:be:e2:e0:52:ff:d0:25:68:7d:fe:
c8:cb:44:50:5d:0d:b0:18:b2:73:df:d0:f8:24:d3:
06:3d:f4:fe:91:eb:68:94:52:4c:17:7c:a2:96:36:
e3:ad:a2:ae:7a:13:23:75:76:3e:76:ad:c8:d1:75:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:4C:92:41:C9:65:58:20:83:D4:F6:1E:B6:B3:BB:4F:A6:97:F7
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3d:46:b8:3e:99:dc:56:15:f2:07:01:ab:88:38:3b:3d:75:
a7:6c:5c:66:35:c3:9a:80:c9:4f:36:1c:0b:e7:07:73:86:89:
02:c0:aa:07:cd:c0:6c:83:29:6a:9e:47:73:4e:61:52:b5:5e:
88:27:01:c5:37:74:66:45:7f:55:47:9f:f2:26:1d:23:f4:26:
fd:28:6f:51:0b:cb:6a:f5:68:bc:fa:35:32:55:d7:5e:cb:3f:
2d:3d:2e:d6:2d:c5:e3:18:61:21:35:49:72:eb:80:66:c7:07:
0b:63:e2:1c:8c:8e:88:0d:7a:f1:bd:57:58:6e:6b:96:4b:0c:
84:17:7c:d4:a6:a1:71:5a:98:81:a6:36:9c:47:cf:61:66:1e:
9e:6e:6c:c0:76:b1:7a:6b:16:10:1f:8d:c6:33:03:9a:dd:17:
60:a8:e3:3e:1f:01:ae:30:58:c1:20:25:07:6e:ad:bb:fc:67:
93:aa:ef:64:e0:9f:69:11:4c:0c:bb:2f:4d:a5:ab:c8:4a:a3:
8c:d5:bd:7f:79:25:6a:1f:0e:12:49:c9:2d:0b:1c:27:08:f7:
38:32:59:08:7f:8c:96:8d:c6:89:a9:a0:04:0b:42:3b:4b:6b:
e3:a3:92:cd:c5:81:66:82:09:9f:13:89:a4:ef:49:b9:3b:90:
e2:5c:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org