Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4A2BB0E609E411EABA38706BF8AEA228.roa
File: 4A2BB0E609E411EABA38706BF8AEA228.roa (raw, json)
Hash identifier: IU/Fs9lKHUiA+EwtAnzfvunLWepyyfmEo1yDG8si2So=
Subject key identifier: 8B:0C:56:71:72:D1:C0:43:6B:4C:28:B2:7E:A9:DA:55:0A:7B:88:0D
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 74
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4A2BB0E609E411EABA38706BF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:17:49 +0000
ROA not before: Mon 18 Nov 2019 09:17:44 +0000
ROA not after: Sat 17 Nov 2029 09:17:44 +0000
asID: 327687
IP address blocks: 137.63.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:17:44 2019 GMT
Not After : Nov 17 09:17:44 2029 GMT
Subject: CN=5dd261bd-f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:c6:1a:e4:04:89:f4:e0:7f:c2:6d:bb:bd:
32:10:ea:62:3d:88:10:20:a0:35:eb:65:83:20:14:
f1:c8:42:5d:2c:ba:20:11:ae:7c:3d:d0:70:b2:2c:
d4:0b:91:da:0e:62:bb:b6:87:eb:25:be:fd:ab:da:
45:d1:35:3c:6c:12:fd:29:49:1a:50:ea:bc:89:2d:
f2:92:ab:04:e3:80:44:92:52:c4:a6:28:7a:22:df:
98:8b:ab:5a:b2:5c:00:26:fa:e9:f8:ea:4d:cb:8d:
79:6e:3b:5a:1e:be:c4:7c:6b:bb:e5:5a:e8:db:4e:
0a:f4:88:ad:95:4e:4d:4a:88:10:77:e4:ce:8d:f0:
0a:1c:83:e7:1c:b9:35:2f:62:20:ae:24:91:cc:16:
15:b2:49:d3:3b:e3:73:f1:8d:ee:fe:7a:4f:48:b0:
07:53:fc:3a:4f:61:ce:fd:32:a7:63:6e:5e:5c:68:
57:19:c9:42:2b:78:57:a4:f9:1a:a9:d2:7d:f0:8a:
1b:db:d8:51:fe:55:a0:47:7a:84:ca:25:89:d5:60:
77:e0:2e:89:ca:85:51:07:8c:d3:a1:65:fb:f0:7a:
3d:d4:d0:5d:cd:ba:f7:81:78:50:74:57:97:fc:17:
9d:7d:84:05:dd:8a:30:43:0f:31:f4:b2:69:72:97:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:56:71:72:D1:C0:43:6B:4C:28:B2:7E:A9:DA:55:0A:7B:88:0D
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4A2BB0E609E411EABA38706BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.161.0/24
Signature Algorithm: sha256WithRSAEncryption
19:61:9f:fa:d7:b0:ef:b7:25:e0:d9:2a:5b:e7:b3:ba:b3:b8:
bb:96:c3:0e:d2:06:87:da:28:99:84:18:74:a3:aa:80:e9:2b:
6a:bc:db:50:a6:33:47:5f:c5:1b:d2:d9:2b:ca:90:71:28:37:
f1:33:27:8f:c3:61:c6:38:2d:66:e1:54:5e:23:a5:08:4d:b3:
c1:82:65:23:da:e2:61:13:79:91:5d:19:3d:32:cd:5d:cd:c9:
75:e6:ec:f1:bf:7a:90:29:15:c4:6d:c8:8b:a6:61:dd:b2:6e:
9a:9e:10:c9:d6:46:08:7b:64:95:f5:0e:b1:2e:b0:94:b4:8f:
7e:6c:a6:7e:84:f1:ff:29:93:5a:70:08:56:1c:be:df:68:eb:
44:bd:ad:11:dc:37:d5:d8:ef:35:c4:21:c3:e3:d9:ab:3f:71:
b9:d5:b3:5f:b4:4c:09:bd:47:32:9b:af:db:d1:09:7f:82:65:
f0:04:c1:33:75:60:4c:b1:06:19:89:21:94:ad:63:28:f6:39:
cf:bf:11:43:58:7a:c0:5d:ca:f3:16:ce:24:f5:aa:db:06:64:
33:d4:fd:4d:ea:25:41:bd:75:40:d8:bc:79:e0:99:0a:54:45:
79:13:d6:2c:5e:ee:2d:be:b7:de:e6:d7:3a:17:3d:67:95:c8:
fa:06:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org