Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/BC8ADDE409E711EAA61E3F6EF8AEA228.roa
File: BC8ADDE409E711EAA61E3F6EF8AEA228.roa (raw, json)
Hash identifier: HG8AzjLjjicoclW9uO3yFEFRlxfIGDeYDnNq/rAcdpg=
Subject key identifier: 31:5C:BC:37:2A:92:04:F8:C0:B7:90:38:2E:A1:7C:56:A4:99:07:BA
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 8C
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/BC8ADDE409E711EAA61E3F6EF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:42:30 +0000
ROA not before: Mon 18 Nov 2019 09:42:25 +0000
ROA not after: Sat 17 Nov 2029 09:42:25 +0000
asID: 327687
IP address blocks: 137.63.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:42:25 2019 GMT
Not After : Nov 17 09:42:25 2029 GMT
Subject: CN=5dd26785-a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:45:7e:a2:42:a5:82:96:05:05:c3:e6:4a:
58:bb:d0:9f:d3:c7:a8:59:9c:64:19:aa:ed:80:31:
14:12:9f:35:63:6a:e9:98:ee:3b:41:0a:ce:9d:b4:
7d:31:85:aa:65:be:85:5f:dc:82:7a:6b:a8:97:7c:
0a:45:0a:8b:c9:75:9c:a0:dd:ad:e2:97:75:b5:1c:
60:15:e5:73:8f:18:56:e3:d3:a7:d5:9b:6a:d1:69:
25:28:30:1c:e8:6f:0b:c1:b3:e5:70:57:6f:4f:57:
69:5f:d7:69:f7:f0:68:c5:1c:ff:be:c9:74:c5:37:
0b:56:39:90:a0:d4:7b:ce:ea:d6:ce:60:ee:a0:06:
0f:fb:39:55:cc:23:83:79:2c:82:b5:66:c4:e3:b4:
21:0d:45:99:b8:68:d4:5f:f3:35:58:ae:e3:d0:e8:
81:02:b0:0b:a7:ac:8a:84:5d:9d:22:d7:40:c4:f0:
2d:e0:43:b0:74:c1:7c:ea:f6:6c:0e:28:55:16:ac:
81:aa:b3:de:1f:39:cf:7a:e4:04:19:e2:43:8f:df:
62:40:0c:57:b5:5a:51:e3:34:86:64:07:99:17:ba:
b2:df:ca:04:3c:d9:81:cb:a0:4e:d1:72:93:f7:56:
62:a8:0e:3a:de:b3:c8:db:1f:ab:48:59:4e:a1:05:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:BC:37:2A:92:04:F8:C0:B7:90:38:2E:A1:7C:56:A4:99:07:BA
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/BC8ADDE409E711EAA61E3F6EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5c:3f:e9:dd:4d:67:88:af:9e:72:20:e8:36:14:d4:1e:9c:
4f:e9:eb:d2:0c:20:b0:07:40:9a:ba:e1:c1:c2:e3:81:93:83:
b1:80:aa:a5:da:ba:8a:e3:17:1b:59:b2:26:99:63:42:9d:29:
14:2e:0e:62:1b:eb:57:eb:52:18:71:65:e9:57:7f:03:7a:4e:
43:b3:3e:29:6c:98:da:a8:89:5f:b8:87:f3:3f:6f:6d:36:72:
1e:a5:11:05:79:e0:4a:91:b2:c3:ce:3a:f4:e3:a0:e7:53:45:
ab:a8:0c:ba:81:b8:85:64:16:c5:3e:b3:9d:57:5d:0b:b1:a5:
a1:14:9c:de:3e:bd:f8:f8:5b:f9:af:5c:4f:ba:57:27:d6:39:
e3:50:11:cb:61:cf:91:1b:c8:c4:f4:ed:d3:14:9b:75:8e:f5:
d2:25:82:55:ad:21:e5:23:1e:e0:13:a7:eb:8c:83:1b:20:0f:
2d:7e:7e:4b:7f:c9:10:90:9e:c0:75:a1:06:7a:1a:7c:c4:61:
dc:a8:b2:3b:83:3e:28:45:91:09:70:56:7f:60:ff:b0:02:d9:
58:a4:75:7e:95:6a:b9:71:a6:75:f0:b2:a4:fb:9d:75:78:ee:
28:04:be:33:6b:a8:5e:b4:5e:3e:fc:16:97:d2:c1:26:78:ee:
d0:1f:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org