Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F977286C0A9011EAB456DA6DF8AEA228.roa
File: F977286C0A9011EAB456DA6DF8AEA228.roa (raw, json)
Hash identifier: KYZUM7+Ru8DlUoD/sAw5BmzAabXjOiGc7LkAOK1sRxE=
Subject key identifier: 19:96:9E:54:D5:A8:AC:7A:73:00:77:24:27:AC:66:FA:39:E1:C7:D5
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: B1
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F977286C0A9011EAB456DA6DF8AEA228.roa
Signing time: Tue 19 Nov 2019 05:53:57 +0000
ROA not before: Tue 19 Nov 2019 05:53:52 +0000
ROA not after: Sun 18 Nov 2029 05:53:52 +0000
asID: 327687
IP address blocks: 137.63.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 19 05:53:52 2019 GMT
Not After : Nov 18 05:53:52 2029 GMT
Subject: CN=5dd38375-6f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:77:bd:79:cc:b8:44:2b:1d:bd:ff:56:a6:
08:91:7f:14:40:bd:e1:d5:5d:54:7f:1e:3f:30:24:
e2:56:bb:28:6d:03:6a:31:81:6f:a9:23:06:f0:c8:
7e:ea:2f:e9:94:ef:7a:6a:95:1c:ac:c0:93:99:f5:
99:55:62:ad:fe:41:74:fb:07:9d:be:59:e1:37:9b:
90:ff:d4:6f:a0:e9:02:e6:12:b2:ca:a3:2e:b9:67:
35:a7:1a:22:dc:8c:56:83:4a:87:c5:b2:7d:0d:46:
74:a8:42:96:d7:63:65:81:c5:ab:ff:6d:fb:32:eb:
4e:eb:53:2e:60:4c:27:7c:67:b5:ba:00:38:8c:f6:
3b:5c:8a:9b:fc:64:fe:2b:78:ac:ba:4a:46:72:84:
6a:24:20:a0:eb:f5:e1:e2:ea:86:41:71:e8:2f:22:
20:6d:e1:bc:29:ef:22:40:8f:9a:b0:1c:33:1a:88:
c1:28:1d:23:9f:f7:3e:6d:9a:f1:4d:03:7e:07:fa:
b6:6b:12:6a:cb:47:5d:90:d1:70:f4:c0:94:22:d6:
da:a8:8b:60:00:56:19:71:d8:21:3e:72:62:5f:f1:
d2:cd:ed:ff:f1:af:19:38:c5:0d:a2:16:be:c2:bd:
00:a4:5a:9e:43:f3:11:4c:e8:92:8c:ee:5e:b6:f6:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:9E:54:D5:A8:AC:7A:73:00:77:24:27:AC:66:FA:39:E1:C7:D5
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F977286C0A9011EAB456DA6DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.160.0/21
Signature Algorithm: sha256WithRSAEncryption
87:76:8e:57:f0:ab:14:d1:c2:1c:b1:cc:8a:4f:8a:34:4a:7f:
a1:ed:1d:15:e9:e0:69:4d:92:a6:4b:99:6f:5d:c9:19:1d:66:
13:c4:8f:6c:7f:63:d3:d1:b8:56:fc:3f:6a:cf:d8:76:8b:4a:
21:b0:5a:59:7b:05:2e:55:ab:b8:92:59:18:5e:14:a4:75:ad:
fc:ea:52:3b:0a:df:0a:6f:b3:a6:fb:49:e2:ef:11:de:52:be:
e9:03:79:80:b0:65:cc:00:4d:06:6e:8a:65:df:85:f4:bb:e7:
e9:10:62:87:a7:c1:9a:a1:1e:8d:63:9b:df:c6:ac:a6:4c:a4:
aa:c0:0a:1d:d1:8f:8a:c4:c5:18:43:d6:57:cd:5f:e8:15:97:
b8:73:66:0c:a6:cf:22:fe:09:21:98:36:1d:d9:e1:57:fa:24:
d1:04:6f:84:2a:54:31:f8:0c:0e:b9:db:3e:2a:43:bb:26:50:
06:72:34:17:4a:4f:79:07:53:9f:a2:55:98:f9:ac:ba:b4:b9:
b2:a8:97:a4:7c:a9:7d:a7:96:cc:35:d4:40:c6:a8:27:93:86:
0d:99:da:33:fc:3e:4c:94:37:41:b4:47:15:4f:51:dc:73:ea:
da:3d:04:59:42:b8:c6:ea:56:9a:31:b1:b1:44:de:00:a3:36:
58:e1:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org