Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A2C014A7E411EF9AF4DC4B762E951A.roa
File: 60A2C014A7E411EF9AF4DC4B762E951A.roa (raw, json)
Hash identifier: DrMVHUBNVdAHAii3nmzfAo8uJaTpHpRDkyfTGgkf5do=
Subject key identifier: FA:B3:27:27:A1:0E:48:E0:E5:DB:80:70:26:A6:1D:F2:F9:0C:6C:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D750
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A2C014A7E411EF9AF4DC4B762E951A.roa
Signing time: Thu 21 Nov 2024 08:41:19 +0000
ROA not before: Sat 30 Nov 2024 08:41:15 +0000
ROA not after: Sat 30 Nov 2024 08:41:15 +0000
asID: 137443
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55120 (0xd750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:41:15 2024 GMT
Not After : Nov 30 08:41:15 2024 GMT
Subject: CN=673ef22f-6312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:7d:f5:f8:69:61:f2:2b:be:e9:32:8e:ac:
e3:08:bb:35:53:bd:e3:8b:c0:b9:00:8f:a7:52:72:
39:96:5e:31:42:a1:bf:04:79:bb:02:54:56:d1:76:
76:6b:6d:f1:5b:e0:fe:7e:d6:7a:33:5e:c8:65:09:
6a:13:2a:85:32:2e:a3:e7:e7:94:96:b5:5e:6c:4f:
ad:8f:bb:f7:72:34:21:6c:06:cf:9a:50:1b:94:22:
28:f5:15:2d:65:52:cc:9f:10:b1:ae:cc:12:04:b8:
f6:8f:9c:ac:85:80:aa:89:c7:57:1e:67:f5:46:62:
2b:93:f7:bb:66:94:67:01:f7:13:65:ac:48:6b:42:
bc:ba:9e:cf:97:09:af:c3:49:81:6b:5f:a7:a0:8b:
28:8f:56:26:a1:9c:16:db:e8:a5:17:0d:e3:a4:af:
d9:fb:cb:2f:8d:36:11:38:a8:53:76:da:7f:28:3b:
23:70:7e:b2:ff:5d:53:4f:d0:60:db:69:b5:3f:33:
e7:72:3a:83:f6:ef:aa:26:d5:e5:d8:48:72:ff:ac:
29:31:5c:0e:f3:5c:89:9f:a4:67:0b:71:2a:5c:dd:
46:b0:6e:70:56:b9:0c:44:0d:58:77:bd:44:e1:3e:
4b:2d:8e:b8:f3:9b:c3:e1:cd:e5:6d:79:b1:55:b2:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:27:27:A1:0E:48:E0:E5:DB:80:70:26:A6:1D:F2:F9:0C:6C:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60A2C014A7E411EF9AF4DC4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
87:e8:a4:09:de:24:f7:f4:56:5d:5d:ec:7a:a1:f9:e9:55:54:
10:bc:e2:09:43:b5:3b:5e:a7:1d:e3:6c:cb:71:57:fe:4e:53:
0f:66:29:9e:16:b3:04:16:88:cb:8c:2b:ad:6f:9e:7d:64:03:
be:3c:ef:8b:30:a0:1b:2e:de:d8:c3:99:3e:1f:f3:aa:93:fa:
1c:e9:0a:63:4f:1b:d9:20:26:69:a8:f8:50:7b:df:ab:c5:f2:
bc:92:ca:91:db:89:6a:48:3c:18:d6:d6:77:87:7c:76:e7:65:
02:a2:69:09:e9:73:92:a4:9c:a4:dd:a7:9f:c8:92:ca:e1:84:
2f:25:00:f5:1a:79:af:e3:f9:95:0d:a2:05:1f:df:8a:9b:02:
d3:96:16:1d:6a:38:a1:a3:56:9a:10:50:9f:97:ae:9c:90:24:
66:9c:d2:62:a7:83:c7:2a:6c:f9:b0:e7:6c:b0:8f:93:b3:eb:
e3:ca:da:a2:42:ac:1c:15:87:9d:28:1d:0a:25:ae:87:03:e6:
f8:24:c3:6f:6f:f7:ab:be:19:fa:b7:c2:bc:2d:01:c5:38:4f:
65:ee:dd:40:d7:37:9b:6f:59:c1:6f:88:12:af:75:c3:5b:04:
35:58:b8:09:9a:81:54:ce:6f:32:b8:ed:df:17:1b:3a:c7:0c:
5c:aa:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org