Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5740F258A7E311EFA8300045762E951A.roa
File: 5740F258A7E311EFA8300045762E951A.roa (raw, json)
Hash identifier: iZuwxDwTSo1mpgp3ME04qFIpRutKoThZgeTAN6m+FvU=
Subject key identifier: 0D:81:53:9A:E4:8B:99:CA:CC:1B:3F:01:61:6B:63:73:42:20:6A:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D744
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5740F258A7E311EFA8300045762E951A.roa
Signing time: Thu 21 Nov 2024 08:33:53 +0000
ROA not before: Sat 30 Nov 2024 08:33:50 +0000
ROA not after: Sat 30 Nov 2024 08:33:50 +0000
asID: 137443
IP address blocks: 45.192.176.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55108 (0xd744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:33:50 2024 GMT
Not After : Nov 30 08:33:50 2024 GMT
Subject: CN=673ef071-0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:13:42:e3:63:67:2c:87:04:c0:31:62:c8:
f4:fc:24:aa:dd:20:ea:c0:21:44:6b:ec:02:5c:98:
4f:e9:3a:7b:5a:70:70:21:82:f2:57:27:c9:e5:a9:
13:38:76:47:01:e9:29:20:2c:ad:d5:b0:18:a6:17:
7e:ee:b7:fb:13:54:4b:64:e6:b7:ea:e4:40:90:6d:
1c:66:e1:db:57:4d:fc:f8:24:a3:a1:a2:9d:01:ba:
a6:6a:26:a5:33:a3:f0:32:3b:82:0d:61:f9:ca:28:
42:87:eb:26:44:eb:ca:d7:3f:00:83:53:e3:a6:74:
4b:b4:80:92:c5:b3:44:bf:ac:0c:3f:37:28:b5:34:
1c:33:44:07:0a:4f:f0:5a:97:5b:17:1b:49:9d:11:
30:0d:e4:5d:44:8c:04:36:0b:a2:3f:bb:12:0e:4e:
ed:63:ab:94:98:58:da:4e:51:78:54:5f:e6:5c:bb:
9e:84:56:68:f0:92:99:64:af:c0:77:d0:f2:42:b1:
fa:c9:57:72:9d:c0:7b:eb:5d:9f:00:f9:3f:97:2b:
72:b2:71:c8:06:0d:40:5e:7b:2e:33:53:34:db:18:
30:b5:63:cc:49:1c:00:63:19:ef:b9:d3:bf:02:30:
27:ce:72:68:e3:2e:d4:ed:9a:78:9c:fe:f3:35:0c:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:53:9A:E4:8B:99:CA:CC:1B:3F:01:61:6B:63:73:42:20:6A:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5740F258A7E311EFA8300045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d5:03:93:bb:0c:cf:b6:13:15:a7:b1:cb:d4:41:6f:02:e6:
f0:46:ac:bd:5a:42:e9:f3:ea:3d:07:33:6f:56:ab:1a:04:92:
b2:b7:97:54:1a:87:b6:dc:98:f9:54:31:4a:a1:c4:2e:c1:64:
0a:f4:93:4e:1d:43:05:90:3a:d5:a2:53:5d:b2:c1:22:a6:28:
dc:39:7a:3b:f9:6d:c7:a5:91:6d:fa:7d:36:b7:a8:de:1f:76:
65:25:4e:0b:1b:b9:0f:6d:43:08:34:72:9d:a0:9e:69:4d:68:
94:69:ef:36:ae:e6:74:07:8f:d6:3e:ce:79:80:fb:d9:20:40:
4c:a6:0c:2b:1c:72:55:81:69:7f:27:85:10:a0:d5:9c:4d:fe:
a8:85:10:a4:04:44:ba:3f:0f:92:99:ad:9d:27:80:8f:bd:f9:
61:f1:df:b7:8e:af:9b:19:7e:28:3d:f1:bb:96:dc:e7:18:90:
a9:01:11:4d:e2:ee:0b:5f:09:bc:89:5c:15:52:93:56:3a:c7:
aa:8f:6e:6c:b2:41:38:db:53:28:88:ed:0c:da:a2:a1:04:79:
f2:50:7a:65:1a:11:5b:d8:37:14:53:4e:33:5c:e5:2c:85:88:
56:91:ec:2e:48:34:17:6f:9e:4e:98:30:61:5a:00:9e:db:0c:
fa:33:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org