Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9F69EECC09DC11EAA89E5465F8AEA228.roa
File: 9F69EECC09DC11EAA89E5465F8AEA228.roa (raw, json)
Hash identifier: UU49mNnE8yLFxcfF2SGPWkTM/8GXHU+QiZ67YRIP+Yw=
Subject key identifier: 17:6D:F4:4E:96:F5:CE:2B:DE:36:11:E9:44:CF:33:70:41:A3:0F:B9
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 40
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9F69EECC09DC11EAA89E5465F8AEA228.roa
Signing time: Mon 18 Nov 2019 08:22:57 +0000
ROA not before: Mon 18 Nov 2019 08:22:51 +0000
ROA not after: Sat 17 Nov 2029 08:22:51 +0000
asID: 327687
IP address blocks: 137.63.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 08:22:51 2019 GMT
Not After : Nov 17 08:22:51 2029 GMT
Subject: CN=5dd254e0-62c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:2e:4f:ca:a9:1a:65:c8:80:38:1e:23:09:
f0:73:76:ad:20:d9:20:1c:30:32:1e:63:c6:40:2e:
b7:c1:2a:c5:79:9e:f2:5c:48:4d:82:35:db:b8:0b:
bb:d5:cf:0d:31:10:51:28:06:46:1a:ee:4d:49:f6:
c3:88:7e:e3:f1:10:28:51:2e:d7:9b:6f:9c:d8:1d:
3c:b5:ef:0c:08:7e:6b:eb:37:69:ff:53:a4:6f:3f:
a5:60:8f:f2:68:29:c1:d4:31:ea:4b:6e:96:a6:5e:
4d:ec:b7:0c:9e:f7:db:88:bc:b2:2c:85:20:97:c6:
6c:fd:93:49:8d:02:e2:ec:d9:8b:de:ee:da:80:3c:
bb:2f:80:fe:90:45:1a:41:81:dd:b9:d9:2e:c2:1b:
3e:9f:6c:4d:af:a4:d8:25:46:61:19:e0:b2:89:f6:
fd:77:81:67:00:58:de:11:95:da:65:a2:80:a0:1a:
40:ac:90:56:7c:dd:81:e4:37:4a:ce:a4:cb:6c:02:
78:26:2a:b3:e7:49:97:d5:e6:29:b2:23:0b:d7:9c:
44:ae:d5:d6:4c:3e:51:27:68:0f:b9:fa:da:88:5d:
1f:1b:58:fb:9f:0a:4c:1a:70:31:6b:79:6f:a5:15:
f1:2f:5a:dd:49:16:ca:6a:a1:4d:e2:d9:d8:02:db:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:F4:4E:96:F5:CE:2B:DE:36:11:E9:44:CF:33:70:41:A3:0F:B9
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9F69EECC09DC11EAA89E5465F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.149.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f9:5d:d6:b8:de:a7:a5:dd:f9:fd:16:a7:13:ee:71:df:fd:
a4:95:d0:14:3a:60:44:60:10:48:ea:8b:bf:03:e2:f5:3f:c8:
a2:67:e4:68:22:b4:99:c1:da:b6:ec:0b:84:ef:9f:b8:62:7c:
ea:00:00:ab:6f:ea:0c:36:97:a6:2b:07:71:a3:72:5f:98:98:
7e:6d:b4:c8:e5:65:03:39:44:89:0d:65:e5:cf:46:ad:36:ee:
24:80:91:f1:53:4c:c0:91:42:ec:32:a4:38:90:70:da:0c:17:
fe:c4:5b:9c:6c:dc:8e:4f:90:5c:ff:b0:96:65:7b:5c:1f:55:
d6:2a:4d:ce:04:c4:76:25:e7:63:96:75:dd:70:57:2c:9a:b3:
31:7d:2e:9d:31:4d:5f:bc:55:f7:af:22:46:cc:c6:da:63:56:
16:57:53:ed:9e:5f:19:ef:85:3b:d7:82:a0:de:bc:6a:40:3a:
90:e9:d8:9e:9a:ab:45:6b:fb:c2:99:44:6a:da:0d:8e:2e:78:
c7:ab:09:09:6e:4d:bb:5b:4c:8e:be:22:cd:22:15:88:e0:56:
db:1e:49:c3:59:24:65:fc:82:9b:7f:f1:5b:20:02:cf:8f:6e:
d5:8a:c3:41:b4:f4:5c:49:de:b9:d8:76:d1:ee:46:ab:34:2d:
e0:5c:4f:ec
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA4MjI1MVoXDTI5MTExNzA4MjI1MVowGDEWMBQG
A1UEAxMNNWRkMjU0ZTAtNjJjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3lLk/KqRplyIA4HiMJ8HN2rSDZIBwwMh5jxkAut8EqxXme8lxITYI127gL
u9XPDTEQUSgGRhruTUn2w4h+4/EQKFEu15tvnNgdPLXvDAh+a+s3af9TpG8/pWCP
8mgpwdQx6ktulqZeTey3DJ7324i8siyFIJfGbP2TSY0C4uzZi97u2oA8uy+A/pBF
GkGB3bnZLsIbPp9sTa+k2CVGYRngson2/XeBZwBY3hGV2mWigKAaQKyQVnzdgeQ3
Ss6ky2wCeCYqs+dJl9XmKbIjC9ecRK7V1kw+USdoD7n62ohdHxtY+58KTBpwMWt5
b6UV8S9a3UkWymqhTeLZ2ALbCl0CAwEAAaOCAmswggJnMB0GA1UdDgQWBBQXbfRO
lvXOK942EelEzzNwQaMPuTAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvOUY2OUVFQ0MwOURDMTFFQUE4OUU1NDY1RjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+VMA0GCSqGSIb3DQEBCwUAA4IBAQAH+V3W
uN6npd35/RanE+5x3/2kldAUOmBEYBBI6ou/A+L1P8iiZ+RoIrSZwdq27AuE75+4
YnzqAACrb+oMNpemKwdxo3JfmJh+bbTI5WUDOUSJDWXlz0atNu4kgJHxU0zAkULs
MqQ4kHDaDBf+xFucbNyOT5Bc/7CWZXtcH1XWKk3OBMR2JedjlnXdcFcsmrMxfS6d
MU1fvFX3ryJGzMbaY1YWV1Ptnl8Z74U714Kg3rxqQDqQ6diemqtFa/vCmURq2g2O
LnjHqwkJbk27W0yOviLNIhWI4FbbHknDWSRl/IKbf/FbIALPj27VisNBtPRcSd65
2HbR7karNC3gXE/s
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org