Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EAC98203A211EFB63CC904017001B1.roa
File: 64EAC98203A211EFB63CC904017001B1.roa (raw, json)
Hash identifier: 9CxL5WPJIcpCG1e5rrgFTNjqAZUQ2rlhdkQ0xeeKvDA=
Subject key identifier: B0:E7:32:9F:BA:53:00:35:66:6D:0F:F1:A3:80:E2:A2:13:9B:DB:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8664
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EAC98203A211EFB63CC904017001B1.roa
Signing time: Fri 26 Apr 2024 07:55:49 +0000
ROA not before: Fri 26 Apr 2024 07:55:45 +0000
ROA not after: Thu 09 May 2024 07:55:45 +0000
asID: 44559
IP address blocks: 45.192.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34404 (0x8664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 07:55:45 2024 GMT
Not After : May 9 07:55:45 2024 GMT
Subject: CN=662b5e05-f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:7d:98:97:03:8a:70:23:f2:72:f5:cc:ba:
b9:4f:c2:2a:76:3e:0d:62:8b:10:9f:2c:bc:f1:40:
dd:49:79:ba:a1:70:14:70:d5:4d:5c:0a:45:84:0d:
66:8b:8c:c9:8f:e1:5d:87:e5:0b:7e:5d:11:cc:d3:
8f:37:db:c5:46:ce:55:ad:c7:93:a8:6e:30:ee:2f:
41:de:33:55:1f:81:6d:bf:47:49:af:e8:7f:9b:a8:
c6:c6:b1:08:4d:11:61:55:cd:e5:30:b0:1d:88:18:
12:f6:f6:37:a5:47:9b:e5:e2:cf:8c:0a:ea:1e:f2:
9d:34:78:d1:3b:44:77:da:b1:50:8a:ea:c7:f8:4b:
51:df:a9:3d:c1:b9:6c:0f:61:af:b2:60:03:4e:73:
18:de:9b:07:7d:5f:64:ce:d6:1a:bc:57:74:76:0c:
cd:09:85:35:b3:6a:77:22:2a:dd:73:40:62:e0:3b:
51:ba:49:20:11:66:40:21:86:29:e6:ff:37:c7:9e:
72:1f:07:92:62:aa:3e:9b:f5:38:01:18:62:61:d3:
f3:2b:b4:07:90:78:2f:a7:6c:32:af:53:c6:f0:f8:
a3:8d:72:84:36:f1:ed:dd:b2:08:a9:1d:45:38:dd:
76:95:a6:88:2d:e2:9f:dc:2f:67:4e:ff:b5:08:ce:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:32:9F:BA:53:00:35:66:6D:0F:F1:A3:80:E2:A2:13:9B:DB:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EAC98203A211EFB63CC904017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:16:f6:a5:a4:22:21:62:9d:f8:c3:f8:80:64:a3:ca:b1:fb:
49:ad:3a:d1:a1:d2:aa:1f:6b:79:b2:bc:78:53:e9:27:59:08:
81:77:be:82:21:28:b1:bb:17:ab:95:d7:3e:8c:9f:35:d6:f5:
16:d1:fa:ab:f9:c0:20:f8:6a:da:c2:73:3d:93:f8:ea:86:2b:
aa:fd:b4:4e:ea:21:31:b2:cd:5c:7e:68:2e:38:c1:99:04:d4:
be:25:01:7d:2e:f2:bb:ec:53:52:02:7d:a1:b2:b5:8d:63:08:
88:83:6a:cf:30:e8:0b:ea:a1:ab:73:b6:93:5e:44:9a:de:9f:
43:64:65:81:2e:16:6b:aa:96:0f:f1:54:ce:40:00:f4:aa:ef:
7c:57:1f:8e:68:df:ef:17:06:9d:26:52:e5:e8:3b:c3:16:05:
bf:34:17:81:a2:0a:e7:2f:b3:08:0e:5f:84:a0:08:8c:7d:d7:
32:97:46:57:be:1b:ce:56:0f:aa:fe:05:9c:80:97:c9:cc:74:
48:a1:2b:5d:1f:01:75:a2:9c:2b:6c:05:7e:32:55:f8:b8:88:
83:65:ce:f2:9c:63:d7:7c:91:bc:2a:8d:11:86:21:41:fb:85:
fe:45:c6:dd:2a:27:9b:b9:1b:bb:76:1a:d5:e5:e0:43:ff:e4:
91:7d:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:48:02 2024 by rpki-client on console-fra.rpki-client.org