Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B8008A090011EF8AE74947017001B1.roa
File: 36B8008A090011EF8AE74947017001B1.roa (raw, json)
Hash identifier: IInbRzhtVawB6fUIzOY4inRJFdq9/tRnUXEr4bRHfB4=
Subject key identifier: 2A:84:7A:8C:CF:FD:C5:3B:72:64:28:75:5D:65:0F:56:AA:52:D2:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 878B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B8008A090011EF8AE74947017001B1.roa
Signing time: Fri 03 May 2024 03:49:59 +0000
ROA not before: Fri 03 May 2024 03:49:56 +0000
ROA not after: Sat 11 May 2024 03:49:56 +0000
asID: 39600
IP address blocks: 45.204.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34699 (0x878b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:49:56 2024 GMT
Not After : May 11 03:49:56 2024 GMT
Subject: CN=66345ee7-53f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:99:6e:30:65:25:89:4f:8e:27:e9:e3:ae:
01:03:b7:81:09:0e:13:4a:be:71:4a:d4:66:d7:54:
b8:27:ef:a0:9c:55:f6:c9:ef:0a:23:3b:b7:1f:6e:
8a:dd:56:c8:5b:12:24:e2:1b:4a:59:50:90:67:ce:
c4:e4:50:56:15:09:65:3e:8f:0a:24:20:59:2f:bb:
65:c2:ae:dd:c6:f1:54:2e:40:6e:d6:60:c9:e1:ad:
38:f7:54:28:7b:ab:53:3d:04:1d:a0:e0:f6:d2:ce:
c8:aa:fc:6d:e8:16:a7:cc:90:d9:b6:99:70:c1:24:
45:db:0c:c7:86:ae:91:3e:26:71:f5:1a:2d:bc:e0:
ff:eb:dd:54:9d:77:2a:53:75:ed:d5:45:c3:82:62:
81:a0:b2:07:aa:35:e7:1e:ee:b6:29:96:f8:a8:82:
b3:4a:40:bd:a0:af:7f:4c:dc:36:4b:48:ed:a1:4f:
30:af:22:cb:f7:d2:6b:15:48:0d:0c:f0:d6:0f:c1:
e0:b7:65:3c:d6:bf:01:22:9b:2d:26:e0:0c:b7:46:
a6:df:19:fa:e2:0a:1c:f3:f0:99:29:42:66:84:c6:
7c:68:15:6b:bd:e8:5e:d3:24:03:da:5d:03:c7:2f:
91:bc:09:77:22:d0:68:94:69:19:98:4e:76:f0:55:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:7A:8C:CF:FD:C5:3B:72:64:28:75:5D:65:0F:56:AA:52:D2:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B8008A090011EF8AE74947017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
99:66:42:b4:9f:d6:be:9b:28:70:8d:f7:87:5c:8b:4b:37:82:
e1:8b:a6:b1:3a:a2:e3:c6:43:3f:19:28:a4:c2:fa:c8:a0:ef:
ec:04:c0:d0:0e:c4:37:f1:6f:ea:3b:0b:cc:69:e1:05:3d:b2:
a1:98:5f:71:d0:9d:c6:ae:14:bf:27:30:c7:41:ff:47:51:b7:
fd:de:fb:b7:e5:02:2a:6b:8d:99:00:f5:80:69:0a:55:16:3b:
49:ce:a4:92:c1:c6:95:36:39:b3:5b:32:9a:05:61:df:4c:5a:
30:69:d9:d8:31:e9:0b:85:2c:70:43:e9:a8:5f:f3:18:ef:fe:
82:6b:12:e4:b4:56:3d:cb:c6:c6:bf:77:df:fc:7d:9c:ef:fc:
06:16:6b:f4:7b:52:87:f7:ba:65:2a:d9:c5:c9:5c:5a:66:a1:
95:f4:b6:3b:49:e6:04:19:e0:fc:4f:d5:c4:88:ab:70:6c:a7:
e9:51:5e:7d:b6:59:57:e4:e3:1d:2f:c0:98:31:2d:5f:3f:cc:
84:53:bb:a7:30:57:f0:81:19:37:2f:75:e6:fd:59:43:57:51:
00:4e:f9:78:3e:93:c8:34:2c:bc:cd:bd:24:43:1d:9b:2b:40:
3a:6c:42:df:96:4d:b3:7a:a1:50:b9:70:5b:91:c8:7f:eb:95:
04:91:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org