Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744F9D2A7E011EF80525CB0762E951A.roa
File: 5744F9D2A7E011EF80525CB0762E951A.roa (raw, json)
Hash identifier: JSEJd5j05g8bf0SIceuFdWAh5iMMjuYU8wNM/NIBWuM=
Subject key identifier: EF:DA:5C:68:15:0B:03:F1:86:64:D2:E2:F1:63:9A:9D:E0:2F:AD:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D720
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744F9D2A7E011EF80525CB0762E951A.roa
Signing time: Thu 21 Nov 2024 08:12:25 +0000
ROA not before: Sat 30 Nov 2024 08:12:21 +0000
ROA not after: Sat 30 Nov 2024 08:12:21 +0000
asID: 149014
IP address blocks: 45.192.184.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55072 (0xd720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:12:21 2024 GMT
Not After : Nov 30 08:12:21 2024 GMT
Subject: CN=673eeb69-f3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:e6:bd:86:20:d3:08:cc:f4:ce:40:bf:9b:
b1:23:f4:1e:77:21:21:32:f8:f2:c0:7b:92:42:8e:
10:2f:1b:ed:cd:7c:4d:0e:19:0c:b0:4f:3c:83:c9:
57:42:b1:94:56:c6:3e:43:d1:29:37:05:98:0a:b3:
29:bd:81:43:96:bd:25:29:39:2d:50:52:39:86:6e:
23:a6:93:bc:9d:a4:5a:6b:e3:78:7e:57:7a:39:fc:
50:b8:1d:1d:0a:e3:c5:bc:6d:d2:b2:cb:f7:2f:61:
c8:a7:29:26:79:52:5f:88:a5:e9:e2:1f:e2:5b:7f:
d3:d8:65:57:5b:6c:bf:c8:9e:af:68:d2:93:ec:15:
00:60:b6:24:52:a3:44:47:67:1d:bd:df:4e:dd:7e:
4f:51:ff:34:f9:be:de:6e:74:4c:fa:03:47:71:e6:
68:ea:82:7d:ff:e3:2e:20:49:5d:8c:8f:44:e6:f3:
da:43:ec:0f:5f:cd:54:af:40:62:cc:be:54:a6:ad:
e7:be:59:db:b0:77:3b:17:ba:ff:fa:1d:d5:6e:c6:
97:00:c3:18:39:07:e4:a5:f5:39:e7:d1:99:2e:ef:
76:55:17:8d:d6:30:58:af:df:a8:73:1a:c5:74:c8:
5b:98:86:a3:af:a9:76:6e:2d:2f:31:84:c4:1e:0f:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:5C:68:15:0B:03:F1:86:64:D2:E2:F1:63:9A:9D:E0:2F:AD:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744F9D2A7E011EF80525CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5c:23:be:ae:36:ef:97:09:46:24:7a:7d:c2:e7:4d:29:43:
b6:72:18:7c:28:66:ce:e0:61:6e:7f:cd:88:50:9f:97:42:5c:
b7:ad:9d:c3:ba:8f:6d:66:17:05:c6:36:07:78:96:b8:77:96:
35:b5:c2:a4:d4:65:91:bd:08:7b:20:e3:70:b0:2c:bd:22:c5:
bc:1e:90:fe:ff:72:58:3b:8b:6c:4e:cb:8d:a0:5f:32:68:d4:
a4:d9:aa:69:73:b6:b1:33:c9:ed:9d:1b:6f:c6:5f:9f:c0:3c:
dd:2f:e5:20:f2:38:ed:3b:bd:f3:35:30:84:a9:77:ca:c0:99:
4e:87:4a:e7:e3:25:a5:1d:93:9d:0a:c2:e3:70:71:13:a2:48:
1a:af:8e:68:28:13:0e:3d:1d:c3:53:0d:ac:7e:96:8b:44:2c:
07:b3:9c:31:8b:42:f6:c2:8e:5e:e5:06:dd:11:95:07:4c:55:
47:44:00:64:e1:d3:1c:96:d5:8f:c4:1e:4a:9d:06:9d:c0:39:
18:14:b6:c4:ec:11:a1:71:a4:94:04:d8:c3:74:18:12:d9:8b:
a8:71:54:c4:7a:a6:5b:0b:6e:cc:81:7c:4d:51:6d:36:3c:8e:
11:f0:a7:2c:c8:f5:c6:ea:2a:5c:f5:00:ef:cf:f9:61:da:82:
b4:19:13:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANcgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTMwMDgxMjIxWhcNMjQxMTMwMDgxMjIxWjAYMRYw
FAYDVQQDEw02NzNlZWI2OS1mM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApP/mvYYg0wjM9M5Av5uxI/QedyEhMvjywHuSQo4QLxvtzXxNDhkMsE88
g8lXQrGUVsY+Q9EpNwWYCrMpvYFDlr0lKTktUFI5hm4jppO8naRaa+N4fld6OfxQ
uB0dCuPFvG3Sssv3L2HIpykmeVJfiKXp4h/iW3/T2GVXW2y/yJ6vaNKT7BUAYLYk
UqNER2cdvd9O3X5PUf80+b7ebnRM+gNHceZo6oJ9/+MuIEldjI9E5vPaQ+wPX81U
r0BizL5Upq3nvlnbsHc7F7r/+h3VbsaXAMMYOQfkpfU559GZLu92VReN1jBYr9+o
cxrFdMhbmIajr6l2bi0vMYTEHg8sEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO/a
XGgVCwPxhmTS4vFjmp3gL62BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzQ0RjlEMkE3RTAxMUVGODA1MjVDQjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcC4MA0GCSqGSIb3DQEBCwUA
A4IBAQADXCO+rjbvlwlGJHp9wudNKUO2chh8KGbO4GFuf82IUJ+XQly3rZ3Duo9t
ZhcFxjYHeJa4d5Y1tcKk1GWRvQh7IONwsCy9IsW8HpD+/3JYO4tsTsuNoF8yaNSk
2appc7axM8ntnRtvxl+fwDzdL+Ug8jjtO73zNTCEqXfKwJlOh0rn4yWlHZOdCsLj
cHETokgar45oKBMOPR3DUw2sfpaLRCwHs5wxi0L2wo5e5QbdEZUHTFVHRABk4dMc
ltWPxB5KnQadwDkYFLbE7BGhcaSUBNjDdBgS2YuocVTEeqZbC27MgXxNUW02PI4R
8KcsyPXG6ipc9QDvz/lh2oK0GRM8
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org