Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9924395409E711EABE711E6EF8AEA228.roa
File: 9924395409E711EABE711E6EF8AEA228.roa (raw, json)
Hash identifier: WK3fuDRLvFo3bTGhuWu83qKW8jn1Og9/nyTmrYEpbWE=
Subject key identifier: CD:66:23:B2:9B:78:48:93:8C:7B:09:FE:EE:24:9B:A3:8C:65:73:A9
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 8A
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9924395409E711EABE711E6EF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:41:30 +0000
ROA not before: Mon 18 Nov 2019 09:41:25 +0000
ROA not after: Sat 17 Nov 2029 09:41:25 +0000
asID: 327687
IP address blocks: 137.63.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:41:25 2019 GMT
Not After : Nov 17 09:41:25 2029 GMT
Subject: CN=5dd2674a-1ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b5:f1:aa:45:c6:5d:3c:1c:61:6e:40:c9:3a:
b4:47:fb:9f:f4:83:eb:b0:47:f0:bb:80:4c:b8:fb:
c4:80:d8:69:d4:90:ab:06:fa:64:bb:7a:c0:78:3f:
3a:67:95:0a:29:02:53:05:a0:1c:33:d4:3a:a5:c7:
ec:35:c7:d8:2b:66:1f:22:5a:cf:18:a5:60:ed:58:
9b:69:56:97:85:32:77:a9:29:fb:29:06:a0:60:9c:
19:56:23:45:81:f0:9d:2e:1c:79:d1:ff:53:d2:29:
0b:b4:23:01:70:b5:8a:17:f0:98:e4:ac:dc:0e:35:
49:0f:67:d2:c8:18:d7:4d:77:00:3e:82:0f:21:b9:
dc:74:cb:d1:a0:cc:12:e1:e8:c0:7e:cb:e1:4a:c1:
d7:9f:c7:07:fb:4a:4d:46:32:3e:87:8c:49:a1:bf:
68:b2:3c:43:4a:7c:d1:cc:fb:a2:73:00:bf:17:af:
0b:56:61:f9:f5:15:9e:57:2d:63:2c:c8:bf:86:cb:
9c:86:51:57:75:a3:b3:6f:c4:5d:cf:33:84:4f:5c:
86:d0:a5:11:35:49:e9:44:fc:3f:3d:60:28:c1:ba:
51:66:80:8d:ae:20:81:43:70:ea:6f:87:b3:96:77:
d4:dd:48:09:91:3e:23:91:12:d8:7b:e2:4a:38:17:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:23:B2:9B:78:48:93:8C:7B:09:FE:EE:24:9B:A3:8C:65:73:A9
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9924395409E711EABE711E6EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c4:17:73:05:cc:fd:2e:9d:12:ed:fc:35:a6:c9:c5:70:fd:
2c:55:2e:13:07:e5:36:6b:bf:d8:93:45:9f:8a:6a:fc:46:39:
e0:61:e9:84:1a:22:d3:6e:79:e5:76:62:ae:fa:dd:2c:90:20:
e0:71:3a:d6:47:3a:5a:1a:21:3d:b0:ba:eb:d4:61:95:4c:94:
11:4e:f6:1b:fa:e1:fe:d3:66:c4:5e:ac:ef:4a:a8:9d:78:24:
3c:fc:87:04:92:d0:16:3e:c2:c3:8f:6b:e0:d0:44:11:41:2f:
11:5f:ff:5e:a3:9e:b5:aa:74:06:76:fb:b1:74:2e:b4:0d:e5:
06:3b:04:36:cf:9a:02:26:a9:29:b9:ba:f4:5c:67:a6:4b:f8:
17:4b:21:91:c6:68:75:53:e5:64:c1:4c:bd:1b:1e:47:66:a2:
01:48:38:a8:d6:a4:8b:80:cc:96:6a:62:15:60:23:57:a8:5a:
64:f2:3c:2a:fa:1c:06:3d:d5:c0:68:30:2a:c8:cc:cd:3a:92:
b5:31:03:89:29:44:40:7b:08:17:05:7d:11:03:38:d2:4d:78:
71:8a:03:98:0f:6d:71:d9:15:e5:9c:8d:af:0d:b6:c8:d9:ad:
aa:c3:69:c2:40:c0:14:64:dd:cd:7a:11:b5:a0:f5:4e:e4:19:
80:91:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org