Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10BD3B24A7DF11EF981C5CA9762E951A.roa
File: 10BD3B24A7DF11EF981C5CA9762E951A.roa (raw, json)
Hash identifier: Be3L1gZk+r3YPbBgGwS8NKR1rc0KrAkB+aWeYwn1n5c=
Subject key identifier: BC:FD:82:33:D9:D5:5D:63:45:5C:E0:AE:77:D4:65:15:07:C4:A0:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D715
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10BD3B24A7DF11EF981C5CA9762E951A.roa
Signing time: Thu 21 Nov 2024 08:03:17 +0000
ROA not before: Sat 30 Nov 2024 08:03:13 +0000
ROA not after: Sat 30 Nov 2024 08:03:13 +0000
asID: 149014
IP address blocks: 156.236.116.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55061 (0xd715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:03:13 2024 GMT
Not After : Nov 30 08:03:13 2024 GMT
Subject: CN=673ee945-5151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:ac:fa:a7:51:76:84:e1:4b:91:b0:23:cf:
0d:a6:9d:ae:3c:ec:7b:fc:ed:8a:0a:93:b2:f1:76:
00:34:69:de:af:82:cd:09:a6:21:29:da:09:48:27:
d5:f6:56:da:cb:d8:47:04:ac:07:d8:6a:6b:ba:fc:
55:9f:9d:7c:3c:05:cf:4b:f8:c4:bb:60:a0:0c:7d:
51:d8:be:0c:28:b6:10:57:9b:66:20:ee:4c:52:f4:
6f:4e:80:90:8c:e0:02:0c:33:68:cb:5a:b2:cb:61:
a2:08:00:39:e2:0b:33:c4:e0:c1:af:cb:c3:a1:eb:
e0:79:bc:17:84:e6:94:57:09:e0:01:0f:d7:f0:61:
d1:1e:2e:33:93:44:ab:27:af:b1:9c:53:5e:c5:c8:
d7:b1:0a:00:dc:00:71:0e:9f:da:66:7f:9d:e4:ad:
94:61:16:47:6e:cc:a1:52:7c:f2:76:e0:a4:aa:51:
8a:c2:e3:c5:2c:d4:c8:f9:5e:3a:18:28:2b:99:3c:
ce:81:62:a0:16:14:9d:40:8b:74:96:f0:d8:ca:ac:
5f:02:e0:48:7e:88:1a:7a:e5:06:a6:84:79:37:83:
bd:e0:1f:14:1e:a6:77:22:11:fc:13:79:4d:6e:b9:
18:42:b4:1b:8d:6f:dd:ef:8c:03:64:9f:13:6f:a6:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:82:33:D9:D5:5D:63:45:5C:E0:AE:77:D4:65:15:07:C4:A0:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10BD3B24A7DF11EF981C5CA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:47:8e:eb:33:44:ad:76:6e:e2:fd:62:d8:7f:b7:d9:d3:c4:
bc:8d:84:bb:b4:42:24:9d:32:ea:70:85:46:62:6c:12:c0:be:
8b:c1:b0:c9:96:ae:25:37:76:71:75:9e:f1:96:7f:8b:b8:42:
2d:03:06:e0:ba:99:56:ce:86:52:fe:20:3d:c5:d0:e1:06:f2:
85:14:b7:b8:0a:69:7f:05:1d:19:1b:03:4f:fe:8a:43:d0:82:
03:70:98:66:d4:a0:01:3d:7f:88:11:d0:cd:f7:f2:d7:2c:4a:
1f:f6:d2:db:94:14:ae:23:0d:37:87:89:7e:68:e0:cd:37:ab:
5c:3b:84:c0:23:60:91:65:89:2b:db:29:29:99:3a:68:0d:71:
7d:12:60:15:89:18:04:6b:11:6a:70:60:cf:00:5c:2a:53:dd:
ca:df:53:a9:fe:08:a5:09:6e:5d:5f:e7:72:af:50:4e:37:b3:
d8:1f:d5:e0:b1:a1:bc:c5:8c:f9:8f:f1:38:02:2c:09:95:ac:
ea:a5:e0:49:f6:08:ee:e0:9e:82:14:46:3a:52:02:41:a8:b5:
04:d7:d7:94:7e:bb:80:9e:7a:8c:af:3a:38:c3:94:7b:f3:3d:
2a:67:22:9a:b8:b1:c2:5c:5b:c2:12:83:5b:10:b3:8b:68:a4:
81:e4:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org