Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDADA10627CA11EF87292BE37CDC24C2.roa
File: BDADA10627CA11EF87292BE37CDC24C2.roa (raw, json)
Hash identifier: WZ+Y4SAC0gD+N/wcNu0jQvD9+KBokSqYK8yiFw9Mv5Q=
Subject key identifier: 83:42:3E:2B:6B:15:32:F5:BA:B9:55:F8:1E:59:88:CC:81:D7:20:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9098
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDADA10627CA11EF87292BE37CDC24C2.roa
Signing time: Tue 11 Jun 2024 08:15:19 +0000
ROA not before: Tue 11 Jun 2024 08:15:16 +0000
ROA not after: Tue 25 Jun 2024 08:15:16 +0000
asID: 44559
IP address blocks: 45.192.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37016 (0x9098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:15:16 2024 GMT
Not After : Jun 25 08:15:16 2024 GMT
Subject: CN=66680797-3eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:40:fb:01:c8:a0:3c:67:19:b9:bb:be:5e:
7b:b0:de:cd:16:86:78:2d:d5:ca:f8:76:16:b7:1b:
0b:42:8f:18:ec:c9:e7:bf:11:42:fd:96:0c:53:a1:
04:ae:f7:2b:8f:90:f3:96:ed:8d:26:a7:35:8d:1c:
0d:89:eb:c3:b1:be:38:66:38:5b:1b:37:aa:72:f4:
b2:4a:fa:bc:12:92:ab:24:47:dc:1e:5c:3e:db:1b:
4e:bb:4c:a6:eb:1e:95:b2:11:67:a6:38:36:63:9d:
6d:76:b8:8e:2e:45:bf:68:40:67:b6:ef:2f:bd:ce:
5d:8a:3e:22:7a:39:5b:c5:ba:59:99:c1:4b:ae:22:
14:70:78:a1:c6:2b:bc:0a:a3:fa:04:95:a4:03:84:
58:7e:ad:81:6b:c3:5e:3c:a4:37:c1:ba:d6:05:cc:
cf:2a:0d:14:38:cb:8d:f0:89:b9:ff:f3:77:28:7e:
94:00:47:03:02:56:a6:b3:69:f5:3d:d4:00:ad:22:
f9:21:55:19:3f:36:ff:45:79:5e:20:dc:b8:8c:02:
6f:85:26:57:71:bc:ea:71:e4:b5:49:52:5b:0c:be:
d3:f0:42:12:dd:33:68:2b:09:fb:77:ad:88:b0:23:
8c:65:1d:18:9a:22:48:b1:5b:07:24:4f:4e:c6:82:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:3E:2B:6B:15:32:F5:BA:B9:55:F8:1E:59:88:CC:81:D7:20:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDADA10627CA11EF87292BE37CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/19
Signature Algorithm: sha256WithRSAEncryption
34:31:61:da:1f:ce:e8:f9:e9:e4:31:8f:e3:55:9e:0d:a0:fe:
20:27:8d:68:24:af:6b:79:94:20:51:18:59:c7:01:70:82:7f:
ff:df:41:70:37:0c:3f:66:8a:50:91:8b:9e:87:3e:37:3f:4a:
af:f5:55:fa:dd:d1:f9:17:e7:07:c1:1c:99:f5:53:b3:f0:c9:
6f:04:39:93:57:b7:db:df:da:70:d4:00:10:3a:27:c2:c2:18:
37:e2:ed:dc:bf:67:99:e9:bd:fd:10:32:7c:76:50:c3:98:4a:
9b:47:15:b2:c3:08:f0:3e:68:49:05:c5:d7:cf:38:6f:cc:01:
4f:b3:08:82:f3:75:cc:b4:9a:7a:40:c3:36:3c:58:a0:85:03:
97:83:02:69:80:71:f5:94:f5:b8:73:2a:c9:cf:99:04:a2:f1:
09:53:41:97:a2:fe:78:a5:19:3e:a1:cc:49:b0:27:cd:b4:fe:
ab:e1:28:1e:23:0e:af:43:16:54:9e:40:6a:d4:71:ac:c2:b8:
56:c4:c6:eb:96:09:68:4c:c9:55:5a:f1:f6:0e:a0:58:e8:aa:
70:27:ed:9d:34:db:16:e2:b5:30:49:0d:0a:95:b5:5e:36:a1:
1b:00:61:01:78:1e:8a:a5:38:2a:b2:a3:00:20:23:c0:99:e0:
7c:b5:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:07:59 2024 by rpki-client on console-ams.rpki-client.org