Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8996C36827C311EF9FD3C1317DDC24C2.roa
File: 8996C36827C311EF9FD3C1317DDC24C2.roa (raw, json)
Hash identifier: /XCvWhIZl7NciQR0+cexkPUd0nqcIqs1C+ah2adpSBk=
Subject key identifier: 99:C3:5B:D4:FB:F7:28:CD:6A:FE:21:B8:C2:0B:46:A1:5D:8F:A4:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9072
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8996C36827C311EF9FD3C1317DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:23:45 +0000
ROA not before: Tue 11 Jun 2024 07:23:42 +0000
ROA not after: Thu 20 Jun 2024 07:23:42 +0000
asID: 139811
IP address blocks: 45.195.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36978 (0x9072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:23:42 2024 GMT
Not After : Jun 20 07:23:42 2024 GMT
Subject: CN=6667fb81-0099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:47:08:f6:4b:3c:51:37:a2:c8:aa:94:6c:
25:6f:43:4a:6c:8b:24:62:a1:6a:26:71:ec:3d:16:
da:32:06:29:cd:82:db:f0:4a:7f:ca:e9:a9:3e:ee:
fc:37:1c:ee:7d:aa:11:f4:3c:5d:3c:c4:4d:97:d9:
38:51:b1:67:c9:a4:93:d6:56:c6:64:48:fc:47:ac:
b1:d0:53:f8:92:28:20:92:92:7f:7a:61:7f:7d:ed:
9e:45:75:88:96:50:3f:4b:e3:b2:50:24:4d:c4:13:
0b:ba:54:99:95:59:c7:89:80:98:92:08:1a:f2:d9:
b9:bd:d8:ba:a8:99:64:23:d3:a8:e3:5f:f8:6a:67:
da:a9:6c:e5:ea:0e:52:58:6c:e5:92:4e:1b:20:f2:
67:08:2f:4f:5f:a9:c2:50:ab:c0:65:ed:cb:72:49:
2c:14:88:8a:5d:b0:eb:ee:34:1e:1e:38:09:7a:83:
d9:f4:be:18:72:c4:ee:f1:c9:1c:90:34:17:17:d3:
f0:a0:90:5e:09:52:88:d2:62:ea:db:5c:92:8d:b8:
6e:1f:27:af:da:84:2b:82:3e:f0:f8:60:25:1c:08:
ae:2c:af:3c:9b:0b:57:a2:dd:dd:60:eb:7c:02:00:
9a:89:46:93:51:db:89:99:db:65:5c:3e:3c:41:cf:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C3:5B:D4:FB:F7:28:CD:6A:FE:21:B8:C2:0B:46:A1:5D:8F:A4:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8996C36827C311EF9FD3C1317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2a:58:66:9f:1e:f0:1d:85:87:c8:c4:d5:22:4c:ee:bd:a7:
37:65:b6:30:53:77:de:24:9c:f0:de:bb:00:45:8e:06:cf:4a:
64:b1:58:e9:28:db:7d:e0:f0:ec:25:33:cf:8b:68:04:9f:bb:
99:0d:4b:3b:29:d7:11:50:0d:2c:f9:66:43:1c:e4:16:28:80:
a8:4b:aa:22:d3:55:2b:f3:30:30:77:ef:b2:3c:58:cb:3f:73:
7a:d5:00:be:45:be:60:8a:f3:a9:c1:79:fc:4d:e5:21:37:a8:
dc:2e:c2:8e:f1:a5:d6:57:e4:dd:78:f7:ce:5c:4d:5b:58:6a:
0e:12:24:3f:0c:d0:e5:0d:87:a2:1b:76:93:3b:58:74:0a:70:
1c:2f:52:c8:89:73:86:1c:61:9a:67:27:22:bc:17:19:78:6a:
d7:be:3c:47:05:ae:5f:92:e3:51:3b:82:0b:4f:77:90:d9:3c:
fb:dc:7f:77:03:c3:65:d0:90:7b:ea:db:4a:95:fd:ee:88:20:
93:27:b2:47:43:a8:27:ab:26:55:83:38:0b:a2:a5:14:be:6e:
34:d5:3c:06:8b:cb:9f:c2:11:d6:33:7a:36:d8:bf:ad:84:de:
a7:bb:35:19:1e:91:11:be:65:f1:d2:b0:91:84:e6:48:be:38:
8c:ac:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:17:52 2024 by rpki-client on console-ams.rpki-client.org