Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017380F4A7E111EF901E9DB4762E951A.roa
File: 017380F4A7E111EF901E9DB4762E951A.roa (raw, json)
Hash identifier: iqfdcy2Wvuok3T7+mcEXUIhiwzOi2MRwC9v93YA+2oY=
Subject key identifier: A9:C9:07:3E:EC:99:48:31:85:AA:42:3A:FC:A8:38:C7:96:02:82:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017380F4A7E111EF901E9DB4762E951A.roa
Signing time: Thu 21 Nov 2024 08:17:11 +0000
ROA not before: Sat 30 Nov 2024 08:17:07 +0000
ROA not after: Sat 30 Nov 2024 08:17:07 +0000
asID: 149014
IP address blocks: 45.192.172.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55080 (0xd728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:17:07 2024 GMT
Not After : Nov 30 08:17:07 2024 GMT
Subject: CN=673eec86-c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:63:c0:15:dd:94:cd:de:e4:9d:a7:d1:54:
40:c4:b1:38:96:16:fd:89:bb:5d:e8:db:5f:c7:95:
14:98:03:c5:c3:98:e7:d2:9b:b8:dd:ae:25:2d:a1:
79:eb:01:36:54:24:c6:57:ae:af:15:0a:2b:9e:3f:
56:ce:f1:ac:5c:d7:59:89:31:42:f4:ea:d5:dc:9a:
02:cc:58:fc:0b:d0:7a:7a:47:35:62:84:70:eb:40:
92:d1:29:09:c4:78:96:ef:e4:00:6e:f8:97:1e:63:
fd:a6:0a:8b:10:2f:92:cd:4b:bc:30:51:98:d9:45:
88:d6:34:b6:de:7c:ca:90:90:aa:64:e1:bc:df:7d:
cc:82:de:c2:92:eb:1e:88:3f:15:86:e4:0c:72:5d:
78:84:88:8b:8a:be:83:c9:df:79:f9:88:82:97:eb:
b1:36:3d:ff:ad:d5:c9:bc:e0:43:e7:9b:01:e1:bb:
ba:29:c3:9d:8e:3c:ce:1f:2e:88:bf:61:79:af:ed:
f1:d3:4f:ef:a2:37:9a:ab:92:62:eb:32:5e:a7:7d:
a3:4a:0d:0e:8e:95:0d:18:03:28:7f:7d:66:a2:67:
f5:52:65:aa:19:73:06:cb:9c:15:ae:8b:38:5a:6f:
5e:f7:e1:7d:0a:4f:93:3d:18:59:5f:0d:9a:c7:d6:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:07:3E:EC:99:48:31:85:AA:42:3A:FC:A8:38:C7:96:02:82:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017380F4A7E111EF901E9DB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
44:b5:ed:17:24:5a:a3:e5:e6:86:2c:78:58:11:31:3b:86:37:
16:31:31:09:ba:a7:b2:a3:f6:c4:ae:8e:ce:d4:32:60:f5:52:
47:81:08:f1:5b:9e:f7:09:ee:c7:fb:97:f1:73:4b:57:5d:f3:
bf:6d:98:d4:7b:25:32:89:73:9e:e5:67:84:c8:a3:6c:be:76:
69:e8:8b:cf:ed:79:5e:c6:db:b7:99:8a:e5:0b:87:c6:cc:87:
7b:b0:bd:19:f7:fe:52:8d:dd:1b:9b:79:81:b2:14:7e:65:55:
af:34:79:e7:6d:ca:7b:d7:e4:77:78:83:9d:9d:6b:99:34:0c:
15:d6:4c:44:d3:d6:c0:5d:73:e0:30:ef:ec:ac:93:96:7d:7e:
83:b7:e0:ea:bd:c5:fd:f8:8e:9d:32:8c:16:87:a6:a3:1d:58:
cb:f5:18:b1:b0:9a:42:f1:9b:0f:7c:12:ad:2c:22:16:cd:00:
9f:45:db:f8:c1:16:3c:a3:95:83:3b:8a:54:07:d2:ed:ed:dd:
63:75:55:16:3a:f6:91:0a:d1:f4:c3:1f:b0:1d:3f:31:dc:49:
04:2e:82:1a:20:58:3b:e3:4a:95:0b:7b:01:dd:f0:db:23:cc:
77:16:ee:c5:4a:81:12:93:e9:f7:f0:e1:79:6d:e6:28:09:41:
2e:e1:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org