Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7027545E09E311EABC4FCD6AF8AEA228.roa
File: 7027545E09E311EABC4FCD6AF8AEA228.roa (raw, json)
Hash identifier: TrkxaBFsvqt9qRym+vDNeoPNY2iyIqTznG8jqzAgKFU=
Subject key identifier: D0:62:91:FE:AC:3D:E9:B2:3B:C7:2F:B1:25:DD:F1:57:BA:77:71:D7
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 6E
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7027545E09E311EABC4FCD6AF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:11:44 +0000
ROA not before: Mon 18 Nov 2019 09:11:39 +0000
ROA not after: Sat 17 Nov 2029 09:11:39 +0000
asID: 327687
IP address blocks: 137.63.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:11:39 2019 GMT
Not After : Nov 17 09:11:39 2029 GMT
Subject: CN=5dd2604f-307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:7e:ca:3d:55:84:a4:e8:a0:e9:36:17:21:
3e:5e:5f:1e:a9:46:6c:7d:9e:79:ec:da:f2:e2:07:
5f:ff:30:06:1b:f1:41:46:9c:c1:e3:90:a5:77:00:
bf:49:39:79:a4:6f:6f:a6:fc:e9:4b:cd:aa:30:6e:
e0:bd:bc:7f:f7:b8:36:ff:f1:37:59:14:1d:fd:ae:
41:e2:03:56:00:fd:72:db:05:a4:be:3c:83:e4:38:
cb:28:b8:44:78:16:46:35:b8:43:fe:1e:a0:a6:df:
e4:05:43:88:d0:7b:95:0d:b1:20:b9:6d:8e:1a:b5:
5d:8f:ec:d9:b0:55:8e:9a:57:a1:36:f9:92:13:ff:
3f:7a:b4:0e:a9:63:be:49:aa:c6:2d:83:db:40:a0:
21:82:8c:2b:43:c5:f4:cb:76:a4:42:a3:52:ab:5a:
17:4c:9f:16:e3:b6:e9:cc:0f:62:60:e1:2c:5a:99:
3a:a4:e7:70:21:e7:45:6e:e3:e1:57:89:85:38:33:
e8:bf:bf:f3:73:cd:5f:45:4b:5a:89:95:fc:33:f0:
1b:0d:1b:03:25:fb:8e:10:f0:1b:ba:2b:a4:bd:29:
1d:4a:1c:f4:0e:67:8d:2e:c0:fc:d5:8b:00:91:cd:
c1:d8:01:55:50:19:74:e6:ea:26:4b:bb:9e:68:45:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:91:FE:AC:3D:E9:B2:3B:C7:2F:B1:25:DD:F1:57:BA:77:71:D7
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7027545E09E311EABC4FCD6AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.145.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f0:5f:3f:a7:1d:18:0e:71:95:fc:25:61:0f:f6:3d:d4:58:
06:4c:e7:42:be:0c:f8:e9:68:9d:63:d7:ce:1c:3c:f6:bd:f9:
60:c9:27:fd:ff:54:36:d3:d6:04:9f:41:70:27:6f:5e:27:e7:
c0:45:0c:4f:19:93:4a:29:a1:01:30:21:81:ed:2f:ee:27:9a:
96:a0:03:04:b5:56:10:a0:ff:b0:94:25:14:57:44:80:c2:35:
ab:9f:b2:7c:5e:6a:86:b8:72:a5:9b:48:52:1e:6c:aa:70:67:
b8:cd:ec:d1:43:24:71:5a:87:ca:6e:dc:cb:0a:5d:57:d5:ed:
81:8b:1e:bc:04:0c:e2:55:0c:99:71:99:2b:33:2d:d0:1b:65:
7f:0c:a4:53:6a:c2:c0:2e:82:61:9f:f8:27:20:cc:ff:88:b5:
81:0b:a9:9e:e7:52:46:79:fe:12:01:ad:16:bd:26:05:f4:2d:
b6:ca:12:be:f7:f6:26:0a:31:9b:20:34:54:12:36:0a:21:a7:
0b:51:3b:a2:4f:23:77:74:42:2d:20:73:bc:73:78:d9:a4:72:
47:0a:77:39:b3:43:40:a2:73:52:ca:01:d7:71:ce:4b:93:84:
9e:b0:dc:d2:4f:dc:64:7f:51:4a:0b:d8:43:1c:21:a6:c0:82:
66:a3:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:39:05 2024 by rpki-client on console-ams.rpki-client.org