Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FCA266088C11EFB3346F0E017001B1.roa
File: 47FCA266088C11EFB3346F0E017001B1.roa (raw, json)
Hash identifier: BHcK5SyQ764m7+lP/YGraxq/XmOcZVoIfXMMoS4sZZg=
Subject key identifier: 24:6C:75:32:BD:EC:13:0C:1B:8B:99:C7:25:49:1B:0B:57:CF:B4:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 875A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FCA266088C11EFB3346F0E017001B1.roa
Signing time: Thu 02 May 2024 14:00:07 +0000
ROA not before: Thu 02 May 2024 14:00:03 +0000
ROA not after: Sat 11 May 2024 14:00:03 +0000
asID: 21859
IP address blocks: 45.196.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34650 (0x875a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:00:03 2024 GMT
Not After : May 11 14:00:03 2024 GMT
Subject: CN=66339c67-f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:44:7b:2c:88:29:2a:c7:97:2a:6e:84:e8:
ab:e8:9c:e7:b5:b5:cd:63:32:43:8c:80:c1:eb:56:
cc:d6:d0:8a:0b:e2:ac:6d:cd:4b:c4:34:ab:91:9f:
8f:c3:4e:ca:a6:16:c5:f7:b9:04:5f:a0:ef:aa:62:
c0:b3:9c:ab:21:13:11:4a:0c:d6:23:75:ca:65:ba:
a5:15:67:f1:bc:95:21:20:f4:60:3b:3a:6a:e3:16:
46:48:30:e6:bd:fd:b4:11:a8:4b:a4:eb:ad:bb:65:
3c:4d:3f:b6:e3:ed:4d:ab:7b:06:1f:c3:6b:67:99:
1f:8d:92:0d:ac:52:13:e6:b1:79:10:14:7c:5b:ca:
fc:04:d1:82:1c:3d:b4:af:99:2d:70:cc:4d:0a:b2:
5c:05:74:49:ee:e9:f0:72:86:87:a7:f4:cd:2e:06:
c3:b7:fc:57:a5:09:3f:07:6c:71:f3:ab:a3:17:25:
84:df:b7:e3:ec:2a:c0:ea:87:e3:ab:7a:66:cf:19:
c6:cd:b3:f8:da:c8:05:d4:5d:c8:37:e0:db:e3:0b:
1c:a3:eb:ed:75:b7:dc:e8:23:62:df:3e:5e:83:b5:
8e:13:29:3e:48:40:63:ef:2a:1d:60:63:4f:53:d4:
7e:cb:2e:4f:e2:0e:3d:57:9a:3f:37:df:2d:70:be:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:75:32:BD:EC:13:0C:1B:8B:99:C7:25:49:1B:0B:57:CF:B4:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FCA266088C11EFB3346F0E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:ef:54:ba:9c:7b:b9:51:a7:ea:19:ab:20:65:9f:cd:ec:7d:
8a:37:45:49:cf:0f:4d:2f:c8:6a:ab:c5:0c:74:6d:b1:52:2b:
41:18:f5:c8:82:53:79:c5:d6:16:9b:9c:cf:ae:f6:fe:93:ef:
cf:8a:ef:52:95:d9:4c:9a:8f:ff:79:61:33:8c:25:0b:c1:ea:
64:8c:f4:07:2f:b0:c5:48:33:2c:da:99:c2:ff:2e:f7:7c:70:
1d:70:9b:27:a2:eb:d2:af:c2:79:06:c0:fc:56:6c:b9:02:59:
a8:ab:90:6e:52:62:c1:72:b5:13:3d:cf:2e:e8:28:32:5e:48:
88:f6:f3:5d:69:58:ee:ac:e0:9d:fc:a7:e6:cb:90:36:8b:c0:
04:25:d5:77:35:7d:23:d8:58:56:c4:16:ed:cd:e2:c6:a4:c5:
42:47:18:35:b8:55:e3:2c:ea:d2:b2:df:e6:60:7d:aa:82:32:
17:95:4e:0a:e9:1e:4c:a4:06:35:3a:eb:3e:11:fe:7f:a3:c7:
44:69:1e:ef:83:ec:f6:94:21:07:c2:8b:dc:14:f7:9e:2b:e4:
74:d3:cb:11:97:6c:04:dd:b1:71:c7:a4:44:5a:b6:31:bf:55:
f6:71:3b:27:11:82:97:ad:58:11:64:8e:97:2c:dd:4d:a5:ef:
ba:c7:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org