Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0B3500A7E411EF95DBCA4D762E951A.roa
File: BA0B3500A7E411EF95DBCA4D762E951A.roa (raw, json)
Hash identifier: wWKyLvXd7oru5rStZOyWgEVABJNmSjJx1NicnDSQo3Q=
Subject key identifier: 79:8B:1B:AA:82:13:C2:F1:78:AD:DA:D9:38:18:33:13:CA:19:33:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0B3500A7E411EF95DBCA4D762E951A.roa
Signing time: Thu 21 Nov 2024 08:43:49 +0000
ROA not before: Sat 30 Nov 2024 08:43:45 +0000
ROA not after: Sat 30 Nov 2024 08:43:45 +0000
asID: 137443
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69612 (0x10fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 30 08:43:45 2024 GMT
Not After : Nov 30 08:43:45 2024 GMT
Subject: CN=673ef2c5-6aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:94:3d:37:85:dd:e0:f2:d7:35:3b:de:2c:
c8:33:dc:bc:61:00:df:ae:d3:9f:31:db:dd:a0:30:
9d:68:de:d9:62:39:aa:c4:40:61:aa:ec:5f:f6:c8:
61:0f:f1:a6:e6:29:b9:31:fc:ac:af:5a:24:56:43:
01:97:d8:3f:cc:4b:12:a5:15:2d:f5:e6:39:29:ab:
ae:4e:e5:b3:dd:ad:77:97:17:52:cb:15:66:5c:3a:
f1:de:fb:2c:6c:25:c9:84:d8:cd:47:a1:e6:0d:bc:
6b:9f:dc:54:c0:fb:fa:b7:53:ea:17:e5:66:38:3c:
3f:ef:a8:34:e0:a7:e8:d0:4a:a2:7c:83:8e:2b:d8:
45:93:42:d3:9a:60:56:b1:f2:2b:b3:8c:8f:11:52:
0a:cf:ef:05:bc:84:05:af:bd:3e:2a:7f:d1:62:1a:
a5:3e:48:97:0e:07:63:09:cb:49:a1:68:37:01:fe:
26:11:9d:4c:73:fd:9d:07:70:c3:c4:66:1f:de:38:
c9:bb:35:68:e1:5b:6a:8b:a2:21:8c:b3:36:d2:1d:
ba:93:65:c5:55:f0:09:57:86:c3:d8:c7:7a:32:de:
e2:6c:99:15:2b:5c:8f:bc:a2:56:bd:34:1b:db:c7:
c4:2e:e9:31:23:ee:23:5c:13:ef:96:13:21:bc:3c:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:1B:AA:82:13:C2:F1:78:AD:DA:D9:38:18:33:13:CA:19:33:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0B3500A7E411EF95DBCA4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c8:18:ff:3a:84:10:3d:55:21:a1:de:67:58:e4:63:9e:19:
a6:d3:62:bd:09:b1:5e:79:8e:8e:e3:4a:6e:e4:71:bf:68:3e:
e3:d6:0e:5f:73:35:e5:45:54:0b:b6:e4:07:63:73:e5:18:46:
f2:09:89:50:1e:27:79:b5:48:1f:39:76:8b:7f:04:dd:72:db:
d7:a5:17:5d:8b:fc:06:9c:2c:be:ee:3b:cd:c8:ca:d0:42:bd:
85:1a:17:ce:cf:c2:dd:99:d9:ac:50:1d:35:65:a2:4f:85:01:
b1:7b:e4:84:84:4d:b3:22:69:75:4d:d5:eb:16:ba:92:a4:02:
c1:7b:ad:5f:91:d9:71:05:3d:b6:94:21:09:8d:da:7b:90:9c:
fc:23:f5:c4:0f:de:78:90:db:2d:0b:5c:cc:05:0f:d5:b6:73:
93:90:91:5f:f4:60:03:0a:15:f5:8e:25:17:5c:73:f2:31:20:
ed:00:f0:4c:8a:eb:bf:4c:50:25:85:ab:c6:93:2c:47:4a:ff:
b2:f7:4d:2c:62:9e:6f:9f:65:a6:9a:0c:6f:5f:a2:a6:14:e4:
e2:bf:d3:8c:0d:9c:e8:c2:9a:33:1c:7d:c5:a8:ca:f3:a0:1a:
55:38:f3:70:51:27:ab:7e:3d:d5:e3:89:35:ac:71:e9:ec:71:
4e:d0:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:22 2024 by rpki-client on console-fra.rpki-client.org