Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/247ACC800A9111EA98D2046EF8AEA228.roa
File: 247ACC800A9111EA98D2046EF8AEA228.roa (raw, json)
Hash identifier: Pan7tYVcR6rx8oSjb8xpEWMuD1OMUvycIamb4D8771M=
Subject key identifier: 7A:08:A6:BE:DE:EB:B5:97:16:BB:CB:F5:16:0A:E1:F5:B6:71:65:C2
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: B3
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/247ACC800A9111EA98D2046EF8AEA228.roa
Signing time: Tue 19 Nov 2019 05:55:09 +0000
ROA not before: Tue 19 Nov 2019 05:55:04 +0000
ROA not after: Sun 18 Nov 2029 05:55:04 +0000
asID: 327687
IP address blocks: 137.63.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 19 05:55:04 2019 GMT
Not After : Nov 18 05:55:04 2029 GMT
Subject: CN=5dd383bd-290d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:d6:2d:c6:e4:65:a1:5a:ca:62:8b:c5:3b:
e5:09:57:b1:3b:88:60:0d:77:cb:e1:4e:74:0b:17:
fb:2c:c4:e7:0f:ec:be:e7:a7:40:20:bb:98:0d:57:
66:cd:29:cf:21:26:34:c1:33:dd:96:a2:42:ac:c0:
37:9d:34:6b:f6:80:12:a1:fc:5c:ca:41:d6:79:9c:
46:58:5b:f3:ad:6c:28:04:16:2f:82:e9:1a:ad:c4:
fb:df:a5:51:c5:61:46:0e:1b:27:8e:11:d0:92:dc:
4b:02:e4:5f:5e:19:7f:be:a9:90:63:55:d8:43:e9:
4c:ba:82:c6:67:7d:76:78:04:02:d6:89:96:f1:5e:
5a:7b:41:9d:e1:d1:9c:9a:84:e5:6d:77:9f:88:8d:
9f:c9:dc:8b:9f:a1:22:3c:da:60:63:59:bf:27:cf:
84:16:9e:43:57:25:21:b4:2b:19:b7:7e:e2:6c:23:
f0:2e:31:34:c0:2a:34:3c:dc:49:ba:3d:48:ca:66:
d8:33:0f:9f:9f:26:d9:89:1c:95:c0:1b:4d:4d:36:
cf:b4:0d:54:97:15:44:53:a0:1f:74:f6:ff:87:a4:
7a:bd:7c:33:32:86:45:79:34:54:24:f4:d3:18:a4:
22:c7:e3:bc:db:7a:6f:ff:10:a6:ee:e4:d1:0f:c4:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:A6:BE:DE:EB:B5:97:16:BB:CB:F5:16:0A:E1:F5:B6:71:65:C2
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/247ACC800A9111EA98D2046EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.192.0/21
Signature Algorithm: sha256WithRSAEncryption
99:fd:86:e3:40:1a:87:5a:e2:63:ea:9a:6e:15:eb:20:0c:72:
86:86:26:2f:5f:8a:6c:1f:82:f6:ce:9f:2a:84:b6:84:f3:9a:
f5:2c:b8:9e:7b:06:e1:bc:e8:7c:2c:03:f3:f6:e1:18:d5:b2:
90:fb:37:47:00:2a:2a:c1:43:6b:5e:1f:22:a8:db:48:e1:64:
f0:2d:fe:e1:01:a8:66:92:a0:8e:86:80:91:ce:fc:23:ac:9e:
cc:e1:b4:74:46:18:2a:49:38:c0:a5:10:cc:51:8a:ee:bb:e3:
24:5e:6d:fe:01:db:86:1d:a2:4f:48:b3:0c:b5:a8:c7:b4:b9:
06:aa:75:8d:0c:bd:7d:1e:aa:aa:18:5e:2e:90:54:f3:5f:db:
7c:23:25:43:eb:46:ba:a9:d1:af:03:15:26:aa:f2:24:0b:e9:
17:7b:97:80:d8:22:ec:93:e9:ed:f4:04:56:31:90:b7:f0:08:
66:60:d4:87:54:54:ff:80:6a:c4:06:2e:3f:23:93:d5:5a:d5:
d1:5c:e3:8e:eb:9c:0f:aa:45:a4:c6:7f:19:44:d3:0f:07:21:
d7:0e:29:56:d4:fc:4b:d7:96:60:39:c2:86:5b:5b:ce:de:22:
6c:3f:4c:26:67:78:4c:4c:56:b4:39:45:c7:12:94:38:01:23:
08:a2:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org