Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8171B472A7E311EF83606945762E951A.roa
File: 8171B472A7E311EF83606945762E951A.roa (raw, json)
Hash identifier: ztgBDruFDtnW8ssYdc2FQedH8mLkNd/jN0BjEzSQVXA=
Subject key identifier: 97:34:90:35:BE:A4:4B:41:36:A2:6A:4F:75:73:9E:3D:78:1E:D0:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D746
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8171B472A7E311EF83606945762E951A.roa
Signing time: Thu 21 Nov 2024 08:35:04 +0000
ROA not before: Sat 30 Nov 2024 08:35:01 +0000
ROA not after: Sat 30 Nov 2024 08:35:01 +0000
asID: 137443
IP address blocks: 45.192.172.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55110 (0xd746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:35:01 2024 GMT
Not After : Nov 30 08:35:01 2024 GMT
Subject: CN=673ef0b8-81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:24:30:83:c5:30:f2:1c:a3:31:4e:c8:dc:
c8:e2:ee:a0:02:65:af:f0:0d:c0:a5:d6:71:3a:f2:
24:a4:f5:9a:05:73:ee:50:17:83:df:08:6d:33:06:
77:a1:14:a0:36:8a:38:79:2f:d0:2b:96:62:65:92:
a6:d6:a2:03:bd:7f:20:7f:86:7c:64:31:95:97:6e:
3f:e1:8d:33:0b:49:2b:e2:71:ab:54:09:25:70:b5:
34:ee:f8:ab:66:56:3e:4f:6d:0a:66:c1:39:b6:25:
4d:ef:2d:62:33:f4:44:cd:33:43:81:e1:c7:f4:4c:
65:ab:45:ba:31:48:dd:23:1d:e9:ee:25:f1:15:cb:
77:8a:06:41:19:3f:2e:67:9c:3f:c9:3c:96:6e:86:
a1:7d:6d:4c:ff:41:c9:56:72:60:97:89:f9:8b:87:
d9:9f:38:1b:7a:47:38:c2:37:07:ca:59:9c:df:8f:
7c:e0:d0:9c:05:df:d1:2a:63:92:70:11:4c:37:03:
ad:ae:ec:5a:fb:a1:61:a9:12:fb:62:f6:f5:37:d1:
26:6a:89:ae:27:97:ce:0d:b0:a7:a9:ff:1f:9f:13:
a1:21:11:e5:aa:6b:85:64:55:01:f3:2a:2f:83:6f:
f6:de:ea:a3:af:b2:b5:a7:41:39:8e:97:34:b6:9c:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:90:35:BE:A4:4B:41:36:A2:6A:4F:75:73:9E:3D:78:1E:D0:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8171B472A7E311EF83606945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:e2:a4:80:c4:37:58:52:fa:b7:f2:c5:cf:d4:89:f1:dd:c7:
e2:b6:31:71:7f:af:11:5e:20:50:8d:8c:97:db:f1:09:cb:ae:
d4:75:68:7b:d9:d9:8b:e5:79:2c:c1:f5:e1:9f:6c:06:da:75:
99:1e:d6:46:8a:35:02:6a:6c:c1:32:3e:1f:ac:89:ea:91:b7:
c6:bb:33:9a:74:6f:75:c9:d2:7a:59:b1:16:13:d3:a9:33:9a:
d0:1e:16:ff:ab:93:39:5f:77:45:6f:4e:41:a5:e3:e2:cd:9a:
8c:79:fc:3c:4b:c7:71:0e:8e:61:c2:eb:ce:50:c3:12:51:64:
3e:b2:97:b3:3a:39:16:9e:9c:ac:16:68:40:12:9c:37:b7:7f:
5b:83:b3:46:56:c4:1f:9f:df:33:38:1e:ea:24:35:6a:c3:12:
13:8c:fc:e9:a5:db:81:40:95:38:5f:f4:7f:11:cb:6d:de:0e:
ff:c9:dc:7e:ac:5d:15:60:08:60:b7:98:b8:9b:b3:9d:b5:a8:
c9:53:c4:4e:af:10:2e:a2:1c:66:9e:2f:c4:bb:7b:a0:2b:aa:
16:ee:5a:3c:4e:4b:0f:cd:b7:8b:92:92:ef:b2:1d:30:4f:09:
0b:71:7d:b9:71:4a:af:1d:5c:14:d5:44:26:98:74:00:d9:a1:
e1:a0:90:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANdGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTMwMDgzNTAxWhcNMjQxMTMwMDgzNTAxWjAYMRYw
FAYDVQQDEw02NzNlZjBiOC04MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsMYkMIPFMPIcozFOyNzI4u6gAmWv8A3ApdZxOvIkpPWaBXPuUBeD3wht
MwZ3oRSgNoo4eS/QK5ZiZZKm1qIDvX8gf4Z8ZDGVl24/4Y0zC0kr4nGrVAklcLU0
7virZlY+T20KZsE5tiVN7y1iM/REzTNDgeHH9Exlq0W6MUjdIx3p7iXxFct3igZB
GT8uZ5w/yTyWboahfW1M/0HJVnJgl4n5i4fZnzgbekc4wjcHylmc34984NCcBd/R
KmOScBFMNwOtruxa+6FhqRL7Yvb1N9EmaomuJ5fODbCnqf8fnxOhIRHlqmuFZFUB
8yovg2/23uqjr7K1p0E5jpc0tpzaewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJc0
kDW+pEtBNqJqT3Vznj14HtCFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTcxQjQ3MkE3RTMxMUVGODM2MDY5NDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcCsMA0GCSqGSIb3DQEBCwUA
A4IBAQAu4qSAxDdYUvq38sXP1Inx3cfitjFxf68RXiBQjYyX2/EJy67UdWh72dmL
5XkswfXhn2wG2nWZHtZGijUCamzBMj4frInqkbfGuzOadG91ydJ6WbEWE9OpM5rQ
Hhb/q5M5X3dFb05BpePizZqMefw8S8dxDo5hwuvOUMMSUWQ+spezOjkWnpysFmhA
Epw3t39bg7NGVsQfn98zOB7qJDVqwxITjPzppduBQJU4X/R/Ectt3g7/ydx+rF0V
YAhgt5i4m7OdtajJU8ROrxAuohxmni/Eu3ugK6oW7lo8TksPzbeLkpLvsh0wTwkL
cX25cUqvHVwU1UQmmHQA2aHhoJCx
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org