Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12FFC00EA7E511EFBB8C2250762E951A.roa
File: 12FFC00EA7E511EFBB8C2250762E951A.roa (raw, json)
Hash identifier: dQHZvr/hB23yyc2AAMJS/7JnRTVmhK2qGUQ6dW1bQYU=
Subject key identifier: 53:52:CC:F3:44:A7:63:09:1B:AC:53:9D:DB:9E:1E:B6:FD:A4:2B:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12FFC00EA7E511EFBB8C2250762E951A.roa
Signing time: Thu 21 Nov 2024 08:46:18 +0000
ROA not before: Sat 30 Nov 2024 08:46:14 +0000
ROA not after: Sat 30 Nov 2024 08:46:14 +0000
asID: 137443
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69616 (0x10ff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 30 08:46:14 2024 GMT
Not After : Nov 30 08:46:14 2024 GMT
Subject: CN=673ef35a-76c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:e2:20:41:d2:bb:b4:2c:db:0c:17:6a:f3:
a3:a0:f7:55:0d:f2:98:73:8c:30:12:5d:70:02:d9:
78:28:43:3c:f6:05:60:7b:c9:10:dd:86:24:38:17:
80:9e:68:14:a2:00:37:22:fe:af:93:cb:60:72:f0:
ad:d3:69:76:25:64:31:1d:00:b8:cd:d2:14:42:27:
39:9d:97:26:fe:38:06:69:47:8a:69:63:df:2c:1d:
45:76:72:03:32:1a:43:26:47:df:e3:cd:63:b4:22:
98:ed:d8:2c:f9:e1:65:4b:07:bb:8b:f7:f6:c6:5e:
ac:43:0a:1f:62:f2:29:19:ac:c4:11:2b:78:50:db:
88:cb:c4:a1:8c:b5:b2:2d:7c:dd:1a:f3:d3:a2:33:
9e:17:b8:86:56:07:5d:e5:d9:4e:5d:0a:71:8c:e7:
54:39:7d:4a:51:09:e5:cf:c0:b6:4c:4d:31:a4:14:
2d:53:93:a4:26:e7:95:20:2d:49:de:19:34:cd:a0:
73:b6:5b:c0:7c:33:8c:c9:c1:06:14:ab:43:9e:d6:
5d:d2:46:3a:fb:a6:8c:18:8f:24:e7:58:88:eb:c0:
8c:87:4f:08:3c:fa:c9:df:d0:64:10:47:a7:3d:04:
d3:8b:cd:5a:8d:11:c3:dc:90:7f:ca:77:08:65:96:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:CC:F3:44:A7:63:09:1B:AC:53:9D:DB:9E:1E:B6:FD:A4:2B:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12FFC00EA7E511EFBB8C2250762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
04:84:4b:fa:de:ef:ef:85:1d:97:7a:60:d2:25:9b:26:b6:16:
dc:a8:8d:cc:d0:61:fc:b5:98:de:56:83:61:b1:66:1d:a1:26:
28:96:70:6a:b2:bc:d5:d3:07:7d:a0:1e:ce:74:60:fc:19:e7:
2c:1a:f7:ea:18:5f:c9:a0:ee:7c:4d:f4:1a:6e:82:c5:14:5d:
9d:d0:73:6c:64:c9:d4:d3:94:f2:bb:d9:8c:ed:d3:69:78:ac:
49:fb:f3:49:16:9e:43:4a:c9:8f:15:1b:92:4a:09:b0:55:6b:
bd:79:f3:a5:ef:47:b0:dd:bc:7f:8c:24:d0:db:53:4d:8e:0c:
59:38:cd:ab:57:40:d7:eb:7c:83:db:ea:93:45:1b:2b:22:b4:
96:45:a9:7f:83:3c:2d:26:57:a8:d6:70:fc:32:31:c1:fb:0c:
ab:1f:e3:a6:5c:6c:e8:52:d1:16:85:a4:d3:a2:89:6a:11:c9:
aa:30:9a:c6:5a:e8:16:a3:59:8c:fc:4c:16:d8:58:6c:e5:27:
8b:66:96:b2:a2:e6:b4:36:57:2c:a9:4c:0d:9e:31:f3:93:7a:
18:df:18:00:8b:a6:60:09:75:24:44:23:24:c6:78:6a:43:86:
d1:b9:13:6c:38:f2:fa:a3:3c:3f:0c:77:3f:30:b2:29:f9:32:
17:5a:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org