Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/454B740809E911EA856D7D6FF8AEA228.roa
File: 454B740809E911EA856D7D6FF8AEA228.roa (raw, json)
Hash identifier: r6LGuevnr5OppX/GItJV86bYr9D4ed3Lm9ROYaAKkts=
Subject key identifier: A6:A0:C5:F8:B4:A2:74:FF:CA:88:E6:E8:1C:40:3D:5C:3D:AE:F6:E7
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 98
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/454B740809E911EA856D7D6FF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:53:29 +0000
ROA not before: Mon 18 Nov 2019 09:53:20 +0000
ROA not after: Sat 17 Nov 2029 09:53:20 +0000
asID: 327687
IP address blocks: 137.63.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:53:20 2019 GMT
Not After : Nov 17 09:53:20 2029 GMT
Subject: CN=5dd26a19-e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:2c:9f:1f:f5:cc:76:70:0d:82:48:7f:da:
27:95:7a:ed:ff:0e:51:01:03:c1:0b:ee:51:23:46:
6f:2d:4e:9e:c8:0a:e1:f3:cc:b6:4e:47:a8:da:de:
ee:f9:44:87:77:1d:6d:fe:2c:0d:69:01:38:68:de:
03:c0:df:27:79:3d:ca:dd:00:f7:b1:b6:d6:1d:2e:
44:9f:1e:92:11:53:5e:a2:df:8b:df:c5:5e:99:35:
d1:9e:4d:b2:09:09:4f:8e:99:6b:14:ba:93:25:83:
1a:23:14:11:6f:c3:81:15:4a:69:1e:ff:8a:cc:f7:
36:98:5d:d2:9c:48:13:52:51:ee:d6:be:b2:61:98:
2a:b8:83:71:c8:d0:b0:e5:f5:53:7e:63:55:f1:0e:
ce:f3:6f:0e:44:28:db:4b:84:21:37:11:ca:cf:37:
f9:97:f7:38:94:c7:4f:c0:11:4c:93:16:d3:5a:4f:
27:ff:ac:e2:cc:7d:85:7f:78:61:22:81:ca:05:fe:
38:c2:b0:9a:c1:31:9d:59:6a:57:9e:d2:2d:fc:f3:
a7:93:d4:1e:ae:05:27:e7:6e:87:90:7f:57:81:8f:
b1:84:4f:9e:68:86:75:e0:89:24:7e:f9:38:18:b8:
18:6a:8b:8a:04:93:a0:c4:83:1a:60:ac:e3:9a:b3:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:C5:F8:B4:A2:74:FF:CA:88:E6:E8:1C:40:3D:5C:3D:AE:F6:E7
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/454B740809E911EA856D7D6FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9e:1f:e6:6b:ce:9f:7f:7c:95:26:a7:01:31:cc:ff:52:cf:
94:d1:83:48:7e:55:27:86:30:1d:a7:57:f5:4d:f7:3d:c9:fc:
c1:1c:bc:df:00:ee:80:ae:35:10:18:ef:83:e7:07:c3:dc:40:
9e:be:d6:47:36:3e:3e:11:91:17:6a:cf:43:23:e8:3f:02:40:
b1:f6:e9:ef:a5:9d:e8:fe:eb:2b:fe:80:c5:a2:d2:2f:d6:28:
9d:b6:ee:63:cd:85:48:11:f0:d6:c5:65:ac:37:72:3b:b5:c0:
1b:31:7f:8a:ab:e6:19:6a:2c:cc:fa:6b:c9:3b:c3:69:42:8d:
21:16:ed:fc:1a:24:e6:51:5f:93:4c:54:f5:4f:59:fd:c9:ec:
99:d0:64:d0:f7:c5:b1:de:62:00:6e:de:f9:83:0c:98:8a:60:
54:f8:14:7d:d2:30:bd:62:68:1d:5e:0f:62:07:23:da:42:2f:
e2:6e:09:50:95:78:94:9b:ff:e8:73:a8:a5:49:78:77:ec:40:
a1:15:ec:fb:f5:f9:22:f7:8b:ec:26:fa:89:dd:a4:ea:53:4a:
1d:22:71:e8:eb:b7:e0:a9:b5:c0:90:e8:5f:2c:71:c7:45:be:
0b:63:9a:a7:c7:42:bf:69:43:63:9e:d0:3d:35:18:91:27:42:
40:56:2c:2e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBUjExMC8GA1UEBRMoMjNFNjNCQTU1MTM2NUZDNTkxMjNBNjM3MTJENzk3
ODJBRjEwMjhEMTAeFw0xOTExMTgwOTUzMjBaFw0yOTExMTcwOTUzMjBaMBgxFjAU
BgNVBAMTDTVkZDI2YTE5LWU1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6OyyfH/XMdnANgkh/2ieVeu3/DlEBA8EL7lEjRm8tTp7ICuHzzLZOR6ja
3u75RId3HW3+LA1pATho3gPA3yd5PcrdAPexttYdLkSfHpIRU16i34vfxV6ZNdGe
TbIJCU+OmWsUupMlgxojFBFvw4EVSmke/4rM9zaYXdKcSBNSUe7WvrJhmCq4g3HI
0LDl9VN+Y1XxDs7zbw5EKNtLhCE3EcrPN/mX9ziUx0/AEUyTFtNaTyf/rOLMfYV/
eGEigcoF/jjCsJrBMZ1Zalee0i3886eT1B6uBSfnboeQf1eBj7GET55ohnXgiSR+
+TgYuBhqi4oEk6DEgxpgrOOas/VTAgMBAAGjggJrMIICZzAdBgNVHQ4EFgQUpqDF
+LSidP/KiOboHEA9XD2u9ucwHwYDVR0jBBgwFoAUI+Y7pVE2X8WRI6Y3EteXgq8Q
KNEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzg3RUY5NzEwREY2MTExRTk4RjM5NDUzMEY4QUVBMjI4L0ktWTdw
VkUyWDhXUkk2WTNFdGVYZ3E4UUtORS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ktWTdwVkUyWDhXUkk2WTNFdGVYZ3E4UUtORS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjJCMzhFLzg3RUY5NzEwREY2MTExRTk4RjM5NDUzMEY4QUVB
MjI4LzQ1NEI3NDA4MDlFOTExRUE4NTZEN0Q2RkY4QUVBMjI4LnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk/zzANBgkqhkiG9w0BAQsFAAOCAQEATp4f
5mvOn398lSanATHM/1LPlNGDSH5VJ4YwHadX9U33Pcn8wRy83wDugK41EBjvg+cH
w9xAnr7WRzY+PhGRF2rPQyPoPwJAsfbp76Wd6P7rK/6AxaLSL9YonbbuY82FSBHw
1sVlrDdyO7XAGzF/iqvmGWoszPpryTvDaUKNIRbt/Bok5lFfk0xU9U9Z/cnsmdBk
0PfFsd5iAG7e+YMMmIpgVPgUfdIwvWJoHV4PYgcj2kIv4m4JUJV4lJv/6HOopUl4
d+xAoRXs+/X5IveL7Cb6id2k6lNKHSJx6Ou34Km1wJDoXyxxx0W+C2Oap8dCv2lD
Y57QPTUYkSdCQFYsLg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org