Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E4C73EA7E011EF93848FB4762E951A.roa
File: D7E4C73EA7E011EF93848FB4762E951A.roa (raw, json)
Hash identifier: fOfSI7ypUnKEE9mhQWeYzkWkjyhxpPxBO4kqPWK1/EY=
Subject key identifier: BE:6C:60:FF:58:21:BD:96:6F:E0:F8:1D:B8:EB:88:78:2A:39:CA:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D726
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E4C73EA7E011EF93848FB4762E951A.roa
Signing time: Thu 21 Nov 2024 08:16:01 +0000
ROA not before: Sat 30 Nov 2024 08:15:57 +0000
ROA not after: Sat 30 Nov 2024 08:15:57 +0000
asID: 149014
IP address blocks: 45.192.176.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55078 (0xd726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:15:57 2024 GMT
Not After : Nov 30 08:15:57 2024 GMT
Subject: CN=673eec41-c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:90:7b:da:90:6b:d2:08:69:e5:c6:23:71:
36:3a:3d:f9:b5:19:7e:ed:3f:11:8b:26:3e:c9:3c:
5d:57:32:97:09:12:7a:6d:aa:e3:93:3f:69:e2:68:
b5:9a:0b:97:68:a5:17:94:3c:99:83:81:4f:cf:68:
ee:6b:13:cf:2b:ab:72:91:38:4e:b5:09:08:5a:19:
8a:f0:90:24:93:21:eb:75:77:9a:1b:93:95:53:b8:
30:23:8b:c1:aa:c5:74:a7:60:92:84:64:3d:17:31:
a2:97:5b:5b:81:0a:76:17:08:33:72:52:91:b9:e7:
69:c7:a4:74:8e:b6:f7:20:b7:c1:ac:25:38:45:0b:
14:e4:e1:e3:d6:14:97:18:25:43:a7:eb:6f:d4:56:
de:59:51:51:c1:f6:7d:c1:cf:43:bc:95:bb:66:3a:
3e:96:43:57:36:a0:2d:1e:61:eb:05:95:5a:f2:97:
a8:c9:c5:21:fc:c7:2e:c3:15:b4:58:0c:8f:f5:22:
9d:67:48:dc:51:e1:a6:68:14:90:35:39:e5:24:7c:
82:09:0a:9c:81:9e:d1:59:05:19:d7:27:8f:35:a1:
26:76:85:41:32:ea:79:6b:3f:03:4f:c4:31:93:00:
f2:23:14:b7:e2:d2:cb:7d:26:dc:9c:9d:7d:46:e6:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:60:FF:58:21:BD:96:6F:E0:F8:1D:B8:EB:88:78:2A:39:CA:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E4C73EA7E011EF93848FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e5:bc:57:b3:4f:df:08:78:bb:8d:d6:a7:2a:f8:1c:d4:3d:
ae:27:2e:1b:56:2f:86:31:50:ef:b9:e4:08:f5:72:e1:34:bc:
85:1c:55:62:be:26:08:46:cc:6f:59:78:1b:9c:e0:a0:81:1f:
11:2d:bf:be:41:06:d7:b8:1b:a0:48:f3:e2:ba:86:fa:13:6d:
73:76:82:e8:55:2c:06:a1:e6:ec:34:dc:ee:81:7b:74:1f:bd:
03:a1:26:b7:51:8a:04:75:71:f1:c3:fa:80:7d:83:d5:55:e5:
58:13:b6:03:54:b1:4a:5c:da:60:e6:1d:c9:cb:61:60:e6:9e:
27:8e:b3:04:b0:d9:12:5e:14:5a:3b:96:01:78:ec:26:8c:ce:
c9:c3:07:a2:77:1d:1e:82:23:ad:b5:a0:a2:7c:da:4b:57:0b:
d2:9a:0d:53:34:aa:61:af:33:fc:63:43:47:76:a6:32:79:d8:
b2:ee:09:91:96:a3:c1:1c:d9:91:b0:e9:31:2d:27:ee:03:0c:
12:47:d1:66:c7:0a:bf:38:20:f2:ab:49:34:4d:90:0e:16:cd:
82:a1:dd:e8:59:19:6d:79:51:59:18:c9:88:25:b0:58:51:5c:
fc:e3:38:8a:d4:c4:7c:62:8f:25:8e:88:dd:43:4b:17:d8:3a:
79:b2:dd:09
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANcmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTMwMDgxNTU3WhcNMjQxMTMwMDgxNTU3WjAYMRYw
FAYDVQQDEw02NzNlZWM0MS1jMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyGmQe9qQa9IIaeXGI3E2Oj35tRl+7T8RiyY+yTxdVzKXCRJ6barjkz9p
4mi1mguXaKUXlDyZg4FPz2juaxPPK6tykThOtQkIWhmK8JAkkyHrdXeaG5OVU7gw
I4vBqsV0p2CShGQ9FzGil1tbgQp2FwgzclKRuedpx6R0jrb3ILfBrCU4RQsU5OHj
1hSXGCVDp+tv1FbeWVFRwfZ9wc9DvJW7Zjo+lkNXNqAtHmHrBZVa8peoycUh/Mcu
wxW0WAyP9SKdZ0jcUeGmaBSQNTnlJHyCCQqcgZ7RWQUZ1yePNaEmdoVBMup5az8D
T8QxkwDyIxS34tLLfSbcnJ19RuaMwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL5s
YP9YIb2Wb+D4HbjriHgqOcrqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EN0U0QzczRUE3RTAxMUVGOTM4NDhGQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCwMA0GCSqGSIb3DQEBCwUA
A4IBAQBV5bxXs0/fCHi7jdanKvgc1D2uJy4bVi+GMVDvueQI9XLhNLyFHFViviYI
RsxvWXgbnOCggR8RLb++QQbXuBugSPPiuob6E21zdoLoVSwGoebsNNzugXt0H70D
oSa3UYoEdXHxw/qAfYPVVeVYE7YDVLFKXNpg5h3Jy2Fg5p4njrMEsNkSXhRaO5YB
eOwmjM7Jwweidx0egiOttaCifNpLVwvSmg1TNKphrzP8Y0NHdqYyediy7gmRlqPB
HNmRsOkxLSfuAwwSR9Fmxwq/OCDyq0k0TZAOFs2Cod3oWRlteVFZGMmIJbBYUVz8
4ziK1MR8Yo8ljojdQ0sX2Dp5st0J
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:49 2024 by rpki-client on console-fra.rpki-client.org