Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9EBCF7E609E411EAA2D2C36BF8AEA228.roa
File: 9EBCF7E609E411EAA2D2C36BF8AEA228.roa (raw, json)
Hash identifier: 4rNiw3H9i6+gEJA/ApGAOGr0B+hcTOqwrDKAtwASXzY=
Subject key identifier: 5A:7C:7F:7D:FE:99:11:B2:DE:39:05:30:0F:23:11:EF:0E:01:CE:01
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 78
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9EBCF7E609E411EAA2D2C36BF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:20:11 +0000
ROA not before: Mon 18 Nov 2019 09:20:06 +0000
ROA not after: Sat 17 Nov 2029 09:20:06 +0000
asID: 327687
IP address blocks: 137.63.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:20:06 2019 GMT
Not After : Nov 17 09:20:06 2029 GMT
Subject: CN=5dd2624b-436d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:05:54:56:9c:31:75:6a:00:da:bc:e2:b4:
21:cf:e0:50:88:d9:39:ba:1e:6a:45:8f:15:0b:d4:
c9:d3:6a:55:2c:aa:3b:9a:17:a6:6c:05:61:d6:b3:
6b:f2:30:b0:93:45:5d:d3:68:9d:6f:a6:2c:80:3c:
6d:b2:05:b0:9b:03:67:80:c3:55:e9:5e:b8:2b:83:
9f:52:7a:67:f2:7d:a5:59:a7:c4:b6:bf:8f:0b:c4:
b7:81:51:33:7f:20:ef:55:a9:e3:03:eb:0e:65:e5:
8e:13:43:c2:3c:bc:7d:61:44:68:c4:20:9a:e2:e2:
cd:01:3f:5a:df:14:47:ed:81:aa:da:4d:de:e7:47:
c8:1d:52:6c:1b:11:48:63:14:1d:24:d0:17:96:06:
0b:f5:dc:2c:a4:e5:31:3a:e1:0b:4c:ae:93:72:c1:
31:be:83:ca:6f:4a:89:c0:66:03:17:1f:63:cc:df:
71:68:cd:e5:a2:3f:02:2b:3d:be:9e:8a:38:b8:03:
8c:25:71:9c:a8:f6:f5:4e:c2:1f:b0:64:0a:09:8d:
98:fc:43:a2:06:66:5d:ee:95:a2:d3:11:24:a0:03:
74:eb:bb:db:5d:bd:02:cc:f7:83:ca:a8:a4:4a:bf:
0c:f5:ba:4d:84:26:b5:da:5a:8c:1c:2b:73:eb:c1:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:7F:7D:FE:99:11:B2:DE:39:05:30:0F:23:11:EF:0E:01:CE:01
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9EBCF7E609E411EAA2D2C36BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.163.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3e:5d:1e:20:49:4f:2d:e9:94:1e:84:76:bf:64:da:8b:ad:
33:61:20:04:ba:01:e3:16:7d:ab:8d:e7:be:a9:54:20:91:f7:
c6:3b:56:a0:03:7c:5c:d4:7d:26:a9:7f:d5:5b:29:f6:fb:40:
96:71:54:f4:92:48:28:80:74:f5:93:98:63:f0:f7:6a:08:eb:
c9:03:e8:dc:04:a1:1a:cd:96:bb:82:db:d1:93:ed:49:92:8d:
03:22:73:75:ae:57:23:99:af:c5:bf:b8:98:8d:64:8b:aa:6a:
2e:c2:a6:06:32:53:48:b9:61:1e:81:b4:87:15:ad:44:c5:1e:
ca:b4:10:12:1e:6a:a7:68:88:9d:a6:ac:8a:72:b6:67:77:ac:
a0:2a:79:1d:fb:44:c5:05:5b:83:b8:a6:01:4d:e6:61:7b:4e:
5e:c9:21:8e:72:b5:d4:bc:37:67:aa:ad:b0:a3:93:8c:c5:d8:
05:12:7d:5c:ee:44:69:ed:b8:e1:29:41:6c:48:35:a5:17:84:
63:25:3d:86:b5:e9:e5:50:b0:a9:1d:e2:0d:51:ec:5d:d0:e1:
4f:b0:9e:f5:48:29:a8:30:57:f9:50:45:8c:06:3d:79:5d:3e:
99:46:db:09:75:ef:e3:f4:31:bf:d0:95:38:7d:1d:df:bb:03:
d6:78:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:45:52 2024 by rpki-client on console-fra.rpki-client.org