Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046812BE295D11EFAA1D55177DDC24C2.roa
File: 046812BE295D11EFAA1D55177DDC24C2.roa (raw, json)
Hash identifier: KgHLTkpc0FAO4ZcA6qzKWPpXymoiCXcys1OJZfFO+f8=
Subject key identifier: 9A:EB:C6:F1:FE:D0:30:3B:2F:78:D2:F9:4D:85:96:A9:6A:BD:46:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9138
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046812BE295D11EFAA1D55177DDC24C2.roa
Signing time: Thu 13 Jun 2024 08:14:55 +0000
ROA not before: Thu 13 Jun 2024 08:14:52 +0000
ROA not after: Sat 22 Jun 2024 08:14:52 +0000
asID: 136950
IP address blocks: 45.204.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37176 (0x9138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:14:52 2024 GMT
Not After : Jun 22 08:14:52 2024 GMT
Subject: CN=666aaa7f-b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:22:74:09:26:4a:a7:1a:a4:aa:36:f5:2c:
6c:0d:f9:19:ea:d5:70:7f:ca:ac:9f:1c:8c:f5:3b:
cd:0f:01:47:d8:09:0a:a1:3f:da:6d:d7:90:30:d8:
68:41:5c:07:0d:bc:1e:35:8d:2d:5e:6f:32:2b:2f:
fb:fd:0a:2f:e4:d7:c4:d3:08:6c:81:ec:a6:82:75:
98:cf:36:48:7b:b7:0b:61:68:61:7b:fa:f5:da:93:
47:90:b0:21:74:a1:09:86:9e:f7:c3:cf:53:ad:42:
22:6a:02:ba:d4:39:b1:f0:a7:16:02:9c:2c:55:5f:
a8:f9:56:65:64:cd:f1:24:76:90:f1:c4:54:e8:f7:
a5:eb:62:11:dc:d1:c3:3e:db:e3:44:1d:70:0f:5c:
3d:49:69:ba:ad:56:44:84:14:24:50:b4:6a:26:79:
4e:a0:8c:a4:b4:65:87:fa:3d:3d:d7:70:45:64:9a:
13:c3:a0:06:b3:30:fc:28:50:15:f1:de:48:f7:b3:
3f:dc:2a:54:b0:a1:97:2f:c6:cb:83:a0:5f:25:1c:
1b:35:6c:bd:7a:3e:7b:32:3d:86:86:1a:70:f1:2f:
e1:50:a1:39:27:b0:50:07:bb:a6:2d:ba:82:60:39:
74:f2:9f:14:89:08:4a:7b:5f:49:7b:81:8d:d4:9f:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:C6:F1:FE:D0:30:3B:2F:78:D2:F9:4D:85:96:A9:6A:BD:46:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046812BE295D11EFAA1D55177DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.84.0/24
Signature Algorithm: sha256WithRSAEncryption
95:26:94:d6:0b:ba:c4:90:67:6b:b6:8d:9a:ea:bf:33:28:e3:
d8:ce:58:cf:4a:d8:35:0a:8b:c4:62:c9:f3:bc:5b:5f:19:90:
f1:7d:e1:e3:13:94:7c:c3:3f:92:aa:cf:2e:c6:80:db:a2:18:
22:99:0e:7b:98:ed:00:15:04:e9:44:af:16:0a:b9:e6:b9:04:
b1:7a:2e:32:86:42:61:4e:4f:c8:b0:fc:3b:fd:38:60:3c:8b:
d8:6e:99:39:cf:8c:d0:9b:d1:a2:72:dc:52:59:f1:c6:d4:f2:
7f:6a:e0:86:40:ed:47:a2:fc:ab:0e:e9:de:d7:4d:24:ef:61:
11:51:a4:92:38:cc:02:24:6f:ff:46:68:ae:04:55:85:53:76:
a0:23:ad:70:0f:74:d1:42:8f:cb:15:53:76:8e:38:bb:94:81:
cb:4f:41:b1:b2:9f:b0:c2:df:00:af:b1:1c:2b:b2:9a:53:61:
58:f3:c3:91:41:fb:38:9c:29:50:e1:00:8f:11:9a:35:57:ac:
da:89:90:be:4d:3d:22:53:08:6e:d9:3a:29:a3:d7:07:ca:78:
52:d6:22:13:50:35:e7:83:25:47:25:4f:34:ab:51:9c:3a:80:
51:05:e9:4c:1c:74:86:27:d8:1e:13:15:ba:c6:72:87:09:2c:
95:bb:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:49:49 2024 by rpki-client on console-ams.rpki-client.org