Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/21012F5209DF11EA8AB15867F8AEA228.roa
File: 21012F5209DF11EA8AB15867F8AEA228.roa (raw, json)
Hash identifier: /IvmgCEfohkr6rLCRI4p3vvglYNMMYyzlkJryeSujy8=
Subject key identifier: FC:E1:BB:ED:67:65:EB:54:74:C0:A0:C8:7D:E7:48:83:17:2C:10:93
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 54
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/21012F5209DF11EA8AB15867F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:40:53 +0000
ROA not before: Mon 18 Nov 2019 08:40:47 +0000
ROA not after: Sat 17 Nov 2029 08:40:47 +0000
asID: 327687
IP address blocks: 137.63.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:40:47 2019 GMT
Not After : Nov 17 08:40:47 2029 GMT
Subject: CN=5dd25914-17b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:bc:fa:1a:a9:9b:93:79:d0:08:c4:2d:87:
4f:6a:87:15:68:96:93:c3:5a:79:e6:9a:15:c4:7e:
5a:ab:06:95:90:aa:65:5e:d1:e6:8a:1a:4a:f3:2a:
b6:89:1e:2b:a8:8e:14:9e:bb:b5:d1:74:d5:df:94:
c3:04:35:cb:a8:4d:cf:3a:22:15:1b:c1:df:8e:c7:
26:fe:87:b9:34:99:e0:4f:de:9f:5c:cd:e2:41:45:
52:4c:74:ed:ce:c1:13:86:1b:b1:bc:0f:af:65:fc:
17:79:b6:9b:5c:af:fa:99:b1:32:76:05:b3:b6:1d:
4a:01:86:d2:5b:32:77:03:3a:be:32:ff:33:05:c1:
22:07:39:6b:eb:93:12:49:a7:ec:9c:4b:6d:1a:4b:
b5:6a:2b:95:e2:6f:48:4f:9f:88:b6:7c:0f:79:1a:
e7:a1:7e:56:e6:6f:61:6d:8b:f6:ff:00:77:99:ba:
b7:8b:83:22:d4:cc:29:b0:a8:c4:be:a5:3e:32:14:
08:7f:c4:d7:9a:b8:a7:cc:0a:96:9a:ac:38:f4:c1:
f1:69:48:ea:09:c3:f1:3f:8f:9c:9d:88:7a:37:66:
93:7f:62:a7:39:b6:c2:fe:36:1c:7a:96:ed:1b:c9:
a9:ad:1a:64:ac:a0:40:32:0a:7f:81:e4:84:e2:bd:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:BB:ED:67:65:EB:54:74:C0:A0:C8:7D:E7:48:83:17:2C:10:93
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/21012F5209DF11EA8AB15867F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.137.0/24
Signature Algorithm: sha256WithRSAEncryption
10:52:33:39:5f:61:dd:fb:ea:95:31:bf:0d:c3:4b:21:45:83:
d6:9b:1f:a4:85:e7:b1:9d:3d:4a:53:ba:a8:b2:27:cd:d8:59:
00:b3:3b:a3:c2:6b:5e:11:65:d5:fb:05:27:8c:30:56:f7:9e:
35:50:35:2a:27:4b:0f:e5:ec:9f:9d:e0:99:5d:f5:83:2f:56:
b2:f9:13:1f:22:20:fc:cb:66:1f:27:fc:6b:ac:52:fe:8c:b5:
c7:93:2a:18:85:7d:f0:2c:f7:64:be:3d:89:3b:77:ca:91:cc:
a5:92:d6:11:d1:ec:4b:58:61:6a:14:75:de:af:5c:11:6d:c2:
3a:2d:6b:b7:0a:88:0f:b9:11:7d:2b:21:43:b4:e8:31:22:ac:
49:f1:7c:ef:64:60:ac:45:e7:9d:91:8c:6f:60:a6:f4:86:85:
f1:2d:20:9a:06:a0:93:40:b9:91:6e:ea:90:6c:88:0b:ec:4f:
07:da:78:4a:56:c5:ee:00:5f:97:a4:62:b6:c0:95:6e:24:0a:
4d:92:8f:c1:7d:e2:d9:3d:05:b6:08:d6:45:bf:5c:6c:d4:cf:
6f:b5:20:a3:71:43:9e:26:4d:b0:d9:c8:d1:8f:97:e9:73:23:
18:f2:e6:2b:7f:c3:fb:25:44:98:d7:dd:8c:cf:2b:b3:10:36:
c1:87:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org