Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B1FE172A7E111EFA43977B6762E951A.roa
File: 2B1FE172A7E111EFA43977B6762E951A.roa (raw, json)
Hash identifier: hxC2KZXIbQo6UmaOX3MPkoEPLjOIBe4b2kxfuGNuvvk=
Subject key identifier: 24:63:23:85:A0:2A:E8:BA:51:5C:DA:B3:37:3B:C1:05:24:A8:78:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D72A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B1FE172A7E111EFA43977B6762E951A.roa
Signing time: Thu 21 Nov 2024 08:18:20 +0000
ROA not before: Sat 30 Nov 2024 08:18:17 +0000
ROA not after: Sat 30 Nov 2024 08:18:17 +0000
asID: 149014
IP address blocks: 45.192.160.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55082 (0xd72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:18:17 2024 GMT
Not After : Nov 30 08:18:17 2024 GMT
Subject: CN=673eeccc-b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:c2:50:eb:ad:e5:7d:5c:1b:fa:0b:02:96:
cf:c4:bc:79:22:65:42:34:85:c6:65:0f:59:e9:b1:
61:f6:8b:99:16:fe:4f:17:99:ab:e9:d6:fd:ea:6f:
55:fb:86:74:11:ca:58:d9:17:9b:2b:84:ae:65:25:
72:49:f6:92:38:6a:f4:40:24:04:be:58:c4:d7:6c:
4f:07:42:70:2b:b3:41:2b:15:1e:a6:37:b0:d3:4b:
0b:57:fc:1b:07:20:89:ce:03:9a:9b:f4:47:a2:2e:
cd:88:2f:81:8c:ed:c7:b5:1f:34:db:1f:e0:6d:12:
74:29:aa:54:64:c9:32:76:d2:bb:2b:f1:89:27:9e:
8b:21:ac:e8:04:2a:2d:ed:86:f3:2b:f2:2b:92:ec:
ee:06:af:ca:af:d4:30:9c:3b:af:4b:2b:a8:3e:56:
3b:49:e7:8f:10:85:30:b3:f7:cd:a1:cc:a5:50:48:
ee:0f:3b:27:cc:51:74:da:8b:aa:bd:a1:f0:fa:37:
48:3f:23:94:d7:83:2f:dc:25:ea:d0:8a:90:06:f8:
7e:9c:84:44:66:2e:b3:d3:be:58:6f:85:f4:af:2d:
7e:6c:13:78:3a:fa:5d:6b:19:69:e5:c7:24:e2:b7:
f4:12:e2:c0:17:7a:f7:91:31:b8:0a:60:1f:2e:4f:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:23:85:A0:2A:E8:BA:51:5C:DA:B3:37:3B:C1:05:24:A8:78:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B1FE172A7E111EFA43977B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d7:d9:7e:90:87:a3:79:ed:91:67:b3:9f:d8:a9:b4:3a:b9:
74:27:95:51:71:5e:91:b3:df:6a:a3:f3:a4:7e:ce:01:fa:0e:
ea:63:e7:b5:9b:d7:20:e6:10:c6:e8:79:5b:65:bf:1e:87:89:
bf:00:1f:ba:ae:af:81:37:d4:c4:73:3d:12:46:c8:84:d5:7a:
03:73:ac:67:16:33:db:d3:da:1d:e3:cb:72:0b:a4:f1:85:70:
4a:87:d3:60:86:60:7b:7a:58:36:55:0d:5f:e1:3a:28:14:8b:
e0:57:d9:1c:61:66:93:b4:7f:45:f0:ba:4e:01:56:de:ea:33:
b1:21:bf:18:6c:9b:98:34:b4:1e:f5:ac:7e:a9:46:14:1b:7f:
24:7b:00:9d:b6:f2:aa:21:d5:2d:a3:39:77:97:33:3c:2a:89:
fc:cc:fe:5c:94:02:c5:69:6f:29:77:5b:f4:29:6f:ee:f8:38:
f2:f5:0e:f6:d8:5c:1f:da:75:3a:15:26:53:95:b4:78:ff:dd:
8e:c2:9f:4d:e6:a0:ed:db:4c:a5:46:dd:7d:34:48:c3:03:7f:
6e:98:4d:87:6e:cb:32:5b:1c:6e:64:a4:4d:8f:bf:e6:76:0c:
57:ea:cd:33:86:ca:04:eb:b0:06:77:18:e4:90:97:18:b2:72:
a6:22:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org