Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9867492809E911EA9BFDC46FF8AEA228.roa
File: 9867492809E911EA9BFDC46FF8AEA228.roa (raw, json)
Hash identifier: IJjpDuQwY+xWj33iHFryS4U1fIJtUpl3/DI6gaeqEgE=
Subject key identifier: DC:BA:AF:72:08:08:74:E3:E7:32:2C:9D:B6:38:30:3F:4A:30:2A:9E
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 9C
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9867492809E911EA9BFDC46FF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:55:48 +0000
ROA not before: Mon 18 Nov 2019 09:55:43 +0000
ROA not after: Sat 17 Nov 2029 09:55:43 +0000
asID: 327687
IP address blocks: 137.63.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:55:43 2019 GMT
Not After : Nov 17 09:55:43 2029 GMT
Subject: CN=5dd26aa4-ca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:df:ee:cf:f9:52:a8:c6:9f:f3:08:af:ab:
c7:30:49:e3:77:e3:c2:f7:82:89:c0:92:eb:ac:a7:
b4:d9:2b:0a:3c:6c:c6:1e:12:78:9e:02:c8:9c:ed:
52:c9:e5:5d:1f:55:5d:5b:ae:da:fd:7b:db:5d:50:
c8:54:de:91:8e:e7:1c:55:03:a8:9d:b6:e9:39:60:
99:01:7f:2c:c3:09:e5:b4:f3:92:b0:4d:a6:1d:13:
d0:b5:58:3c:03:1f:fe:6e:8f:5b:e6:04:99:08:40:
2d:24:1d:4f:6a:0a:aa:80:a0:3e:f1:5f:2a:9d:d6:
a6:b3:58:1c:89:7a:7f:17:ce:6e:96:ea:94:8c:bb:
70:7d:47:b0:e8:65:c1:96:7d:3a:dd:4e:dc:5e:6b:
e1:de:5f:4f:8c:0f:59:c2:76:4c:7a:5f:54:95:8c:
66:8f:5a:6b:95:bd:ed:3a:68:ae:a8:6a:7c:06:2f:
98:d4:c5:05:4f:0a:68:38:4a:33:78:81:99:90:67:
84:81:ae:1c:8c:74:63:9d:53:b2:f2:6f:41:8f:5b:
cb:08:43:6f:70:a7:10:34:af:3a:e9:32:bc:7b:2b:
0a:f2:88:3a:9c:b3:b6:7c:31:a1:dd:e4:77:d4:d5:
a9:a6:72:30:5f:56:e4:5b:90:7b:8b:24:d0:58:10:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:AF:72:08:08:74:E3:E7:32:2C:9D:B6:38:30:3F:4A:30:2A:9E
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9867492809E911EA9BFDC46FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:20:5a:e9:2b:63:14:1a:a3:2f:26:09:ba:e0:52:ca:0a:1a:
27:a0:a8:02:1d:2d:6d:cf:82:ad:3e:75:68:9a:0d:98:0c:23:
ee:0b:91:5b:7b:e1:24:8d:d7:54:a8:96:46:6f:55:6f:37:c0:
83:a6:2c:8e:cb:4b:fa:70:90:6f:25:9f:fa:2c:f6:6f:38:91:
7d:69:49:f3:ba:c8:8b:0d:1a:1e:47:99:76:7f:93:48:9f:bb:
c1:23:21:a9:61:74:51:83:ef:5c:db:2a:3c:78:40:fa:e7:c6:
6d:be:3c:c9:14:99:40:de:4d:30:40:1e:f1:aa:25:6f:c9:42:
b1:b2:8c:df:90:81:b9:75:50:ea:6d:2f:60:d6:ed:12:fd:b9:
05:a0:fb:61:56:cf:1d:16:f0:8c:07:46:4d:87:fe:ee:cb:1c:
f9:5e:6d:32:cc:bf:45:80:59:9b:7b:04:68:4b:ce:d2:3a:5e:
3b:25:c4:ea:cb:cf:27:2c:35:d1:7a:f5:1e:6f:61:61:2a:e5:
e7:58:cd:2a:85:cf:d0:27:9f:03:f3:08:5b:53:d8:be:d1:a7:
0e:42:3c:7a:44:de:76:21:f2:b1:d1:85:16:41:31:44:ed:fb:
4e:7c:ed:aa:3a:af:80:61:c4:41:a9:d0:81:82:eb:8c:8b:06:
f7:60:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org