Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7178BCDE09E411EAA859976BF8AEA228.roa
File: 7178BCDE09E411EAA859976BF8AEA228.roa (raw, json)
Hash identifier: 4MH8xAOCl9IDYPdzcwXHVrKMUwySUeRnbjIE1vH00wI=
Subject key identifier: A1:8A:CB:58:D4:24:1C:57:16:AD:74:88:CB:A9:D5:4D:91:73:1E:95
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 76
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7178BCDE09E411EAA859976BF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:18:55 +0000
ROA not before: Mon 18 Nov 2019 09:18:50 +0000
ROA not after: Sat 17 Nov 2029 09:18:50 +0000
asID: 327687
IP address blocks: 137.63.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:18:50 2019 GMT
Not After : Nov 17 09:18:50 2029 GMT
Subject: CN=5dd261ff-0fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:f6:58:6f:8c:39:2a:1d:8f:d2:22:6b:fb:
f1:fa:2c:fd:d3:59:20:9c:14:ba:57:81:47:d1:f0:
b1:b6:9a:07:fc:c3:2d:9f:2c:8a:e1:9c:ec:9d:c1:
5e:30:e8:be:dd:12:e6:3d:15:3e:02:99:3f:84:53:
be:2d:8f:7a:1e:cd:94:57:49:5d:68:34:e5:af:37:
3c:e5:3f:ea:03:22:e8:ce:35:e7:62:4f:63:1e:71:
53:fc:97:79:ba:45:42:46:5e:72:61:bd:3e:e8:46:
bf:74:d1:52:71:28:d2:67:2c:ad:fb:cf:54:df:f5:
4f:01:28:4b:bc:6a:19:3b:5e:ec:cc:c0:c3:6e:50:
4f:ea:94:64:5c:8f:28:e0:c6:4f:15:e8:26:cd:43:
24:64:fc:52:21:ea:56:a6:80:63:12:b0:9b:6e:98:
0e:87:12:a3:ef:7f:47:7c:4a:12:a2:86:df:38:86:
53:03:b2:af:99:60:6a:1b:9e:43:f7:33:e2:d6:e8:
b1:bb:9d:ba:41:76:b5:9e:60:bd:2d:a6:a7:b2:a6:
16:d8:28:d4:fd:c9:2f:91:69:fd:33:9e:d0:0b:31:
88:c0:2b:62:dd:c8:aa:ec:cb:22:03:7c:01:51:1e:
70:44:2f:19:77:a0:d1:a6:b2:df:4a:a0:4f:07:4d:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:CB:58:D4:24:1C:57:16:AD:74:88:CB:A9:D5:4D:91:73:1E:95
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/7178BCDE09E411EAA859976BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6d:57:92:7a:de:c7:b7:1a:bb:08:e0:03:0e:b2:bd:bb:b2:
28:ff:01:b2:17:84:aa:12:be:01:83:ad:aa:87:c0:83:36:37:
c9:8d:e6:4a:af:55:c2:3a:ef:b5:93:7e:98:3c:7c:17:df:f4:
d5:71:79:82:f6:64:3c:98:a7:a0:2f:dc:1a:47:28:a4:ae:fd:
b3:ef:7f:51:43:41:23:e0:f6:f7:d2:33:f0:12:40:d8:c1:43:
82:85:c8:27:69:61:d1:da:77:8d:6a:2b:d9:14:d3:0e:0b:6e:
b4:e3:1f:03:ec:ba:7d:ee:91:ab:c5:96:25:06:2b:e8:ac:0e:
bd:2c:1a:f5:e0:a5:c8:8f:68:73:09:c5:68:0b:95:83:7a:55:
e6:b9:67:ce:38:f8:cd:72:fc:82:e7:3a:c4:a4:18:ad:8d:c6:
2d:aa:bb:42:1e:b6:79:c9:bf:1b:bd:60:64:e9:f0:88:f8:ef:
cc:85:fc:e8:bf:40:d0:2b:06:9a:b3:7f:24:ce:97:de:cf:44:
9f:1a:cd:c8:1f:a5:6d:c7:4b:61:41:25:b9:ef:63:c3:05:b9:
de:75:09:33:06:32:89:ab:81:14:a7:dc:62:f5:53:91:d0:1f:
a5:bf:4f:30:ec:9d:84:cf:8d:6f:18:a1:da:b0:21:a5:86:83:
fb:15:01:22
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBdjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA5MTg1MFoXDTI5MTExNzA5MTg1MFowGDEWMBQG
A1UEAxMNNWRkMjYxZmYtMGZlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAY9lhvjDkqHY/SImv78fos/dNZIJwUuleBR9HwsbaaB/zDLZ8siuGc7J3B
XjDovt0S5j0VPgKZP4RTvi2Peh7NlFdJXWg05a83POU/6gMi6M4152JPYx5xU/yX
ebpFQkZecmG9PuhGv3TRUnEo0mcsrfvPVN/1TwEoS7xqGTte7MzAw25QT+qUZFyP
KODGTxXoJs1DJGT8UiHqVqaAYxKwm26YDocSo+9/R3xKEqKG3ziGUwOyr5lgahue
Q/cz4tbosbudukF2tZ5gvS2mp7KmFtgo1P3JL5Fp/TOe0AsxiMArYt3IquzLIgN8
AVEecEQvGXeg0aay30qgTwdNip8CAwEAAaOCAmswggJnMB0GA1UdDgQWBBShistY
1CQcVxatdIjLqdVNkXMelTAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvNzE3OEJDREUwOUU0MTFFQUE4NTk5NzZCRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+iMA0GCSqGSIb3DQEBCwUAA4IBAQAabVeS
et7Htxq7COADDrK9u7Io/wGyF4SqEr4Bg62qh8CDNjfJjeZKr1XCOu+1k36YPHwX
3/TVcXmC9mQ8mKegL9waRyikrv2z739RQ0Ej4Pb30jPwEkDYwUOChcgnaWHR2neN
aivZFNMOC2604x8D7Lp97pGrxZYlBivorA69LBr14KXIj2hzCcVoC5WDelXmuWfO
OPjNcvyC5zrEpBitjcYtqrtCHrZ5yb8bvWBk6fCI+O/Mhfzov0DQKwaas38kzpfe
z0SfGs3IH6Vtx0thQSW572PDBbnedQkzBjKJq4EUp9xi9VOR0B+lv08w7J2Ez41v
GKHasCGlhoP7FQEi
-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org