Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/920B0F5209DE11EAB394E866F8AEA228.roa
File: 920B0F5209DE11EAB394E866F8AEA228.roa (raw, json)
Hash identifier: xfG6bzAqu0P+S1t9mdI8LVa8wm8hpNTsX+wIxn5PxNE=
Subject key identifier: 56:59:69:0E:1B:33:38:23:99:F7:61:A3:F1:47:27:33:04:41:35:E9
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 50
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/920B0F5209DE11EAB394E866F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:36:53 +0000
ROA not before: Mon 18 Nov 2019 08:36:48 +0000
ROA not after: Sat 17 Nov 2029 08:36:48 +0000
asID: 327687
IP address blocks: 137.63.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:36:48 2019 GMT
Not After : Nov 17 08:36:48 2029 GMT
Subject: CN=5dd25825-da5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:cf:21:37:66:73:b8:c8:0f:15:7c:0d:12:
29:3f:53:76:a3:c8:fd:e2:9e:21:51:e9:7e:62:26:
4a:c4:80:b5:0f:ed:cc:0d:cb:35:46:96:04:54:f7:
ce:f4:3a:38:33:9f:12:f5:f4:20:b4:da:76:ac:e7:
85:3b:ca:b9:68:b8:94:89:22:58:70:be:d8:58:48:
e6:bc:92:a8:7a:13:15:fd:5f:41:eb:69:17:09:12:
11:7a:d3:64:9c:d2:eb:c4:53:64:5c:b2:39:0c:99:
cb:79:42:59:b2:49:1c:d7:94:3e:96:af:a0:06:75:
0d:5a:c0:d2:90:71:c1:d5:af:fb:31:21:2b:24:51:
6d:7c:b4:41:63:db:ef:5c:ef:6a:17:90:7e:70:49:
73:9b:0f:5f:23:30:0a:82:30:f5:e4:a5:fb:a8:46:
f3:f4:a6:28:ed:d4:f2:99:13:6d:00:0f:64:37:b7:
6a:df:a0:e2:0f:37:6e:17:46:ab:4d:b7:f3:08:c1:
83:1a:0c:48:67:68:fe:92:8f:69:b9:10:e3:dc:9b:
d8:c3:ba:ea:f3:8b:b6:b8:87:43:a3:e7:bf:64:ed:
64:e4:d8:4c:4b:f1:89:e0:50:f0:9b:c6:5a:82:c8:
ee:41:1e:be:fa:81:e1:18:a2:8d:f7:56:38:a0:9c:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:69:0E:1B:33:38:23:99:F7:61:A3:F1:47:27:33:04:41:35:E9
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/920B0F5209DE11EAB394E866F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f4:5c:08:77:e9:b0:b3:97:fc:d9:9f:be:62:2c:48:f7:e5:
61:21:ea:0d:de:48:cf:0b:7e:a4:53:f9:e6:7d:f4:84:14:18:
2a:94:78:7f:40:66:87:b6:8d:cb:1c:da:d0:a5:fc:1f:69:a7:
12:cc:08:a0:0b:7c:4d:85:eb:3e:1b:9b:55:73:e8:cf:cb:c0:
71:c8:49:cd:df:5d:08:51:ab:e2:52:e9:82:3c:c4:20:85:23:
9e:cf:ae:38:2b:7c:12:79:ca:de:7b:f0:fb:aa:fc:f5:97:00:
d8:0f:85:49:08:f0:17:e5:13:a4:f9:41:3c:99:14:cb:82:ee:
73:9a:b6:9c:33:54:e1:af:a5:d3:e4:ac:d8:3e:fc:f5:77:5d:
0a:16:47:0e:40:a2:80:eb:e7:c3:ba:2b:80:a3:ee:00:d8:7c:
97:e3:d5:6a:06:42:c7:fc:b9:f5:1e:29:16:43:9e:2d:54:ec:
d3:b5:71:7c:6a:58:78:fa:13:fa:dc:1b:b5:de:09:fb:71:07:
f4:49:03:32:61:17:e2:a4:fd:38:1e:b2:29:17:8b:1d:b4:13:
9e:23:2a:93:3c:39:ca:82:f3:7a:e3:ed:2d:3b:25:da:f9:52:
e4:0e:68:61:c0:ed:de:01:73:5b:9c:90:41:40:f3:74:15:47:
25:11:80:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA4MzY0OFoXDTI5MTExNzA4MzY0OFowGDEWMBQG
A1UEAxMNNWRkMjU4MjUtZGE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXlzyE3ZnO4yA8VfA0SKT9TdqPI/eKeIVHpfmImSsSAtQ/tzA3LNUaWBFT3
zvQ6ODOfEvX0ILTadqznhTvKuWi4lIkiWHC+2FhI5rySqHoTFf1fQetpFwkSEXrT
ZJzS68RTZFyyOQyZy3lCWbJJHNeUPpavoAZ1DVrA0pBxwdWv+zEhKyRRbXy0QWPb
71zvaheQfnBJc5sPXyMwCoIw9eSl+6hG8/SmKO3U8pkTbQAPZDe3at+g4g83bhdG
q0238wjBgxoMSGdo/pKPabkQ49yb2MO66vOLtriHQ6Pnv2TtZOTYTEvxieBQ8JvG
WoLI7kEevvqB4RiijfdWOKCcclsCAwEAAaOCAmswggJnMB0GA1UdDgQWBBRWWWkO
GzM4I5n3YaPxRyczBEE16TAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvOTIwQjBGNTIwOURFMTFFQUIzOTRFODY2RjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+HMA0GCSqGSIb3DQEBCwUAA4IBAQAc9FwI
d+mws5f82Z++YixI9+VhIeoN3kjPC36kU/nmffSEFBgqlHh/QGaHto3LHNrQpfwf
aacSzAigC3xNhes+G5tVc+jPy8BxyEnN310IUaviUumCPMQghSOez644K3wSecre
e/D7qvz1lwDYD4VJCPAX5ROk+UE8mRTLgu5zmracM1Thr6XT5KzYPvz1d10KFkcO
QKKA6+fDuiuAo+4A2HyX49VqBkLH/Ln1HikWQ54tVOzTtXF8alh4+hP63Bu13gn7
cQf0SQMyYRfipP04HrIpF4sdtBOeIyqTPDnKgvN64+0tOyXa+VLkDmhhwO3eAXNb
nJBBQPN0FUclEYCK
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org