Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/995366BEA7E611EFBF0CCC58762E951A.roa
File: 995366BEA7E611EFBF0CCC58762E951A.roa (raw, json)
Hash identifier: igDBZC5zKv89foaxWBU1noyUkrTg5Zp7+cVXYYkq+AE=
Subject key identifier: 26:3F:63:31:53:2A:74:40:65:9E:11:92:4F:1C:75:D0:94:D1:4D:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D762
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/995366BEA7E611EFBF0CCC58762E951A.roa
Signing time: Thu 21 Nov 2024 08:57:13 +0000
ROA not before: Thu 28 Nov 2024 08:57:09 +0000
ROA not after: Thu 28 Nov 2024 08:57:09 +0000
asID: 214690
IP address blocks: 45.198.4.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55138 (0xd762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 28 08:57:09 2024 GMT
Not After : Nov 28 08:57:09 2024 GMT
Subject: CN=673ef5e9-c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:c6:eb:24:44:4c:12:31:39:8f:5e:0d:34:
c9:de:1b:c8:c3:05:8e:2f:7f:ad:fa:a0:ec:66:eb:
75:b9:3f:9f:dd:07:64:4f:c4:ce:61:d2:5b:2c:ff:
2c:ed:aa:02:61:20:9d:ac:35:df:a7:98:3d:53:2d:
51:5a:18:7e:51:74:a7:d2:11:f4:3d:01:f7:c8:87:
b4:fd:3d:32:65:cb:d8:24:6c:7f:8a:51:f3:06:cf:
ba:4e:99:dd:c6:37:25:47:e5:94:fa:d2:82:fa:34:
07:6d:10:73:ae:0f:1b:a2:15:db:4e:b4:c6:ab:0a:
de:99:89:82:6e:9a:7c:35:8c:00:fb:cc:57:0c:03:
b8:73:5c:d9:aa:cf:a9:43:b6:9b:39:a3:2c:bb:15:
c8:ab:ab:f5:66:9b:48:62:b2:fc:7e:73:ae:a4:aa:
ab:73:2c:48:8c:d3:67:72:b2:45:93:df:6c:cf:fc:
e2:e4:6a:44:82:ca:3d:4e:5d:bf:85:4e:87:60:dd:
dc:1f:8c:1d:7b:f5:eb:51:5e:2f:f3:2b:8e:79:16:
24:5b:5b:a0:ce:74:67:e1:c8:31:34:2c:c7:b6:a3:
e3:1f:06:58:0a:a8:77:cd:47:8a:97:e0:13:e5:f9:
fb:c3:78:e7:49:37:d3:a9:05:e0:33:34:28:1f:ed:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:63:31:53:2A:74:40:65:9E:11:92:4F:1C:75:D0:94:D1:4D:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/995366BEA7E611EFBF0CCC58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e2:bd:8d:31:96:8e:72:ea:40:96:98:0b:1d:15:86:63:98:
cc:ca:e3:9a:c3:03:54:de:d5:22:27:f8:b9:3a:4a:ce:a9:08:
bb:59:e9:1a:c8:df:5f:0d:af:10:9c:dd:0b:56:95:bd:02:45:
de:b8:86:b2:81:79:02:a6:99:94:64:8f:e1:ce:2b:a3:63:74:
4c:45:ef:1f:db:5c:2f:a2:d4:a7:36:b6:2e:a5:d9:85:04:a1:
70:3f:dc:8e:f5:8b:80:d9:20:61:fb:9b:7e:9d:fa:bc:d6:4a:
71:77:80:36:a6:f6:3d:93:f0:fb:01:26:fc:18:a9:2b:1f:26:
df:5e:4d:ff:23:37:89:be:33:b9:28:a8:13:66:f5:45:12:00:
5b:e8:f3:aa:9c:a9:85:68:4b:16:9c:17:f9:4c:bc:86:36:23:
dd:c1:2f:3b:57:5e:ad:4d:ae:64:40:98:5a:fb:b9:40:55:d5:
0e:2e:6a:42:1a:33:cb:82:bb:9d:62:f1:7b:64:aa:d3:2d:dd:
09:d7:aa:c4:ee:af:cf:12:db:bb:83:6d:5a:2c:f4:35:3f:3b:
5f:bd:0a:e3:66:34:f2:7b:bd:11:87:3d:ac:fa:04:5e:8d:a2:
f9:fb:b7:f8:d1:19:8a:1f:07:e8:db:26:30:c8:9d:a2:6e:37:
41:b3:f2:28
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANdiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTI4MDg1NzA5WhcNMjQxMTI4MDg1NzA5WjAYMRYw
FAYDVQQDEw02NzNlZjVlOS1jM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq9zG6yRETBIxOY9eDTTJ3hvIwwWOL3+t+qDsZut1uT+f3QdkT8TOYdJb
LP8s7aoCYSCdrDXfp5g9Uy1RWhh+UXSn0hH0PQH3yIe0/T0yZcvYJGx/ilHzBs+6
TpndxjclR+WU+tKC+jQHbRBzrg8bohXbTrTGqwremYmCbpp8NYwA+8xXDAO4c1zZ
qs+pQ7abOaMsuxXIq6v1ZptIYrL8fnOupKqrcyxIjNNncrJFk99sz/zi5GpEgso9
Tl2/hU6HYN3cH4wde/XrUV4v8yuOeRYkW1ugznRn4cgxNCzHtqPjHwZYCqh3zUeK
l+AT5fn7w3jnSTfTqQXgMzQoH+2E+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCY/
YzFTKnRAZZ4Rkk8cddCU0U33MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTUzNjZCRUE3RTYxMUVGQkYwQ0NDNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcYEMA0GCSqGSIb3DQEBCwUA
A4IBAQA84r2NMZaOcupAlpgLHRWGY5jMyuOawwNU3tUiJ/i5OkrOqQi7WekayN9f
Da8QnN0LVpW9AkXeuIaygXkCppmUZI/hziujY3RMRe8f21wvotSnNrYupdmFBKFw
P9yO9YuA2SBh+5t+nfq81kpxd4A2pvY9k/D7ASb8GKkrHybfXk3/IzeJvjO5KKgT
ZvVFEgBb6POqnKmFaEsWnBf5TLyGNiPdwS87V16tTa5kQJha+7lAVdUOLmpCGjPL
grudYvF7ZKrTLd0J16rE7q/PEtu7g21aLPQ1PztfvQrjZjTye70Rhz2s+gRejaL5
+7f40RmKHwfo2yYwyJ2ibjdBs/Io
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org