Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1822D0C06D711EFB57DE52E017001B1.roa
File: B1822D0C06D711EFB57DE52E017001B1.roa (raw, json)
Hash identifier: fcmi7fyqB7VopgOPYX/FsFq4w0Ew1HUB2SaSnczN68I=
Subject key identifier: EB:AD:04:36:FF:BD:6F:13:F6:51:2C:D9:A1:4F:69:CB:88:87:A1:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1822D0C06D711EFB57DE52E017001B1.roa
Signing time: Tue 30 Apr 2024 09:54:54 +0000
ROA not before: Tue 30 Apr 2024 09:54:50 +0000
ROA not after: Tue 07 May 2024 09:54:50 +0000
asID: 136950
IP address blocks: 45.204.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34537 (0x86e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:54:50 2024 GMT
Not After : May 7 09:54:50 2024 GMT
Subject: CN=6630bfee-4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:3b:aa:80:bb:4d:9e:e9:80:c0:aa:13:fa:
4c:b2:73:ea:c6:e8:ee:24:22:15:56:9b:c2:0a:eb:
28:dc:54:f3:22:41:05:d2:38:de:9a:50:57:c2:35:
30:d6:e5:d0:98:9f:27:bf:1e:42:c4:88:b2:2b:79:
04:0a:bb:5b:3b:18:9a:77:5b:4e:39:9c:30:ea:35:
52:87:fe:76:ae:7f:ce:c4:e4:4c:a0:b1:a6:f0:9b:
da:e1:e9:53:89:43:b2:9e:0d:27:34:60:99:e3:99:
2c:75:f0:70:08:fb:d4:ea:46:a9:26:53:52:0a:ca:
29:ee:cd:ec:f0:f3:5a:92:c8:d9:39:05:5a:4e:db:
ed:e6:6f:3c:20:0b:cd:fe:be:af:e0:7d:60:98:c9:
bf:0c:be:c8:43:7b:9b:c7:62:69:d4:c4:0b:bd:69:
e6:f6:b4:5f:7b:45:6c:46:23:55:42:a4:17:2d:b2:
f7:2b:1b:6a:d1:bb:97:54:64:a2:37:f9:82:4b:ea:
13:ec:4b:b0:3a:70:63:28:f7:24:ef:88:2f:40:7f:
a9:44:33:87:5d:13:6a:9d:de:f6:a6:8b:39:6e:6d:
03:cb:5b:65:c9:d2:2d:cf:82:f3:c1:f3:36:98:19:
3d:8b:b9:d5:45:38:9a:03:2c:9c:12:6d:62:a7:72:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:04:36:FF:BD:6F:13:F6:51:2C:D9:A1:4F:69:CB:88:87:A1:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1822D0C06D711EFB57DE52E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fa:2b:eb:6c:34:9e:1e:03:fb:59:2a:5f:37:ab:31:f0:69:
6b:e1:39:aa:77:1e:3c:e7:11:2e:65:33:59:35:c7:45:af:c2:
f7:f1:f9:55:3b:9b:e6:68:96:86:52:78:ff:9f:0f:8c:6d:c8:
6a:89:7d:51:0b:4a:9c:b8:21:c0:de:dd:55:da:c2:16:db:ea:
08:f8:54:90:15:a3:4b:f0:c9:9f:67:1e:9a:d6:ce:1c:ce:5f:
19:b0:5f:e6:50:90:9f:af:fe:6b:21:6d:4e:aa:18:a0:93:99:
59:bb:ab:56:a2:d1:d5:16:51:de:2d:5c:7d:d9:cb:1b:fd:fc:
ab:ca:77:7f:cd:0e:bd:32:d8:1f:fa:4a:06:ea:a8:dd:39:7e:
84:29:71:03:10:71:98:42:db:63:da:bb:17:98:67:78:5c:3f:
3e:7b:be:03:cc:e1:dc:58:8a:24:e0:8d:fb:76:45:ee:9b:11:
a0:f7:f8:c0:73:60:4d:4c:c8:f3:24:2b:83:68:62:81:37:25:
b6:c6:20:22:9d:93:f6:57:06:b6:f7:9d:35:70:c5:9f:8f:ed:
81:e9:b2:75:b6:61:4f:33:2e:f7:5d:70:86:53:55:58:fb:4b:
5e:25:4e:23:46:d4:aa:9d:d2:69:90:ac:c9:63:e7:e1:63:50:
54:cc:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org