Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C93D76A7E611EFB2EA8D56762E951A.roa
File: 44C93D76A7E611EFB2EA8D56762E951A.roa (raw, json)
Hash identifier: 5ChS8DhTU/35t5KaknNV/Ox0qMv8KCbjVJU/0IOhHBg=
Subject key identifier: 88:F4:D1:AB:8F:46:B3:9A:D2:0C:55:36:F2:7C:D3:28:29:EE:81:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D75E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C93D76A7E611EFB2EA8D56762E951A.roa
Signing time: Thu 21 Nov 2024 08:54:51 +0000
ROA not before: Sat 30 Nov 2024 08:54:47 +0000
ROA not after: Sat 30 Nov 2024 08:54:47 +0000
asID: 54467
IP address blocks: 45.192.64.0/19 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55134 (0xd75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:54:47 2024 GMT
Not After : Nov 30 08:54:47 2024 GMT
Subject: CN=673ef55b-f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:4e:38:ed:db:d5:7e:47:96:81:b6:8c:4e:
d8:fa:a7:2f:8c:30:7e:5a:ab:88:e5:0c:86:c4:3f:
0f:4f:51:ac:23:c9:4f:3a:f3:e2:1c:d6:ef:7b:bf:
c5:e0:48:a4:ff:1c:5f:99:ca:77:ce:c0:b1:c7:a4:
70:d0:88:0e:92:c5:f0:1a:56:29:e6:85:e5:be:ea:
8f:0d:63:c6:c1:b2:64:aa:5f:5b:68:57:f5:f1:06:
d5:0e:b7:ad:5a:35:f8:9e:1b:42:8e:ae:5c:d6:de:
62:5e:c6:3c:98:8c:fc:4f:39:9a:02:cb:64:f3:ce:
74:90:03:43:3e:5a:af:b7:39:54:33:4f:39:f0:5a:
1e:4a:de:e0:bb:1f:e4:c2:6b:96:49:ac:b3:05:f2:
cb:56:21:ad:5a:fe:fc:9a:95:2f:43:81:7f:ba:3d:
6e:52:43:56:68:d1:4c:b7:8f:72:9a:97:1e:74:9a:
f0:24:60:05:27:08:3e:e5:db:4f:47:e4:30:47:3a:
de:a9:f9:d7:60:10:41:db:15:62:a2:e6:e7:2b:47:
dc:7c:7c:58:22:e9:05:e3:55:52:dd:8a:93:ba:58:
de:7b:b2:57:ab:dd:88:9d:d6:3d:ee:b5:1b:d4:a1:
7a:99:50:8b:03:9b:c5:b5:59:47:30:bb:e1:8e:99:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:D1:AB:8F:46:B3:9A:D2:0C:55:36:F2:7C:D3:28:29:EE:81:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C93D76A7E611EFB2EA8D56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
Signature Algorithm: sha256WithRSAEncryption
09:08:0e:b8:8a:c0:29:eb:86:cf:da:27:c0:ce:7e:04:d0:a3:
cf:cb:b8:9f:eb:3f:69:7d:82:1e:c0:9b:1a:87:6f:ca:99:44:
a0:c2:20:c7:0c:5c:c5:54:7d:92:09:56:04:fd:55:e7:87:87:
5f:f1:de:c2:d4:73:a9:f9:f5:41:b9:51:43:52:8e:f7:71:e2:
9b:aa:d3:7f:f4:0d:f6:77:75:94:d0:04:23:1a:a0:d5:6e:10:
20:a8:10:cc:80:30:91:66:a7:80:fb:64:bc:fe:a1:7d:37:28:
5e:77:fa:61:f8:e6:20:00:f1:07:0d:66:77:ae:b9:ae:e9:fb:
e3:ba:73:00:df:3e:d8:5d:6a:79:77:ee:d4:17:e9:eb:34:da:
82:7e:bd:ad:84:ba:d6:d0:46:92:43:c3:95:a8:d6:41:92:b0:
6d:78:dd:a8:6f:44:5b:be:c9:86:89:7e:e7:24:35:dc:9b:f4:
b9:a4:85:2b:6e:29:12:5c:a1:7b:4e:20:ee:0a:cb:3a:76:fc:
a6:73:ea:7d:37:94:d6:57:26:69:7d:9f:84:02:aa:6b:52:15:
72:1d:cc:a1:bc:94:ba:c5:38:09:ef:20:18:4b:c1:22:ea:44:
d8:2d:2f:b6:42:ee:e4:91:61:c7:c1:62:cb:39:c4:55:d3:6e:
d2:aa:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org