Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6481E6BAA7DF11EFBA15BDAB762E951A.roa
File: 6481E6BAA7DF11EFBA15BDAB762E951A.roa (raw, json)
Hash identifier: 5R/9IDL4kq6BzOjCmz5dW6sNswKQCozWjfAYMWBtqgY=
Subject key identifier: 8E:25:0B:EC:A5:04:9F:6B:7F:50:FE:28:F9:7D:43:94:23:38:10:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D719
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6481E6BAA7DF11EFBA15BDAB762E951A.roa
Signing time: Thu 21 Nov 2024 08:05:38 +0000
ROA not before: Sat 30 Nov 2024 08:05:34 +0000
ROA not after: Sat 30 Nov 2024 08:05:34 +0000
asID: 149014
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55065 (0xd719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:05:34 2024 GMT
Not After : Nov 30 08:05:34 2024 GMT
Subject: CN=673ee9d2-8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:be:0b:c1:a3:1e:f8:05:00:5b:2f:98:82:79:
12:66:d0:17:c6:d2:42:79:d0:7f:79:f1:9f:49:48:
f3:8b:33:5e:f7:48:7b:6f:05:38:c7:36:c4:ba:65:
7a:b3:47:58:ab:b7:01:35:b1:48:28:58:9d:96:a4:
12:53:cf:64:1f:9a:a2:8e:d7:36:5f:99:d8:91:c8:
9c:64:a3:28:76:af:d0:b4:9a:d0:2e:4c:5d:2b:cc:
99:48:8b:65:b3:3b:43:2d:b1:c1:92:0a:ff:98:23:
91:a7:72:12:0e:32:3e:65:31:7e:57:b0:f7:79:9e:
33:56:98:32:ef:ed:3d:29:f7:5f:98:01:93:95:5d:
ea:17:5e:2d:1c:80:ee:34:c5:1f:ec:0e:0b:86:a1:
98:86:7d:41:ac:5f:12:59:1f:de:4d:0c:c0:8e:9e:
48:d6:7a:1c:ef:47:d3:b6:e7:aa:19:5e:f7:e5:43:
b1:56:10:85:37:d2:7c:8e:8a:35:b3:57:5f:b7:70:
65:74:55:2c:30:94:1c:b6:68:67:a6:5a:48:58:b3:
10:03:1f:6d:0e:48:c1:a9:08:50:cd:69:0c:94:40:
9a:94:26:e5:ef:d8:dd:51:50:8c:33:b7:d7:c3:74:
23:3f:59:db:d0:f6:6f:c5:e4:b3:59:c8:f8:ce:cd:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:0B:EC:A5:04:9F:6B:7F:50:FE:28:F9:7D:43:94:23:38:10:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6481E6BAA7DF11EFBA15BDAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:ad:17:72:f7:35:bc:16:f4:f7:c0:c9:55:01:df:29:d8:78:
f1:2d:13:7c:7b:77:44:2d:82:f7:9d:19:c2:a0:62:06:13:7d:
67:c7:0d:bb:ea:93:3b:fb:38:20:c9:ca:49:da:58:32:34:59:
fd:8b:3b:27:23:25:4c:7d:86:29:f3:8e:2a:f9:e1:f2:67:12:
5a:10:fc:52:3c:76:a6:1b:fe:95:ef:32:ff:2d:52:22:b2:ad:
14:c3:79:2f:02:04:87:35:5f:89:b9:c3:c2:18:a0:05:52:e4:
ed:e8:0c:8f:ae:41:2f:65:e6:0c:6f:55:18:f8:be:98:87:e4:
c9:50:4b:9f:a4:0b:1e:97:9b:34:67:12:7f:cd:b5:dc:2a:00:
d8:d3:ab:55:f9:eb:64:40:4e:73:b7:46:00:88:80:32:f6:d0:
26:ed:57:85:6e:ff:6d:22:d4:84:03:b9:d4:dc:0c:3b:a8:f4:
aa:d4:9a:3a:a7:b1:81:f3:b9:ae:c3:fe:bb:04:7c:2c:ab:30:
2b:83:c3:be:e3:55:e3:21:37:fa:61:72:07:39:e0:89:44:75:
aa:cf:12:f9:4c:21:bd:4b:e9:0a:d4:f0:46:e9:81:4b:49:87:
fd:ac:18:18:fd:68:2d:18:08:21:b3:ae:b9:25:65:cb:1b:d1:
a1:49:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:32 2024 by rpki-client on console-fra.rpki-client.org