Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312D6DB2088311EFA74A5A44017001B1.roa
File: 312D6DB2088311EFA74A5A44017001B1.roa (raw, json)
Hash identifier: w2xvW86xIizEkyDLtNE/SCku02Xr/b51zj5V7H9+FFE=
Subject key identifier: A2:9E:23:03:72:63:9A:8B:A3:7F:51:E5:54:F6:C4:C2:F7:EB:F8:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 874A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312D6DB2088311EFA74A5A44017001B1.roa
Signing time: Thu 02 May 2024 12:55:03 +0000
ROA not before: Thu 02 May 2024 12:54:59 +0000
ROA not after: Sat 11 May 2024 12:54:59 +0000
asID: 137510
IP address blocks: 45.204.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34634 (0x874a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 12:54:59 2024 GMT
Not After : May 11 12:54:59 2024 GMT
Subject: CN=66338d27-116e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:1c:fa:1d:e7:94:31:ab:c8:e3:92:b5:9e:
dc:62:a9:32:03:5a:a8:d7:c9:9c:24:05:db:96:d8:
ca:f6:b2:a0:77:94:48:5d:66:18:a7:da:95:1a:0a:
5f:2c:67:76:23:1d:15:21:98:ed:0b:6e:89:19:89:
ab:8f:c9:cb:b1:40:2b:4d:d0:65:3c:ef:ad:3f:e7:
63:16:a5:f8:d3:9a:0e:4f:ac:90:ff:c0:f8:48:de:
04:ef:54:88:8c:0b:e9:1a:06:fc:4b:3c:98:4f:ef:
4a:ba:92:cd:24:6c:52:bb:02:84:fa:86:b7:53:3f:
0e:17:af:4f:81:aa:53:c7:f4:22:43:2c:38:06:fb:
bf:e1:6f:cf:5f:e9:1e:94:ad:cf:99:f2:da:9a:d6:
10:c0:27:ba:b3:62:b0:f9:f8:a9:76:4c:d0:4a:b9:
69:8f:e9:d5:19:30:e9:52:86:a6:e6:78:2e:95:f6:
60:f3:40:f8:f8:80:20:c8:09:f0:d3:2a:22:b5:39:
fa:43:b5:8d:14:b8:df:61:e2:e3:73:5c:cf:04:29:
c7:0b:aa:37:4c:b7:e3:73:b1:27:0d:8f:3d:40:7f:
1e:8f:e6:b0:6a:5c:17:91:a9:0b:7d:7c:c1:89:49:
8e:8c:c0:a0:db:12:01:46:f4:e2:f2:18:4b:df:87:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:23:03:72:63:9A:8B:A3:7F:51:E5:54:F6:C4:C2:F7:EB:F8:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312D6DB2088311EFA74A5A44017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
04:07:fe:b1:6c:83:bf:bf:8c:04:53:83:26:36:b3:94:48:6c:
a1:27:25:9f:88:5d:d1:df:68:c1:56:4b:fc:50:fb:56:b9:85:
ab:9e:f1:a4:88:ae:78:18:c0:ae:74:ad:3d:7c:b3:28:60:1c:
7c:a6:40:1d:c3:18:05:67:cc:f7:39:ea:ae:da:ba:e8:14:82:
27:fd:0a:f5:47:b2:10:c3:84:eb:be:f3:b5:82:1a:fd:f5:a2:
d2:43:9d:31:41:22:34:83:98:bd:fd:4d:a6:a8:b6:d6:fd:76:
59:11:96:3f:a6:3c:26:60:54:e6:ea:b0:cf:8a:8f:d2:e3:10:
d1:b7:18:15:b0:cd:10:ce:03:42:3d:75:e8:0f:21:44:56:48:
5f:e9:e8:a5:f5:91:40:45:1e:d5:f8:99:90:d9:b0:22:5f:2c:
26:37:41:4f:1d:92:2e:dd:4e:86:f3:33:1a:bb:c6:d1:4f:3b:
c0:16:10:62:97:5d:0f:91:fe:3c:73:3a:b0:b0:ee:66:96:46:
c9:18:6b:f0:c2:76:14:66:84:0a:8f:eb:6e:f8:71:7e:85:d2:
62:11:06:87:69:67:57:4d:8d:0f:4e:cf:86:ed:12:4f:4f:04:
d6:75:ad:ae:e8:3a:33:ef:63:4a:2d:db:28:af:c7:71:69:c0:
a9:d7:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org