Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/8B1AE62E09E611EA8D813A6DF8AEA228.roa
File: 8B1AE62E09E611EA8D813A6DF8AEA228.roa (raw, json)
Hash identifier: jteV+8jBAeeJmoAFfA6NOsKhvdjAb31z/mZQqq1bjIE=
Subject key identifier: 04:BF:E5:3A:FA:5D:02:BD:A5:96:74:34:1C:C3:28:C6:9A:8A:7F:0E
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 82
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/8B1AE62E09E611EA8D813A6DF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:33:57 +0000
ROA not before: Mon 18 Nov 2019 09:33:52 +0000
ROA not after: Sat 17 Nov 2029 09:33:52 +0000
asID: 327687
IP address blocks: 137.63.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:33:52 2019 GMT
Not After : Nov 17 09:33:52 2029 GMT
Subject: CN=5dd26585-a89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:41:0c:b8:27:b4:91:79:12:0a:fb:21:fe:
af:15:9f:86:8a:43:b8:38:f5:e0:44:fb:eb:4f:e3:
a1:9f:03:9f:7d:cd:85:dc:06:88:94:3c:fd:c4:1d:
00:28:5c:ea:85:8c:f5:0c:c7:ba:eb:45:5c:0f:33:
b9:1f:16:aa:6a:dc:f6:85:27:a0:cc:c8:a0:8e:f6:
40:17:23:fa:24:8c:5c:b9:8f:ae:bb:ac:cf:8c:10:
c0:b5:96:8b:12:1a:7d:cd:be:02:34:8c:1d:77:3f:
6a:0b:23:85:ce:2d:1c:18:00:c9:4e:df:01:9d:0e:
0a:41:69:6c:3d:ae:15:76:38:76:d3:b1:dc:56:03:
a0:fe:08:62:df:d6:3d:86:06:33:9d:7b:31:76:e5:
09:d8:4c:3c:13:e4:6c:e5:df:de:8d:39:6b:dc:d2:
00:1a:d2:3e:64:59:ef:69:8a:27:aa:56:75:33:96:
61:a3:65:b9:a1:f0:c2:00:a6:56:2a:0b:1f:d9:2f:
5e:86:39:e7:9b:18:0f:89:c0:27:45:41:73:d7:f7:
f0:1f:f1:c2:bc:cf:19:a6:30:b2:bb:82:02:92:d5:
40:71:e5:65:e1:a8:06:9a:16:8e:9f:98:70:15:89:
0a:a9:47:0b:d4:ba:1a:20:fa:ac:83:57:42:66:1b:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:E5:3A:FA:5D:02:BD:A5:96:74:34:1C:C3:28:C6:9A:8A:7F:0E
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/8B1AE62E09E611EA8D813A6DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f4:ff:3c:40:78:a4:cd:3f:8f:ef:ff:18:4a:b6:ad:7c:86:
4e:3b:59:f1:94:8d:18:63:57:b6:07:06:0e:0e:45:27:fb:db:
96:7f:58:d6:c7:ab:da:ef:8d:15:b6:e9:e0:92:03:f3:ba:9b:
75:63:84:57:04:83:af:be:a0:5b:75:3c:33:b8:73:6f:32:eb:
73:0c:fe:47:96:53:a3:b0:05:25:77:89:1e:e7:a5:74:ff:82:
28:99:fd:2e:36:0a:55:c7:93:89:3d:e7:d0:f9:e1:56:1a:f3:
a2:64:9a:2e:46:15:17:d2:e4:c5:da:23:14:39:0e:ec:f4:59:
91:7e:d2:9d:50:c4:2f:84:83:e6:8d:fb:de:9e:0e:3a:e6:63:
18:65:1f:33:8f:72:d9:95:a4:ab:f9:70:90:47:b7:c8:76:6a:
ff:8a:75:29:62:1f:2e:b0:eb:2d:95:f6:0e:f7:21:dc:13:28:
5b:9e:18:09:61:ba:96:35:8d:f0:58:20:30:e6:25:50:a3:20:
23:e2:cd:ca:0a:2d:b6:52:7e:3e:8a:12:58:a8:21:e5:aa:ec:
17:82:68:30:3d:47:4a:de:5c:e1:4e:dc:67:0f:53:4e:9d:8d:
04:62:f0:fa:97:fa:aa:43:ef:c7:00:00:05:9d:8d:53:a3:b1:
ce:d5:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org