Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B828D06E06D411EFBE8CF616017001B1.roa
File: B828D06E06D411EFBE8CF616017001B1.roa (raw, json)
Hash identifier: sJYmYpwlEpW3R4QGlqDlaWAnqZ+NvH85LmOoN9elcyg=
Subject key identifier: 14:D2:2D:C7:54:B5:5A:04:9E:27:C6:41:90:06:4B:CA:80:26:33:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B828D06E06D411EFBE8CF616017001B1.roa
Signing time: Tue 30 Apr 2024 09:33:36 +0000
ROA not before: Tue 30 Apr 2024 09:33:33 +0000
ROA not after: Tue 07 May 2024 09:33:33 +0000
asID: 142062
IP address blocks: 45.204.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34517 (0x86d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:33:33 2024 GMT
Not After : May 7 09:33:33 2024 GMT
Subject: CN=6630baf0-1eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:cd:8b:bc:45:65:ac:6f:a0:fa:99:4b:a8:
a5:12:aa:4e:62:88:67:e8:58:18:ed:73:df:6b:d1:
a1:c0:76:f9:57:1b:d8:24:3d:49:cb:95:f9:8b:26:
a8:86:ca:0b:aa:c1:0e:1c:8a:98:4a:49:4d:7c:31:
cf:3d:d9:c5:17:66:dc:54:b4:0f:04:7d:b4:37:e5:
0a:d3:b1:0c:a4:0f:52:f1:c3:e0:10:ed:44:e0:c4:
99:d3:1f:da:78:51:b2:64:50:ce:fa:9b:e5:52:e7:
00:96:34:c6:0b:d1:4a:f8:d1:75:e7:f0:e1:05:cb:
d6:99:84:bf:70:f7:f3:c7:c2:01:c8:98:b9:03:5f:
6e:1a:89:cf:d9:3c:27:c3:e8:00:b9:aa:1a:84:ee:
58:2b:fd:81:73:8a:4f:ca:96:70:95:a9:7d:13:0f:
bd:fb:d6:a7:b4:0f:c7:6a:00:20:33:29:d8:56:0f:
43:c0:bb:6a:ee:cf:59:11:88:d6:d6:97:e6:c0:49:
6b:df:5c:d0:55:cc:b8:3f:51:a5:5b:e6:c4:f6:95:
2e:64:10:3b:ba:07:60:ea:60:3d:ec:b0:3b:08:17:
da:6d:76:45:ef:44:09:e9:1e:b8:43:af:88:81:3d:
08:33:f3:4a:65:36:65:15:3e:5f:e1:9d:7a:60:9b:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:2D:C7:54:B5:5A:04:9E:27:C6:41:90:06:4B:CA:80:26:33:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B828D06E06D411EFBE8CF616017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1a:c6:81:0f:50:56:22:8b:a7:9a:49:c0:b7:cd:70:5c:17:
38:8d:ac:81:47:72:04:bc:aa:3c:4b:65:02:b6:dc:2f:43:fd:
33:58:04:5f:bc:45:ee:61:16:86:85:0c:0f:88:69:f3:15:0c:
da:16:2a:65:03:a5:9e:85:a8:e7:1f:7a:e8:a7:5a:b0:23:25:
e0:59:46:72:07:7e:99:31:b9:0d:13:ef:10:6b:bc:68:f9:10:
c4:e1:98:d2:59:df:88:ab:11:81:4f:84:c6:14:82:f2:0b:91:
e3:80:29:42:76:0b:7b:0f:b3:1f:fe:f4:fe:75:34:38:ca:6f:
3f:87:54:b0:b0:65:4a:a4:59:1c:7d:73:d8:a0:41:50:84:50:
9f:94:f8:3d:d5:0a:a7:60:8f:72:6f:69:e6:b8:07:af:02:84:
cf:fa:15:e4:24:40:3b:b4:67:da:57:3b:04:3d:a5:14:98:10:
c7:c8:b7:cc:9d:5a:bb:08:5e:46:12:f5:74:1e:a9:6c:a2:0a:
fa:27:b4:d9:20:53:46:0c:0c:1c:d2:3f:66:f0:37:03:52:7f:
e6:bb:fd:06:2d:d8:7b:8d:a2:69:44:00:3b:0f:28:a0:5c:04:
45:d1:29:dd:7f:cb:c1:6b:57:28:db:d6:6a:3a:55:1d:35:d3:
52:b8:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org