Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0E7F10A7DF11EF9678E8AD762E951A.roa
File: DF0E7F10A7DF11EF9678E8AD762E951A.roa (raw, json)
Hash identifier: HUvm9rLwEvEFp0nPRc4daY0MZ60jPM/O6S8Vlko2gxM=
Subject key identifier: 80:8C:6C:E2:6D:27:0A:B4:68:85:0A:C4:18:29:C8:83:8C:62:C8:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0E7F10A7DF11EF9678E8AD762E951A.roa
Signing time: Thu 21 Nov 2024 08:09:03 +0000
ROA not before: Sat 30 Nov 2024 08:09:00 +0000
ROA not after: Sat 30 Nov 2024 08:09:00 +0000
asID: 149014
IP address blocks: 154.223.180.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69608 (0x10fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 30 08:09:00 2024 GMT
Not After : Nov 30 08:09:00 2024 GMT
Subject: CN=673eea9f-a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:ab:99:f2:38:f5:36:6a:de:8d:1b:cc:15:
29:da:31:d2:02:cc:01:84:4e:ff:90:d3:f0:bd:9f:
60:25:33:77:83:7d:63:92:8f:97:c6:48:5d:e7:4b:
fa:9d:cc:c0:d3:aa:b9:8d:dc:ab:3c:ab:50:bc:22:
f1:5d:51:0c:c1:1b:88:6a:06:bb:9a:98:82:71:99:
c8:08:2c:cd:66:37:1d:b8:f9:c0:13:55:1d:df:9c:
81:9a:62:a0:42:a3:aa:26:54:04:39:c6:83:79:fc:
1e:87:fa:09:20:b8:dd:ed:32:45:6b:4e:b1:a7:18:
01:7a:c1:86:33:cc:e5:67:e3:97:9c:83:50:f5:5d:
88:f9:28:91:e9:81:3c:f3:13:41:f1:f9:2d:24:ee:
17:2e:4f:9d:8d:b9:4a:d4:dc:8d:5e:b2:f1:30:54:
6e:c5:45:c7:df:b6:73:28:75:4a:6f:c5:ef:91:98:
27:e5:3d:6d:c7:fc:ef:35:17:b7:bd:c9:3b:be:58:
18:93:d3:b1:8b:83:a7:7e:0d:1c:57:03:63:a3:7b:
77:2c:d7:10:e4:07:5c:0d:5f:7e:d0:8e:92:0d:9b:
96:aa:52:56:bb:0b:15:66:1d:a7:d0:d3:83:6a:b9:
40:b7:87:f1:b0:66:75:f2:6f:4f:52:53:c4:dd:71:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:6C:E2:6D:27:0A:B4:68:85:0A:C4:18:29:C8:83:8C:62:C8:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0E7F10A7DF11EF9678E8AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:46:8b:3b:51:8b:d0:7e:de:d7:3d:a2:b2:23:33:6d:8c:42:
52:8f:e0:a9:9d:bc:0a:16:d2:64:87:12:7e:98:f4:83:c9:76:
8d:29:8c:4a:86:2c:82:dc:fb:06:62:05:77:f9:81:54:64:95:
18:55:31:cb:38:b4:63:74:7a:2a:0b:87:ab:17:d9:0b:56:0b:
11:d8:68:7b:63:90:4e:c2:fd:f7:ea:15:55:ed:a3:4a:8a:89:
3e:6e:f5:18:c2:7e:a4:12:55:30:1e:b5:0e:8b:50:1d:cc:37:
c0:e8:0a:94:cf:59:85:6e:d0:c4:87:eb:f0:dc:12:19:ab:26:
9a:df:27:c0:b2:ba:07:9c:fe:97:5f:bb:c1:fd:3c:5e:ff:d9:
17:a1:d1:bd:7a:52:e4:76:9e:37:3a:a1:a9:21:b4:75:b5:7a:
5a:ad:74:f7:d8:17:d7:53:ce:f7:ca:0e:45:d8:e9:2f:b6:5f:
77:10:dc:c3:79:1c:85:b8:ea:e3:34:aa:b4:df:64:24:48:e5:
6a:29:be:12:23:d9:13:96:ad:db:8c:9d:b9:21:32:fc:23:42:
24:09:d4:5c:2c:ee:b4:5c:c2:1f:ec:e6:d7:1b:00:d0:90:18:
84:04:bd:49:72:38:59:3d:89:f5:5e:9a:e9:63:8f:24:39:5e:
cf:9a:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:28 2024 by rpki-client on console-fra.rpki-client.org