Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/02637176DDC211E88D286E4DF8AEA228.roa
File: 02637176DDC211E88D286E4DF8AEA228.roa (raw, json)
Hash identifier: r18K2LBKR3Ve2lxrI/U2/pWyaLJWaOZ135cghXKJBpc=
Subject key identifier: 4E:67:30:B9:94:FE:EE:57:C9:90:7C:DC:67:03:A3:98:75:9A:20:6F
Certificate issuer: /CN=F36E1839AR/serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
Certificate serial: 015F
Authority key identifier: 31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A
Authority info access: rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/02637176DDC211E88D286E4DF8AEA228.roa
Signing time: Thu 01 Nov 2018 10:36:38 +0000
ROA not before: Thu 01 Nov 2018 10:36:16 +0000
ROA not after: Mon 01 Nov 2038 10:36:16 +0000
asID: 328112
IP address blocks: 45.220.56.0/21 maxlen: 24
156.0.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1839AR/serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
Validity
Not Before: Nov 1 10:36:16 2018 GMT
Not After : Nov 1 10:36:16 2038 GMT
Subject: CN=5bdad735-dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:88:34:fa:57:17:ae:d1:c4:d8:49:bb:99:
d2:85:6a:cc:c7:04:22:c1:5f:0c:98:1c:ae:60:d6:
4e:17:25:1e:8c:3c:a4:8c:33:41:95:81:43:f2:d5:
c5:46:d6:ce:99:24:d6:fe:1b:6c:5c:ff:e3:74:88:
37:3d:27:52:ca:df:ea:e0:d2:e8:99:85:d7:03:c9:
c5:e5:d5:00:43:53:13:2d:07:ed:28:de:34:82:1b:
0a:90:7f:14:30:10:55:66:b6:c2:aa:4f:4f:f5:10:
e0:dd:cb:64:18:e2:8a:c5:89:88:1f:c8:fb:08:bb:
5e:66:da:7f:46:e6:f3:07:8c:cf:cf:29:de:5a:31:
28:de:56:14:62:b3:63:14:5e:04:c5:17:63:8a:dc:
92:32:26:33:f2:c0:c2:48:f4:16:dc:0f:6b:26:d4:
b0:72:fa:76:1b:df:b4:d5:dc:95:19:2d:66:da:92:
a7:1a:f7:8a:70:95:36:c3:5c:76:0f:1e:fe:73:8b:
92:d5:d5:85:7b:f5:6d:21:a6:53:d8:78:0f:2a:6c:
16:7e:88:29:f2:ae:cb:d2:62:d9:9e:e9:7f:ca:57:
a3:4e:f8:94:20:ca:c5:6b:74:68:50:f5:11:66:e6:
94:a3:77:e4:61:2e:41:2a:13:cd:79:2f:c5:8f:ed:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:30:B9:94:FE:EE:57:C9:90:7C:DC:67:03:A3:98:75:9A:20:6F
X509v3 Authority Key Identifier:
keyid:31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/02637176DDC211E88D286E4DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
45.220.56.0/21
156.0.160.0/19
Signature Algorithm: sha256WithRSAEncryption
56:8d:80:b3:39:43:19:91:c7:4c:88:82:b0:13:07:46:fa:4a:
8b:0c:15:cf:60:e3:1b:ba:22:ee:64:93:40:63:94:e5:04:8f:
78:c1:a9:a9:51:31:42:a0:1e:43:c8:f0:44:bc:62:98:55:ec:
7d:c8:41:04:d8:18:3c:6b:99:37:b8:aa:07:88:cc:87:35:4c:
36:be:b1:2c:f3:e6:1a:6d:91:d4:f8:28:cb:4c:44:78:3e:de:
bb:c3:f3:4d:87:98:8d:00:26:f6:ed:12:88:a5:9e:88:ea:c1:
c8:fb:92:e7:03:0c:23:95:ab:aa:be:a7:a9:97:33:73:e5:a9:
2a:d8:32:c7:f8:e9:6e:e1:5e:1e:67:71:b1:d0:e0:46:21:9a:
c8:a1:18:18:7d:f2:d5:5b:cf:b9:3b:16:77:32:ff:a0:9a:d2:
1a:33:7d:2d:0e:29:5e:ce:20:b2:b2:4a:b5:65:ad:a5:b1:ed:
09:3d:9d:74:8f:70:8a:c6:b4:cf:ab:cf:2a:40:5c:4f:d3:a0:
e5:ac:72:48:8a:c4:dd:a7:81:ba:16:ed:72:76:31:64:db:2d:
38:4e:27:50:36:4f:87:90:0d:6d:7a:6a:65:e2:2b:60:61:ce:
b0:26:55:52:4c:10:ad:32:2d:9a:49:cc:55:c9:a3:0a:10:b4:
70:74:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:39 2024 by rpki-client on console-fra.rpki-client.org