Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/A9F49CE009F811EA8BB37F7AF8AEA228.roa
File: A9F49CE009F811EA8BB37F7AF8AEA228.roa (raw, json)
Hash identifier: eREmc+JzZ+U43RTSkllSNw1S9nmAbGtFN6mPIBnlziE=
Subject key identifier: 3C:F9:EB:5F:EB:B5:41:12:06:A0:7A:19:D9:EB:B1:DB:94:A1:19:B0
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: A0
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/A9F49CE009F811EA8BB37F7AF8AEA228.roa
Signing time: Mon 18 Nov 2019 11:43:40 +0000
ROA not before: Mon 18 Nov 2019 11:43:24 +0000
ROA not after: Sat 17 Nov 2029 11:43:24 +0000
asID: 327687
IP address blocks: 137.63.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 11:43:24 2019 GMT
Not After : Nov 17 11:43:24 2029 GMT
Subject: CN=5dd283ec-163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:55:40:ff:d6:9f:c7:42:b9:ef:e7:5c:9f:48:
d6:9c:3b:68:35:ff:fe:f6:f7:58:2d:fa:49:3d:37:
e1:32:f5:c1:19:2e:c6:99:d8:eb:d7:e9:b9:68:dc:
1d:eb:c1:0b:78:86:1e:fe:cc:a5:24:59:a9:70:05:
76:c1:f7:cf:11:03:8e:2d:13:5c:fb:2e:ef:78:63:
8c:e7:18:bd:11:c4:c4:31:f8:18:be:5d:21:5a:b3:
9f:06:6e:21:9f:6d:73:2b:d6:15:92:95:e0:fe:c8:
7a:b6:9a:c5:34:cb:e3:49:7b:84:5c:b8:dc:c2:8e:
cb:2e:50:78:c6:aa:55:c5:df:dc:f7:0a:11:45:78:
ed:10:f3:10:a0:97:0f:7b:8d:24:96:31:68:34:bc:
de:6a:07:db:36:ca:54:42:c4:ab:d0:1b:4f:99:14:
90:eb:a9:94:2c:b2:a2:bd:f8:39:9f:95:34:f4:99:
8d:5c:b7:c2:9a:3d:56:95:6c:41:4e:75:f4:6c:18:
62:40:e6:7e:e6:6c:10:b6:30:e2:fe:f3:bc:cf:8b:
7c:f0:8d:be:cf:81:a8:9c:ae:1a:9f:2f:cf:2f:df:
22:79:29:bb:f7:20:cc:19:d0:ac:48:68:6a:3f:27:
c0:ce:cf:4b:4a:cc:62:a7:12:e1:a7:9a:2c:af:97:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:EB:5F:EB:B5:41:12:06:A0:7A:19:D9:EB:B1:DB:94:A1:19:B0
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/A9F49CE009F811EA8BB37F7AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.148.0/24
Signature Algorithm: sha256WithRSAEncryption
39:de:2e:de:b0:4b:ef:14:43:ff:2e:e2:e3:8c:61:72:65:36:
4d:fa:71:68:50:39:a4:02:2c:87:51:b6:42:6c:45:3f:15:44:
10:23:00:d6:7d:cc:f4:5a:f3:6e:31:09:26:a8:ed:3c:de:f1:
7b:02:b9:6d:c0:1c:99:a7:95:0b:e0:d0:eb:28:7d:63:45:d6:
f9:2e:05:b6:91:68:a1:03:e6:ac:aa:fe:e4:88:7f:22:cd:6d:
42:8f:02:67:d5:be:8d:7c:0c:9d:98:ed:e4:dd:41:36:c4:81:
0d:56:6f:83:b4:ec:07:52:8e:66:e0:cf:d2:68:24:ec:4f:7e:
5f:ca:50:72:e9:d2:b8:34:9e:3e:87:cc:62:6b:e0:9a:bf:31:
35:38:84:26:b0:8f:a9:1a:3d:92:68:b9:6a:7f:6c:3c:a2:b1:
8b:3c:76:29:c9:5b:68:0c:20:b4:bb:fc:68:88:1e:bd:8b:49:
b8:33:2b:db:58:7c:7a:75:ca:19:2d:e0:33:c0:b3:62:c7:f0:
e7:34:bc:43:eb:98:29:aa:41:7d:25:3d:e9:a8:ad:06:0e:66:
b6:e6:cc:de:96:d7:c9:6c:23:ba:fb:12:a3:0e:66:2c:1e:6a:
fe:fb:a4:f8:08:a6:b1:e1:6c:1b:3e:70:97:ed:e3:89:06:f1:
c7:52:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:39:05 2024 by rpki-client on console-ams.rpki-client.org