Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/12006DDC09E511EA9D11236CF8AEA228.roa
File: 12006DDC09E511EA9D11236CF8AEA228.roa (raw, json)
Hash identifier: ZRf+1DjvjN8nKuf+FKkAm5MGr2fPW5lYS7Cal5gVXpU=
Subject key identifier: CE:A7:FC:8E:A2:F8:14:A6:F4:EE:1E:B2:64:E4:5A:A0:7F:1E:0A:9B
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 7C
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/12006DDC09E511EA9D11236CF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:23:25 +0000
ROA not before: Mon 18 Nov 2019 09:23:20 +0000
ROA not after: Sat 17 Nov 2029 09:23:20 +0000
asID: 327687
IP address blocks: 137.63.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:23:20 2019 GMT
Not After : Nov 17 09:23:20 2029 GMT
Subject: CN=5dd2630c-0881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:84:3a:54:13:9d:92:25:99:a9:53:44:c8:
f3:5f:cb:d5:b1:1e:73:c9:b6:4d:41:63:18:ab:c1:
9b:67:f7:32:2e:2c:17:e5:9a:b9:af:05:a7:69:c4:
cf:ac:bd:40:9d:b8:4f:0e:db:45:88:71:b3:1b:26:
1a:88:f7:96:9b:a3:86:df:e6:a9:c8:fc:f3:bb:5e:
a6:a7:3f:94:fc:e2:7c:39:42:c0:4e:9e:67:b9:28:
a6:64:87:61:11:30:cc:67:66:33:c5:74:9f:ea:e1:
f3:11:e3:2f:66:ec:15:66:e9:ab:c7:fa:08:cd:d4:
e7:ca:b9:e3:ff:a8:2e:49:7f:79:ee:5c:d4:cc:ba:
7d:e9:7b:a2:e7:9e:d4:38:36:4b:d4:cc:1c:97:59:
03:74:3d:d6:3b:78:67:20:6b:22:16:95:ef:21:9f:
42:09:f3:fb:2a:ee:2b:a8:eb:e9:f0:e2:1e:fc:cf:
6a:24:11:eb:4e:04:84:d8:ce:d7:73:ba:cb:22:f0:
92:1e:28:1f:1c:b6:ba:7d:d8:4b:d0:74:09:61:46:
02:ae:88:ad:0e:f8:de:af:6c:26:52:2e:a5:ee:00:
de:37:87:66:fa:16:1d:b9:53:f6:1f:58:40:f0:74:
6a:86:97:2a:7e:08:72:75:a8:05:50:06:4d:55:db:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:FC:8E:A2:F8:14:A6:F4:EE:1E:B2:64:E4:5A:A0:7F:1E:0A:9B
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/12006DDC09E511EA9D11236CF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b0:08:4c:cd:82:a7:ea:f0:6c:94:6c:9e:e3:7e:0c:d1:f4:
9e:b3:4b:4e:aa:91:c9:54:d4:c9:d8:4b:09:59:d2:e6:53:83:
cc:0c:dc:b6:9b:7b:0b:d8:26:7f:5b:76:2f:4a:49:da:16:7c:
13:d8:52:03:8b:3a:09:4f:cd:63:f5:8b:56:11:85:4b:13:81:
f2:7a:5d:f6:a3:30:71:13:37:c7:35:cb:c9:f7:0a:aa:78:d5:
5d:32:69:3f:f3:21:8d:82:d3:ef:61:7e:22:ad:20:30:2b:e9:
16:90:39:2d:7a:69:c5:84:31:c5:41:12:b4:b3:17:a2:21:16:
38:d3:71:f4:cc:cc:64:32:12:21:8d:29:bc:36:a2:cb:15:e5:
db:8d:1d:19:34:48:ea:f4:8c:1e:60:29:2e:3c:41:a8:67:31:
93:6d:1a:00:22:a9:3f:59:d4:16:57:b4:1b:4f:5c:ae:6b:23:
7d:af:6d:68:4d:1f:5b:de:f0:2b:30:18:69:60:04:3c:a1:92:
11:2d:22:79:80:c8:de:c2:41:ad:f2:ab:16:6f:1f:be:f9:14:
71:42:25:9e:ca:3a:b5:1b:d4:a5:91:d9:1f:15:2f:44:c1:bc:
0d:02:db:ff:4a:19:4e:91:78:5d:d1:46:44:71:db:96:14:3f:
1e:4e:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:45:52 2024 by rpki-client on console-fra.rpki-client.org