Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/D5E0AA1609E311EAAB9B216BF8AEA228.roa
File: D5E0AA1609E311EAAB9B216BF8AEA228.roa (raw, json)
Hash identifier: 3y3sY2fCA2tNPpMm8lQJHaSDJFrERpWSUUtl/GUNOvM=
Subject key identifier: EB:79:E4:EF:2A:FF:DE:4C:96:03:97:E9:E8:55:D0:E6:11:18:2E:DA
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 72
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/D5E0AA1609E311EAAB9B216BF8AEA228.roa
Signing time: Mon 18 Nov 2019 09:14:34 +0000
ROA not before: Mon 18 Nov 2019 09:14:29 +0000
ROA not after: Sat 17 Nov 2029 09:14:29 +0000
asID: 327687
IP address blocks: 137.63.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 09:14:29 2019 GMT
Not After : Nov 17 09:14:29 2029 GMT
Subject: CN=5dd260fa-0618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:c9:94:c7:c4:b9:03:7c:49:4e:3e:0b:91:
0c:d6:ee:47:07:83:53:1d:54:ec:f7:04:26:66:e5:
f8:31:95:5b:be:19:98:11:18:40:b1:f9:71:6f:67:
7f:00:ec:22:f6:db:2f:99:9a:49:95:ef:d2:04:a2:
2e:87:8b:2e:57:00:3d:3c:95:45:b1:63:c2:9b:a5:
fb:f3:da:46:4b:08:d7:25:2c:57:9c:be:ae:96:1c:
6e:d7:44:63:82:88:33:ee:9c:c9:69:7a:41:9d:94:
cf:11:38:0c:95:72:d7:ac:32:92:ee:36:2e:61:c1:
04:af:cb:58:e5:5c:50:56:e6:3c:27:70:48:2a:9c:
07:9a:d9:b7:a1:3d:77:4d:1d:a4:67:bd:6c:19:95:
2e:e1:6c:93:7b:71:22:62:3f:05:26:1d:6a:d0:27:
40:5e:a7:38:d8:cd:15:55:42:76:05:19:5d:77:6d:
1b:d9:dc:ad:c8:3a:ad:af:64:be:49:dd:d3:4a:37:
7a:60:fd:e0:98:5d:ad:76:0e:51:5a:bb:f3:a0:6a:
b0:c0:5c:ef:f7:0b:a8:49:85:47:5d:65:6c:91:4c:
06:19:a6:a6:56:d6:26:63:70:1b:f7:2d:6d:a6:b6:
df:12:24:f7:8d:8b:f3:2d:c1:7e:3f:85:05:f8:27:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:E4:EF:2A:FF:DE:4C:96:03:97:E9:E8:55:D0:E6:11:18:2E:DA
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/D5E0AA1609E311EAAB9B216BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:85:4b:25:27:10:32:90:76:39:64:0f:71:a4:0d:93:1f:14:
39:05:6b:03:c8:1e:cb:b8:56:f3:37:06:43:38:87:b6:7d:aa:
d3:75:e3:b6:f3:f5:c3:ce:9b:90:ab:ec:e4:2d:f5:15:c2:d0:
3e:69:5b:31:a5:39:26:d5:d3:8b:06:d0:4d:00:41:63:86:53:
3b:fd:db:fc:d7:55:06:6b:cf:4d:4c:63:8c:60:32:af:ec:66:
24:14:88:2e:ed:6e:b1:11:f7:79:2c:5b:d9:e6:d3:a2:43:01:
52:01:10:a6:9b:eb:c3:51:49:f7:8c:6c:07:a0:cf:f2:6e:e2:
63:7e:a5:e9:36:83:58:b1:c7:6b:b8:72:61:1a:75:b7:1d:18:
ef:7d:04:cc:f1:77:37:e3:bf:43:33:f5:30:ce:fe:7d:9d:99:
7a:4c:8b:76:80:ef:4f:72:2a:85:33:87:42:d1:34:09:04:9c:
50:85:b1:a1:1a:8a:d7:32:56:9c:40:5c:41:6b:12:12:b4:29:
85:64:47:3a:fe:1f:fa:58:2d:9e:57:97:38:f7:68:6a:a7:85:
5f:75:a6:01:73:d4:f1:c3:06:cd:d8:5a:4f:16:68:e1:0a:cb:
45:d1:9a:d5:b3:b1:2d:49:2e:9c:b7:bb:60:6a:a8:86:60:0d:
fe:b3:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org