Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/619767E409DE11EA9DCBBE66F8AEA228.roa
File: 619767E409DE11EA9DCBBE66F8AEA228.roa (raw, json)
Hash identifier: AYooYH+W2XYHDKwHiYdgTZC3tfAMQNBdQGFiqRQ3ytM=
Subject key identifier: AE:3A:39:E0:48:C0:EE:45:9C:A4:81:58:AB:98:66:6E:AE:57:B6:84
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 4E
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/619767E409DE11EA9DCBBE66F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:35:31 +0000
ROA not before: Mon 18 Nov 2019 08:35:27 +0000
ROA not after: Sat 17 Nov 2029 08:35:27 +0000
asID: 327687
IP address blocks: 137.63.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:35:27 2019 GMT
Not After : Nov 17 08:35:27 2029 GMT
Subject: CN=5dd257d3-5fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:9f:6a:57:68:e9:9a:c1:43:26:b5:3e:45:
7c:5f:35:02:7f:17:9f:d6:35:99:6c:34:ad:ff:b7:
04:3b:83:c2:32:cc:e7:b8:06:f6:f6:58:bb:c7:40:
1a:89:05:23:e0:68:5d:17:6e:97:06:9e:96:c0:61:
66:60:58:51:de:d8:7d:44:11:b9:10:27:27:3b:f3:
b6:53:57:a8:8a:ab:fc:75:0b:83:f5:4d:44:89:d4:
14:ee:a3:a9:4a:73:3f:ef:55:7f:a9:c1:79:b3:f0:
c9:2b:97:bb:89:bf:d2:f6:83:95:c6:5d:11:64:89:
a9:6f:ae:17:d7:9d:c2:82:ba:6f:28:73:3a:18:fd:
c5:53:c4:bd:44:d2:0c:00:04:b1:e1:74:db:e8:1e:
43:1e:5b:ad:6b:13:02:d9:ca:ae:ea:37:ff:dd:bd:
37:0f:50:a6:83:a9:d8:4b:fe:d4:1b:54:4e:1a:c4:
41:3a:9b:04:f0:35:fc:8c:da:07:34:1c:1b:4f:d5:
f0:6c:fc:99:16:6d:31:ec:da:92:75:a7:37:95:a4:
a2:7b:2a:b8:87:43:f0:7f:50:f1:2f:61:e8:14:5e:
d6:ee:6b:af:18:e5:60:f8:3c:ba:68:af:22:1b:c8:
5e:41:62:bb:fb:24:c9:4e:ef:a7:9a:74:cc:01:59:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:39:E0:48:C0:EE:45:9C:A4:81:58:AB:98:66:6E:AE:57:B6:84
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/619767E409DE11EA9DCBBE66F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:3e:df:61:3e:a9:d9:3a:92:32:96:76:7d:1d:2e:ab:4f:
cf:83:23:4f:1a:de:0e:88:fe:16:e8:87:39:33:62:31:a6:b7:
d7:a8:e7:1e:00:1a:2a:65:52:c7:d1:dd:df:5d:a5:bd:5c:38:
69:b9:47:07:d4:c1:03:b9:64:76:7a:84:3c:d6:c5:bd:68:bd:
ee:44:33:da:38:4f:0f:6e:95:2e:0a:a2:88:11:c6:90:0a:81:
44:4c:f2:4e:de:92:49:5b:e4:cd:99:ab:ee:33:3b:84:47:ea:
c4:27:7f:cb:77:65:ef:6c:8c:19:cf:3a:d1:38:15:a2:90:aa:
41:eb:d4:0b:dd:3c:03:ef:3f:dc:d5:b1:e0:fe:74:0b:07:26:
ac:13:df:40:98:5d:94:14:de:84:9e:6b:ad:5e:77:a3:6b:a5:
da:7c:6c:98:10:d7:b7:70:ec:2e:6d:2a:d3:7b:63:f9:b4:2f:
c7:d1:78:0c:af:5a:df:c8:45:07:9c:c5:67:b5:3d:1b:d8:27:
d7:a7:c6:0d:08:d2:c8:48:ed:64:fd:25:ce:af:2e:9b:56:01:
b7:17:13:35:75:4a:c5:97:3c:b8:ba:75:73:a3:99:10:93:ca:
4e:00:35:ad:d5:83:51:8f:2c:a8:16:d9:f2:74:8a:23:09:78:
12:6c:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org