Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50484F8A7DF11EF933C9DAD762E951A.roa
File: B50484F8A7DF11EF933C9DAD762E951A.roa (raw, json)
Hash identifier: D+P3q2AKVbmvvqjXMg4T87xHn7MZockarS8bc9684Qg=
Subject key identifier: F4:4C:11:85:10:CA:EB:DA:62:51:D9:9E:5B:80:81:FE:73:AC:66:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50484F8A7DF11EF933C9DAD762E951A.roa
Signing time: Thu 21 Nov 2024 08:07:53 +0000
ROA not before: Sat 30 Nov 2024 08:07:49 +0000
ROA not after: Sat 30 Nov 2024 08:07:49 +0000
asID: 149014
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69606 (0x10fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 30 08:07:49 2024 GMT
Not After : Nov 30 08:07:49 2024 GMT
Subject: CN=673eea59-a82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:08:04:5a:36:2e:72:9a:0f:5f:00:a5:78:74:
d9:2b:b5:0c:d2:d0:46:68:01:ca:80:42:9b:fe:df:
7c:88:38:14:aa:84:b9:fa:f7:7d:c3:53:2f:0a:e8:
2a:e2:a5:41:8b:7a:80:86:93:d4:2c:49:d4:58:e2:
49:f5:e7:64:ce:9a:91:eb:78:59:31:e8:1d:a0:22:
d8:24:80:b7:b0:8b:76:9c:d0:82:ba:b7:bb:d1:07:
2b:7f:67:84:30:d8:77:0b:4f:56:5d:77:2f:ac:da:
38:08:7c:cb:db:1f:04:8b:dc:5e:08:d8:14:02:48:
39:4d:cc:61:ad:a2:93:1f:98:c7:5f:66:e6:0d:63:
d9:55:16:cb:5c:19:74:d2:1d:82:61:91:21:ad:40:
bc:18:8a:ad:9b:a4:b3:94:8b:5d:27:6b:66:29:9d:
1e:d4:9c:18:2c:15:4b:4c:1d:3b:5f:2e:09:ec:ac:
9d:49:4a:3c:73:ee:0e:d9:6c:a1:4b:38:e5:0f:a6:
92:50:3d:44:58:17:a6:0b:d7:2b:66:90:fd:b0:17:
66:c6:dd:3c:67:b6:ec:f6:e3:b9:f6:38:3d:84:fa:
50:c2:c9:4b:fc:3d:7d:86:ca:63:8c:92:c6:2b:16:
d6:54:b4:44:25:f1:08:84:96:21:70:58:d4:21:d2:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:11:85:10:CA:EB:DA:62:51:D9:9E:5B:80:81:FE:73:AC:66:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50484F8A7DF11EF933C9DAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c6:47:2f:d5:6e:f2:c2:80:29:01:ac:2e:d2:a8:7f:4b:34:
42:7a:b4:11:5d:d6:26:57:55:15:50:ec:4b:97:c7:11:ed:3a:
24:dc:69:20:b9:4b:67:15:55:7b:fc:8e:8e:46:78:00:47:ce:
07:c3:27:37:02:0a:5d:2d:91:8b:84:fa:b0:fb:74:42:85:fa:
5b:88:35:f7:bb:bb:7e:55:f0:72:f9:63:95:a7:9d:fd:fc:37:
24:df:61:e6:b2:1f:65:e5:78:6a:ef:fb:00:01:42:fa:41:09:
5c:ee:13:20:07:5f:87:08:1e:a1:cd:65:e7:2a:83:19:f3:52:
ac:d6:e0:79:6b:10:fc:83:7c:5d:64:70:a7:e6:39:2e:8a:f3:
6d:92:c8:f5:74:b5:0c:cf:f1:7a:19:ed:24:5c:6e:b2:b5:13:
f8:bb:5d:68:ca:83:94:93:76:7b:82:85:5a:7c:d5:18:0f:36:
6c:d3:67:09:66:fd:7a:87:1a:b8:ab:48:ba:08:6d:d0:66:e3:
04:4b:fe:1f:54:bb:98:db:5f:13:76:1c:ed:fb:e3:b2:e0:6d:
e3:53:b1:b5:61:fe:34:a2:0c:44:57:1d:23:6f:f7:ad:fc:d4:
76:84:bd:01:c5:ec:65:40:41:4e:eb:7e:6f:35:be:35:a8:52:
58:6f:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org