Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072A12D4A7E011EF89DE2BB0762E951A.roa
File: 072A12D4A7E011EF89DE2BB0762E951A.roa (raw, json)
Hash identifier: +XJfzFof7MJvz6ZS6CFwZXDa0HhbeR++m0uyd7V08XU=
Subject key identifier: EB:BE:ED:E8:11:13:E9:97:90:05:E9:5F:B5:53:09:C7:71:0F:D5:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072A12D4A7E011EF89DE2BB0762E951A.roa
Signing time: Thu 21 Nov 2024 08:10:11 +0000
ROA not before: Sat 30 Nov 2024 08:10:07 +0000
ROA not after: Sat 30 Nov 2024 08:10:07 +0000
asID: 149014
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69610 (0x10fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 30 08:10:07 2024 GMT
Not After : Nov 30 08:10:07 2024 GMT
Subject: CN=673eeae3-9919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:3d:3e:fe:b5:3f:b5:77:53:7e:2c:7b:dd:
2d:72:5a:72:ba:5f:ff:a7:8a:f1:91:c6:c0:ec:45:
2f:29:63:53:af:a3:1d:fd:89:dd:ac:cd:df:a5:d6:
ca:45:d3:ba:aa:07:dd:85:03:8a:35:43:7c:27:e7:
a1:6c:b6:b8:5c:55:92:41:7e:39:0c:e0:84:81:77:
48:b5:7a:ca:51:f4:11:e1:9a:24:51:78:5a:5b:d0:
19:0b:5c:cb:f0:0c:74:d7:04:aa:bb:84:9b:ff:1a:
96:df:45:c4:b9:0b:81:67:e7:f5:4c:6f:64:fa:69:
a6:2e:f9:ee:26:a7:57:1b:7c:67:df:a1:4d:ea:34:
f5:32:23:68:26:81:9b:80:7a:b3:fd:c4:a1:75:75:
91:76:a2:35:22:dd:1a:28:13:d3:df:85:07:df:61:
c6:e0:87:56:0d:32:9c:e1:9e:f0:7a:58:2d:51:27:
0f:96:07:cc:86:3f:b3:85:1e:14:9f:38:8a:03:c0:
5c:8b:d8:c7:09:71:f9:96:6a:90:95:56:38:ae:c0:
f3:c6:fa:8a:0c:55:c6:25:41:37:87:52:9c:ea:97:
a0:c9:04:39:4e:4b:fc:4c:23:90:5d:74:ae:16:67:
3f:13:7f:8c:7e:a3:3d:35:47:eb:ea:e1:bc:e1:db:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:ED:E8:11:13:E9:97:90:05:E9:5F:B5:53:09:C7:71:0F:D5:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/072A12D4A7E011EF89DE2BB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:e7:48:08:d0:f6:c8:4f:05:50:15:cc:c1:a4:30:a8:60:40:
af:3b:68:ba:7f:0c:6d:4d:9b:1f:db:bc:a1:70:97:20:b5:dc:
81:81:62:a4:39:1a:10:ce:fc:3e:59:57:da:f8:45:6f:95:91:
25:10:8d:0c:9e:1a:eb:2c:a2:73:d1:e7:e3:76:6f:bc:46:4a:
39:ef:2f:e4:c1:b0:f7:47:96:8a:1e:9d:ef:fb:e7:fe:30:21:
cd:e0:2a:d7:d2:60:0f:65:45:e4:cc:ad:e5:78:07:2b:db:ac:
3a:4a:4f:11:07:9a:98:74:e5:f1:ab:c3:30:3a:5e:3f:c5:26:
ff:e6:47:d8:e7:e3:f7:dd:2f:fd:c5:1e:a2:2a:ad:d5:75:52:
92:12:ed:62:2b:d3:fb:7f:90:b2:79:d4:d7:d5:74:f0:74:d9:
c2:52:9d:87:c3:9e:34:fb:f1:1f:49:6e:c5:ae:29:1e:e4:cb:
2e:60:0a:cb:0f:39:62:70:9f:67:00:7b:7f:a7:06:0b:35:f3:
e3:de:fa:8b:ce:73:14:00:60:c7:a6:a7:dc:41:78:42:7d:c8:
a5:3d:14:09:8a:bf:5c:1b:c6:7f:3a:61:6d:d1:14:41:f0:f0:
56:4e:a8:f6:96:46:a7:54:8c:3f:c6:1f:1f:1d:a5:2a:e7:c4:
84:a0:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org