Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA019902A7E311EFB2266E47762E951A.roa
File: AA019902A7E311EFB2266E47762E951A.roa (raw, json)
Hash identifier: vOU5Us1eTjslvrOQuSrGYjqooTVXUMo2MzE5AcTlqE0=
Subject key identifier: 6B:88:FD:18:01:6B:8A:7C:27:AB:70:67:D1:6C:45:F6:19:4C:F6:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D748
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA019902A7E311EFB2266E47762E951A.roa
Signing time: Thu 21 Nov 2024 08:36:12 +0000
ROA not before: Sat 30 Nov 2024 08:36:09 +0000
ROA not after: Sat 30 Nov 2024 08:36:09 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55112 (0xd748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:36:09 2024 GMT
Not After : Nov 30 08:36:09 2024 GMT
Subject: CN=673ef0fc-b658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:19:74:b6:0b:e7:af:33:a3:10:2c:e9:72:
58:3a:43:02:bb:82:3a:81:c1:2a:00:51:30:f1:5a:
48:e8:37:3a:bf:76:b6:c1:0e:bc:ed:48:bd:0b:bc:
06:29:c2:d2:6d:89:eb:1e:bc:2b:de:70:ee:af:bd:
35:c8:9b:c0:b3:76:13:b5:b9:0a:fb:2f:d0:e2:05:
5d:97:5f:b3:88:11:68:44:f2:b0:cb:70:db:e6:a8:
57:46:46:8d:53:ef:d5:b6:86:4f:9d:36:f6:b2:d1:
56:d3:a8:78:e2:ca:8c:a2:01:58:a5:b5:6d:a6:4e:
07:80:3e:0b:5d:f3:12:ce:07:1a:f1:36:9d:8a:59:
2d:20:be:99:8f:16:a7:1f:5a:8a:ce:26:6c:f5:85:
2f:a1:54:f1:ac:25:34:42:15:6b:b7:86:63:c9:e7:
d1:4c:38:51:db:5f:cc:aa:71:d5:49:50:47:e5:77:
68:35:51:88:52:ea:8a:19:72:fd:9e:d1:58:f8:71:
b9:67:a3:df:15:8b:f2:2e:8f:38:79:63:2e:f5:ad:
32:87:5e:1c:51:34:51:e2:7d:91:a4:47:02:53:ec:
b6:5c:9b:e5:a6:f8:2d:17:dc:f0:9c:d5:ee:9b:6c:
78:15:63:34:83:75:ac:3b:a6:bf:d4:94:8b:42:34:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:FD:18:01:6B:8A:7C:27:AB:70:67:D1:6C:45:F6:19:4C:F6:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA019902A7E311EFB2266E47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
76:8d:b8:38:72:ca:77:1b:a1:28:2e:e6:7a:ab:70:49:fb:1a:
c1:7a:35:1b:26:2c:61:7d:bd:63:29:34:9d:e8:0e:3f:1a:ca:
34:64:af:c5:20:2b:5c:f3:50:cb:52:31:f2:5e:5f:4c:e0:c4:
f8:48:4a:4d:f3:cb:1c:7e:ab:12:de:a9:fb:f2:28:fb:f1:dc:
35:bb:80:1a:a2:92:58:a3:6a:d9:cd:f3:64:cb:aa:0e:26:c9:
04:33:a8:20:54:33:ae:46:69:27:a3:75:fd:2d:5f:70:24:7d:
42:db:ec:04:5e:45:dc:f3:86:ea:80:ff:b4:9c:f6:d1:63:6d:
c6:82:2b:50:f0:d2:24:2e:68:2d:25:97:e3:4d:fb:a9:06:d3:
5b:e3:9f:25:a8:ba:8e:73:ca:b2:ff:d6:fe:e4:fb:50:72:59:
97:17:de:7f:61:83:7c:42:35:b2:82:75:ac:61:50:a1:5f:c3:
9a:b0:bf:45:83:a1:dc:49:d6:c7:1e:8f:ad:8a:31:c7:5f:f2:
02:a3:58:5a:2a:7f:e5:7e:5c:b7:63:5e:0f:3c:df:1d:fc:5c:
d6:6c:7f:67:0b:4d:a4:62:34:13:05:53:cf:56:73:28:4d:34:
fb:66:8e:5a:fa:8a:69:0f:85:50:64:15:62:93:eb:52:47:99:
d9:5a:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:43 2024 by rpki-client on console-fra.rpki-client.org