Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/49C15DFE09DF11EA89AA8067F8AEA228.roa
File: 49C15DFE09DF11EA89AA8067F8AEA228.roa (raw, json)
Hash identifier: 15cWgTRHVW44zv8nuqSw0xCOtIGrzRDFUn428NfztTE=
Subject key identifier: 6B:90:66:17:74:59:77:94:1D:B0:F7:0E:DA:92:FE:0B:0D:32:52:F0
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 56
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/49C15DFE09DF11EA89AA8067F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:42:01 +0000
ROA not before: Mon 18 Nov 2019 08:41:56 +0000
ROA not after: Sat 17 Nov 2029 08:41:56 +0000
asID: 327687
IP address blocks: 137.63.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:41:56 2019 GMT
Not After : Nov 17 08:41:56 2029 GMT
Subject: CN=5dd25959-389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:54:0b:c3:73:e3:83:57:40:15:cd:0f:f7:
c4:3a:45:98:08:5e:fd:a0:e6:86:e5:ba:e5:33:e6:
82:63:bf:c0:0e:4e:14:cf:43:79:d0:4a:61:36:ce:
36:40:f9:de:ef:11:5e:02:ea:60:43:03:e0:4d:b4:
1d:08:fe:40:c7:f6:62:b1:7a:6f:84:5d:e3:e9:1d:
1e:1b:53:71:ac:c0:d7:03:ba:47:b7:a6:63:3e:55:
b9:bd:71:a6:41:4f:d3:fd:92:04:98:fb:50:57:42:
50:e1:1d:24:60:0b:b2:2f:e2:f4:dd:4c:cb:13:f3:
3c:12:0c:44:91:11:46:a5:dd:ff:7f:89:7a:78:51:
b6:98:62:fa:77:c0:eb:73:fb:23:24:36:0b:83:d8:
20:9c:fa:af:32:10:aa:36:b0:34:9a:df:d3:47:3c:
e5:ec:30:ee:2e:4c:0c:e6:50:19:12:4b:c3:c7:0f:
ba:f5:a0:18:e5:7c:f3:79:3a:1b:2f:80:9e:0a:32:
83:00:43:9c:75:3b:01:ec:7a:4b:c0:07:af:18:9a:
e1:32:96:c8:ee:89:dc:4a:d5:88:28:97:4e:0c:df:
48:ad:da:2b:d8:f3:90:38:12:97:be:36:d2:69:66:
3c:fa:36:d8:a9:ab:96:d2:93:20:c6:92:1c:f6:0f:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:66:17:74:59:77:94:1D:B0:F7:0E:DA:92:FE:0B:0D:32:52:F0
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/49C15DFE09DF11EA89AA8067F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:4d:31:16:97:d2:6b:74:23:92:7f:c8:91:ed:a6:6a:71:
01:0b:a6:41:d1:aa:a0:fb:f0:af:c7:20:85:0c:8f:c8:e5:7a:
b6:22:77:d5:8c:55:fd:97:93:5b:be:7c:1c:aa:79:ca:7a:69:
8d:9b:78:24:12:19:c2:91:d4:87:04:e0:33:47:d7:70:b7:3a:
51:9e:e4:f4:97:d5:61:63:86:de:64:fd:88:2d:78:de:88:2b:
fd:76:81:f0:cf:83:1e:a9:44:0a:d1:a5:51:14:24:ca:f6:41:
e6:2a:7a:3f:bc:d7:28:b5:68:9b:ab:ca:3b:92:37:29:c7:32:
aa:29:d8:99:c7:91:20:c3:75:f0:b3:94:8d:b4:af:4b:ff:e0:
fb:32:22:51:18:29:d9:34:ee:0f:50:88:4e:8e:08:48:a6:f8:
0c:fd:27:5a:a7:ed:e6:b6:6b:35:dc:1e:e5:41:e8:98:4d:43:
72:67:fe:d7:b4:fe:14:0d:7a:dc:51:d1:30:b8:cc:7a:3c:35:
2d:f4:75:43:05:60:d5:de:11:d2:d1:91:42:3e:9f:4c:0d:0d:
81:b5:00:95:e5:14:84:8e:2a:40:b3:d8:78:07:89:e0:0a:81:
f4:3e:da:4b:47:05:34:41:b1:c8:2b:2c:09:4e:8e:a0:36:d2:
1d:26:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org