Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E5D4C22CFA4C11EA85ED1A50F8AEA228.roa
File: E5D4C22CFA4C11EA85ED1A50F8AEA228.roa (raw, json)
Hash identifier: Yy83xvOwHm6sY+QRwntZ2UjSPWGsBA7TsQFVMLeRxWU=
Subject key identifier: 49:19:28:83:84:7F:85:3A:62:B9:D5:D5:3C:2C:25:B9:80:8F:4A:CE
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: 01F1
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E5D4C22CFA4C11EA85ED1A50F8AEA228.roa
Signing time: Sat 19 Sep 2020 07:51:17 +0000
ROA not before: Sat 19 Sep 2020 07:51:08 +0000
ROA not after: Tue 31 Dec 2030 07:51:08 +0000
asID: 327687
IP address blocks: 137.63.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Sep 19 07:51:08 2020 GMT
Not After : Dec 31 07:51:08 2030 GMT
Subject: CN=5f65b875-bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:de:25:03:65:3a:d3:a9:91:57:91:ed:fc:
e3:6b:a6:0c:39:03:4a:94:cd:2b:6f:51:e8:61:eb:
92:f6:66:4f:5c:9e:ae:4b:69:95:d2:dc:1f:d5:de:
e9:09:13:90:90:09:1f:bc:d4:95:c1:d6:13:79:57:
46:a8:bb:5b:7e:6f:13:ce:5d:96:c7:53:bd:75:5b:
d6:07:54:1e:0d:29:0c:59:b0:9e:b3:4a:2c:43:7f:
c6:51:86:72:ec:5e:32:cd:11:05:d5:d8:d3:0b:87:
2c:aa:1e:28:6a:8a:8a:a8:63:23:b6:af:25:bf:5c:
32:4b:e1:f9:ce:dd:54:dc:8a:14:e2:1a:68:b3:57:
51:11:ce:cb:de:17:65:35:66:8b:70:7f:3b:6d:12:
5e:97:df:0f:c3:a0:6d:bd:4c:da:44:05:7b:bd:b8:
07:f0:5b:bd:7d:1f:22:09:72:f1:0f:5e:35:48:93:
ab:19:d3:44:4d:f1:e2:0a:ec:08:55:6a:5a:ab:01:
6a:cb:cc:cf:64:8a:60:c1:05:64:dd:d6:45:58:6d:
d2:f3:21:d3:53:6a:cb:3a:74:52:c9:3c:bd:0a:ac:
98:94:3f:08:91:48:a5:fe:42:67:ea:0e:76:f1:32:
ff:89:4d:50:31:53:90:d1:58:a4:53:89:32:01:b9:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:28:83:84:7F:85:3A:62:B9:D5:D5:3C:2C:25:B9:80:8F:4A:CE
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E5D4C22CFA4C11EA85ED1A50F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.63.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a3:2a:c1:c0:91:5f:e4:86:dd:3e:5b:dd:90:88:54:f7:2d:0d:
b2:4a:18:3d:1f:bd:fc:fe:9f:1c:1b:ca:7b:b5:d7:aa:fc:51:
76:5e:de:0f:87:c8:d7:3c:7d:83:a0:d4:67:9b:7d:41:17:93:
a1:05:db:e7:3e:1a:69:d2:43:ac:45:05:5c:50:dd:53:41:c6:
00:9f:40:8e:e3:55:3d:4a:c5:31:a9:ff:1c:ab:87:62:b7:a5:
68:fd:e3:0c:00:ca:b4:25:e4:34:ae:c7:98:6e:8c:5c:7c:03:
d9:f5:91:88:61:93:f0:fb:88:f4:e0:0c:9b:64:cb:09:80:e1:
ae:2d:75:b4:8e:b9:4d:3a:f7:96:18:11:c2:62:ef:94:dc:c6:
52:86:2d:96:69:e5:b8:a3:bf:cf:c5:7e:e6:7e:8a:c6:be:ff:
b7:19:8d:9a:d9:f3:d9:92:74:61:87:03:6f:0c:2e:9f:67:46:
3c:46:ef:2d:0c:27:33:01:58:20:66:bb:f7:ca:a5:1d:00:f1:
62:44:9e:7c:f3:56:3b:2b:46:5e:9e:78:91:18:ba:b5:57:e2:
83:4d:eb:12:57:49:74:41:2d:10:72:d5:18:e5:46:12:15:63:
07:57:e1:f7:ab:de:8c:1a:50:45:03:f3:32:3c:b3:c3:62:c5:
0e:07:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org