Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C4A794A7E111EF98F8BDBA762E951A.roa
File: D9C4A794A7E111EF98F8BDBA762E951A.roa (raw, json)
Hash identifier: gP0bhAJZnapxc2eHQo8ShUi9DKzy9Zec+crIUQyMRhU=
Subject key identifier: 83:33:88:26:61:14:66:9F:7A:9B:08:AE:0A:3C:37:64:E3:80:AD:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D732
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C4A794A7E111EF98F8BDBA762E951A.roa
Signing time: Thu 21 Nov 2024 08:23:13 +0000
ROA not before: Sat 30 Nov 2024 08:23:10 +0000
ROA not after: Sat 30 Nov 2024 08:23:10 +0000
asID: 44559
IP address blocks: 156.246.191.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55090 (0xd732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:23:10 2024 GMT
Not After : Nov 30 08:23:10 2024 GMT
Subject: CN=673eedf1-4cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ec:1f:78:4f:3d:53:a1:41:1d:c7:25:3d:
7b:d5:db:5f:2a:83:cf:c9:d6:4e:46:d1:33:e0:aa:
ec:d0:d1:9d:14:51:6c:18:64:9d:7e:21:de:6c:ac:
2a:86:a7:4b:de:09:ba:94:ce:e0:e6:a6:ce:d4:d6:
0e:d2:3d:14:90:fa:66:aa:76:9e:54:34:58:a9:1c:
70:cf:35:9c:09:ed:11:ee:f9:c1:4b:2e:b0:13:d2:
c3:0e:f6:67:48:36:9d:e8:53:fa:41:4f:b6:7d:07:
2c:75:4c:ed:6a:44:4a:55:88:be:26:8c:78:f3:64:
97:fd:df:dd:a5:7e:62:b3:75:3b:76:ad:73:4c:d8:
f4:04:9d:51:b0:0d:24:ed:54:a6:0a:fe:3f:1e:ec:
8b:a7:62:58:b4:01:a7:dd:e6:5f:11:da:a1:a1:29:
d8:0a:62:8c:2e:23:3c:75:f6:23:e4:6b:41:9c:e0:
09:a6:17:c7:47:e5:40:d6:32:49:c3:b9:29:e1:e7:
a3:c7:0c:16:75:16:46:6c:ff:45:60:46:6d:bb:60:
79:9b:d4:63:da:83:60:37:3f:b4:10:db:1a:4e:3f:
83:76:a8:87:69:64:37:4d:66:41:2c:74:0c:a8:f2:
49:68:ef:55:17:b7:ad:39:c3:85:5c:63:a7:9a:8d:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:33:88:26:61:14:66:9F:7A:9B:08:AE:0A:3C:37:64:E3:80:AD:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9C4A794A7E111EF98F8BDBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3a:5f:87:4d:b6:fe:18:5a:8c:15:1e:34:23:8b:94:44:2c:
61:d0:4e:e1:9f:cb:6f:a5:40:51:13:38:65:91:bc:b0:5e:2a:
0c:9e:d6:85:31:09:84:72:15:32:59:07:bd:69:00:92:f4:a0:
c7:43:85:3f:ef:91:2d:4f:61:34:91:05:92:e3:0d:15:cc:81:
a1:38:db:46:07:48:64:09:7c:6b:24:b8:15:48:7c:0b:45:6f:
68:a1:42:55:5a:bb:0e:44:b7:37:3f:72:3a:c7:76:b6:5f:d0:
e9:ed:75:d9:3e:85:7a:44:a6:6c:eb:3f:0a:7c:55:36:6f:87:
b2:1c:33:5b:51:9b:fa:f3:54:4e:25:0d:2e:07:fe:69:cc:6b:
7b:68:40:17:22:69:00:f3:33:88:37:d1:f7:c2:d5:86:01:04:
dd:b5:45:8d:95:34:e5:89:d3:9e:f5:7e:63:e7:65:80:31:10:
6f:2a:b1:53:45:b3:81:df:24:13:8e:eb:2c:d3:96:f2:da:19:
7a:ac:e5:d6:7c:57:4f:21:2a:89:d9:27:17:19:f4:df:74:b9:
a1:c7:76:7e:5e:2a:c9:8e:6b:82:c0:38:f7:03:72:33:46:28:
e3:fd:0c:a7:ec:93:0c:3f:31:53:9e:4c:58:3e:0f:34:a6:5e:
ca:cc:64:91
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANcyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTMwMDgyMzEwWhcNMjQxMTMwMDgyMzEwWjAYMRYw
FAYDVQQDEw02NzNlZWRmMS00Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyRbsH3hPPVOhQR3HJT171dtfKoPPydZORtEz4Krs0NGdFFFsGGSdfiHe
bKwqhqdL3gm6lM7g5qbO1NYO0j0UkPpmqnaeVDRYqRxwzzWcCe0R7vnBSy6wE9LD
DvZnSDad6FP6QU+2fQcsdUztakRKVYi+Jox482SX/d/dpX5is3U7dq1zTNj0BJ1R
sA0k7VSmCv4/HuyLp2JYtAGn3eZfEdqhoSnYCmKMLiM8dfYj5GtBnOAJphfHR+VA
1jJJw7kp4eejxwwWdRZGbP9FYEZtu2B5m9Rj2oNgNz+0ENsaTj+DdqiHaWQ3TWZB
LHQMqPJJaO9VF7etOcOFXGOnmo3IRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIMz
iCZhFGafepsIrgo8N2TjgK0pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOUM0QTc5NEE3RTExMUVGOThGOEJEQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPa/MA0GCSqGSIb3DQEBCwUA
A4IBAQCKOl+HTbb+GFqMFR40I4uURCxh0E7hn8tvpUBREzhlkbywXioMntaFMQmE
chUyWQe9aQCS9KDHQ4U/75EtT2E0kQWS4w0VzIGhONtGB0hkCXxrJLgVSHwLRW9o
oUJVWrsORLc3P3I6x3a2X9Dp7XXZPoV6RKZs6z8KfFU2b4eyHDNbUZv681ROJQ0u
B/5pzGt7aEAXImkA8zOIN9H3wtWGAQTdtUWNlTTlidOe9X5j52WAMRBvKrFTRbOB
3yQTjuss05by2hl6rOXWfFdPISqJ2ScXGfTfdLmhx3Z+XirJjmuCwDj3A3IzRijj
/Qyn7JMMPzFTnkxYPg80pl7KzGSR
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:52 2024 by rpki-client on console-ams.rpki-client.org