Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/AE8B485E09E311EA822FFC6AF8AEA228.roa
File: AE8B485E09E311EA822FFC6AF8AEA228.roa (raw, json)
Hash identifier: VKnAdkS1QVhbR0wn3SUzeDwSnX/5PPU9rqKccmJzqE0=
Subject key identifier: 07:B8:1C:DE:3A:3F:4D:98:78:8A:AE:DF:D0:FC:A7:78:41:69:DC:97
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 70
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/AE8B485E09E311EA822FFC6AF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:13:28 +0000
ROA not before: Mon 18 Nov 2019 09:13:24 +0000
ROA not after: Sat 17 Nov 2029 09:13:24 +0000
asID: 327687
IP address blocks: 137.63.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:13:24 2019 GMT
Not After : Nov 17 09:13:24 2029 GMT
Subject: CN=5dd260b8-8ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:67:91:12:e6:61:10:1e:f3:76:97:53:f0:
01:59:40:ec:84:5e:2e:64:ab:e2:aa:91:cb:16:b5:
13:b5:bd:4d:7b:70:4d:91:1f:6c:bb:a6:35:da:83:
94:80:80:ae:c0:fa:2e:9f:bb:8b:e5:58:92:4c:02:
c5:8e:78:46:72:65:7d:ff:eb:f2:e7:f3:c2:15:3b:
e0:63:b1:8f:f9:5a:c6:5b:33:34:e9:9d:55:74:8b:
88:61:98:0d:2a:cc:91:0f:83:14:6b:27:98:28:5f:
ea:e1:82:d3:9f:6c:00:38:06:4d:a0:d0:de:f3:90:
a3:cc:b7:2a:fc:15:1f:90:1f:6a:88:b1:35:aa:5e:
63:28:d6:f0:f5:16:e5:58:d6:bb:bd:65:28:61:6d:
a8:16:71:c8:ac:02:a5:bd:a2:f3:a5:1b:8d:e6:d9:
ad:3b:4e:c9:13:99:51:5c:50:08:7d:b0:a1:81:c8:
5b:07:90:36:c7:ba:5a:62:1c:7f:2f:bb:01:d5:e1:
26:8e:eb:d4:9e:0a:ad:9d:a8:0d:6d:7b:1d:40:96:
d6:dc:cc:39:88:0a:05:b0:34:de:40:e7:ea:f5:94:
e2:60:19:ff:3c:5f:7e:a4:43:9b:90:46:10:89:57:
f2:78:35:33:f8:73:5d:cd:35:2e:a4:54:c4:8c:94:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:1C:DE:3A:3F:4D:98:78:8A:AE:DF:D0:FC:A7:78:41:69:DC:97
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/AE8B485E09E311EA822FFC6AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:95:50:b6:26:3a:e3:ad:cd:ca:b9:13:df:3d:a8:78:da:15:
c7:d4:31:99:a6:b2:05:02:83:49:40:78:7c:ae:06:b5:89:f9:
94:57:df:b9:6e:e8:27:d6:bc:d7:20:17:8f:89:55:10:99:98:
30:c7:c7:b3:ab:4d:10:27:c5:24:ba:bd:54:4b:ac:0a:76:35:
63:03:d1:ad:3f:13:df:d5:86:9e:a5:ea:9b:fc:da:e4:40:41:
25:f3:3e:3a:cd:9c:2f:d4:5c:41:92:d3:3d:73:94:1d:d3:c6:
8c:c3:05:7e:dd:13:9d:72:fd:c3:94:79:7b:7e:4a:43:e0:f1:
4e:04:2d:c3:8f:e7:86:c3:7e:a1:2c:35:5c:91:3f:83:be:e9:
12:3f:79:14:43:e6:b5:36:9c:d4:0a:07:5b:68:2d:4d:38:8d:
52:bf:5e:65:37:cc:5e:ce:62:60:99:f7:6a:10:71:4c:c7:af:
94:49:c4:be:61:17:47:f4:6e:ae:59:4a:c5:e6:24:76:01:37:
a3:66:ef:a9:db:93:03:86:3f:6b:a4:19:72:f6:eb:d6:5e:74:
2a:c0:7b:93:0a:6f:7e:35:cb:11:5c:11:8e:b7:49:47:41:9d:
44:39:d9:cf:b2:b3:12:00:18:f3:df:a1:48:60:38:17:d5:9c:
24:9d:30:31
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA5MTMyNFoXDTI5MTExNzA5MTMyNFowGDEWMBQG
A1UEAxMNNWRkMjYwYjgtOGJhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOSPZ5ES5mEQHvN2l1PwAVlA7IReLmSr4qqRyxa1E7W9TXtwTZEfbLumNdqD
lICArsD6Lp+7i+VYkkwCxY54RnJlff/r8ufzwhU74GOxj/laxlszNOmdVXSLiGGY
DSrMkQ+DFGsnmChf6uGC059sADgGTaDQ3vOQo8y3KvwVH5AfaoixNapeYyjW8PUW
5VjWu71lKGFtqBZxyKwCpb2i86UbjebZrTtOyROZUVxQCH2woYHIWweQNse6WmIc
fy+7AdXhJo7r1J4KrZ2oDW17HUCW1tzMOYgKBbA03kDn6vWU4mAZ/zxffqRDm5BG
EIlX8ng1M/hzXc01LqRUxIyUCg8CAwEAAaOCAmswggJnMB0GA1UdDgQWBBQHuBze
Oj9NmHiKrt/Q/Kd4QWnclzAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvQUU4QjQ4NUUwOUUzMTFFQTgyMkZGQzZBRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+fMA0GCSqGSIb3DQEBCwUAA4IBAQDFlVC2
Jjrjrc3KuRPfPah42hXH1DGZprIFAoNJQHh8rga1ifmUV9+5bugn1rzXIBePiVUQ
mZgwx8ezq00QJ8Ukur1US6wKdjVjA9GtPxPf1Yaepeqb/NrkQEEl8z46zZwv1FxB
ktM9c5Qd08aMwwV+3ROdcv3DlHl7fkpD4PFOBC3Dj+eGw36hLDVckT+DvukSP3kU
Q+a1NpzUCgdbaC1NOI1Sv15lN8xezmJgmfdqEHFMx6+UScS+YRdH9G6uWUrF5iR2
ATejZu+p25MDhj9rpBly9uvWXnQqwHuTCm9+NcsRXBGOt0lHQZ1EOdnPsrMSABjz
36FIYDgX1ZwknTAx
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org