Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2829AA06D611EF9D3FD124017001B1.roa
File: 9A2829AA06D611EF9D3FD124017001B1.roa (raw, json)
Hash identifier: TrlraiwZzVgQVA160YzffWLtXEX6xrWq7nLGiThv7Mk=
Subject key identifier: 4E:91:2D:77:24:E2:79:81:5E:53:38:B8:FD:94:65:9D:46:8F:29:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2829AA06D611EF9D3FD124017001B1.roa
Signing time: Tue 30 Apr 2024 09:47:05 +0000
ROA not before: Tue 30 Apr 2024 09:47:02 +0000
ROA not after: Tue 07 May 2024 09:47:02 +0000
asID: 136950
IP address blocks: 45.204.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34521 (0x86d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:47:02 2024 GMT
Not After : May 7 09:47:02 2024 GMT
Subject: CN=6630be19-2648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:10:63:54:31:5b:e8:02:3d:cf:77:d6:9e:
ca:35:51:d6:54:42:98:77:b9:c6:34:a4:ea:33:bd:
2b:1b:7e:ef:ed:9b:d7:9c:14:e5:e9:ae:3c:32:cb:
d4:a3:fd:2b:2f:a9:2a:fa:3f:d8:9a:03:61:87:76:
e4:60:08:20:05:c3:60:2a:49:46:bc:e4:82:12:0f:
a2:a9:d0:0f:d8:9a:4a:93:71:b7:11:c2:0f:7b:46:
43:66:45:81:ab:85:c3:35:69:60:e2:c6:e0:0b:4d:
c5:f3:29:dd:2e:61:53:62:c8:b5:d7:a1:29:b8:cf:
0c:e6:00:83:d9:fc:84:93:67:02:fa:48:84:d1:37:
6f:b6:bb:c8:2e:e8:16:dd:2a:28:a2:a9:62:99:a5:
6f:f5:d6:54:6f:87:f9:86:be:97:4f:d0:76:d0:99:
ab:9f:41:dd:7d:00:7a:9b:45:9e:14:0d:0f:e7:d2:
84:64:a2:0c:f4:89:29:2d:4a:45:9a:79:5a:1a:21:
d8:be:db:16:fe:91:ca:f9:b1:12:08:01:c2:a5:8b:
ff:40:d9:33:29:8b:37:7a:3a:8f:1f:41:b1:0b:bd:
10:6d:c8:32:88:59:6d:93:86:a5:90:dc:e3:26:05:
62:89:dd:7b:ee:a7:55:63:ec:7f:23:88:4c:02:ff:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:2D:77:24:E2:79:81:5E:53:38:B8:FD:94:65:9D:46:8F:29:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2829AA06D611EF9D3FD124017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d9:b7:c8:95:62:aa:b4:a2:c7:82:77:17:d8:74:ee:0b:a9:
f1:ff:de:ba:8d:5e:99:de:c7:dc:c9:80:57:40:1a:73:05:11:
b5:42:61:0c:c5:5d:e8:79:77:db:e1:21:22:2d:73:04:13:ec:
0e:37:5f:c9:53:36:60:4f:53:26:3b:fa:99:63:42:e9:98:77:
89:3a:08:17:5d:aa:c9:c0:9c:71:72:1d:55:12:22:45:8f:5d:
41:28:01:7c:67:11:b0:cc:c1:26:17:84:ca:d8:d2:e4:29:d7:
d0:e7:bf:02:98:13:cd:0a:1e:56:d2:b1:e7:25:e0:21:2c:30:
61:34:ad:8e:c1:2c:89:98:ff:4b:b2:1f:43:f6:b8:10:f6:9c:
f6:19:e8:a7:11:1b:8b:7f:cb:e5:9f:a7:6c:9d:f6:2d:e1:1e:
7e:4a:f9:a4:c8:f6:fe:b3:1a:33:c6:23:97:f2:60:ef:41:d3:
f3:bd:77:cf:8f:56:f4:c9:7d:4d:37:a2:9a:69:ce:5f:6b:3a:
4c:ba:92:fe:a2:64:4f:85:8b:ff:b6:38:0c:b4:b5:93:fc:d4:
b4:03:cf:aa:68:82:ad:90:2c:e5:f4:14:49:f2:84:7a:60:1c:
61:41:22:aa:29:8b:91:65:51:3e:78:99:ca:c3:df:70:fc:ec:
19:fa:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org