Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/5CF4F61809E111EABCCF3B69F8AEA228.roa
File: 5CF4F61809E111EABCCF3B69F8AEA228.roa (raw, json)
Hash identifier: I5Re+JzKwmNpaXV4hSTEShTHVgIwOWs+dCTTRaYY1gg=
Subject key identifier: 54:DB:CF:56:03:57:FD:33:B7:39:29:D2:1F:58:0F:18:89:5C:80:15
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 68
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/5CF4F61809E111EABCCF3B69F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:56:52 +0000
ROA not before: Mon 18 Nov 2019 08:56:47 +0000
ROA not after: Sat 17 Nov 2029 08:56:47 +0000
asID: 327687
IP address blocks: 137.63.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:56:47 2019 GMT
Not After : Nov 17 08:56:47 2029 GMT
Subject: CN=5dd25cd4-6157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:69:f1:c7:1c:da:c2:46:46:0c:3d:a7:47:
a8:4a:3b:b0:9c:f0:b2:61:21:ee:d2:b9:64:ad:cf:
46:7e:10:68:0d:f6:07:51:e4:1c:f6:34:c8:6a:82:
9e:a8:fd:b8:7a:05:9a:4a:08:0a:82:75:fa:59:5e:
24:d8:a8:e3:3c:b7:17:99:0f:cd:94:bb:06:76:a2:
8a:0e:36:74:ae:50:45:93:05:06:81:07:7a:96:4a:
73:a4:f1:3a:0e:99:50:e9:df:d3:29:7e:0e:33:93:
ce:f2:77:53:ae:66:fc:67:62:77:86:75:29:f5:ec:
0b:7b:42:49:fb:b2:9b:45:8d:98:cc:91:7d:5f:1f:
cc:f7:9e:23:6a:38:6f:eb:90:4d:bb:76:ca:a1:72:
58:56:56:1e:ae:0d:1f:f3:49:3f:4d:21:0a:a0:32:
36:20:78:36:97:1f:79:ef:eb:a7:cb:c9:33:fd:13:
66:dc:1d:44:eb:10:e0:1f:cd:54:aa:ae:45:f4:db:
e7:b1:71:41:3d:25:1c:eb:7e:71:86:e9:cb:66:96:
2f:9c:db:bc:8e:ee:81:d3:5f:4e:e8:a7:96:eb:67:
df:a5:a7:ca:38:c5:a4:c5:e4:bb:f7:6c:f3:1c:ad:
91:a6:fc:c6:23:99:d5:64:2d:21:cf:4f:5a:de:88:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:CF:56:03:57:FD:33:B7:39:29:D2:1F:58:0F:18:89:5C:80:15
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/5CF4F61809E111EABCCF3B69F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.158.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c4:35:60:56:f9:13:83:2a:d6:06:37:ab:39:4f:99:cd:70:
e9:cd:d5:4b:70:4c:71:a5:dd:c0:15:28:ba:88:f7:58:4d:f7:
1d:d2:87:71:06:a2:69:f1:04:95:bd:5c:de:ef:5f:26:ba:aa:
01:94:27:ae:b5:46:12:0f:f6:8a:6b:4d:28:2f:88:f8:bb:3a:
11:4a:56:81:e0:2c:eb:c8:20:4a:01:48:40:2a:f5:19:ae:2b:
a2:50:46:60:91:f9:be:f5:9a:17:41:44:71:86:49:cd:ea:71:
d8:6d:71:dc:41:b8:49:ab:e6:6b:eb:a5:47:a1:5c:e8:8c:76:
57:34:f0:f2:bc:53:a7:81:30:cd:02:36:51:6f:78:a5:c5:e3:
c0:8b:9c:2c:38:fb:6a:b1:16:7f:36:b3:c4:de:8e:d0:2f:2b:
1a:39:d8:58:86:82:c2:7f:2b:e6:5d:da:95:0c:61:46:d6:b3:
ad:79:30:4c:5a:8c:7d:21:15:04:e7:d5:66:8e:75:2f:6d:6e:
a3:02:8c:02:09:77:f2:86:b9:13:61:f1:e9:b0:27:8a:f4:c3:
37:b6:d9:bb:ab:a3:49:b7:3d:dd:a4:15:44:4c:db:39:18:9c:
4a:3a:45:31:47:fe:d7:31:19:73:1b:a1:07:b3:f6:fa:b3:a6:
25:7f:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org