Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CDF93407AA11EF80744E62017001B1.roa
File: C5CDF93407AA11EF80744E62017001B1.roa (raw, json)
Hash identifier: KE1uKLRnxaU8ixU3QG7jBfSEV0x5N22TPIyqfa88QtA=
Subject key identifier: D1:B1:79:FD:FD:5A:F8:D1:63:F7:3E:83:E5:10:6C:FA:65:3D:EC:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 872B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CDF93407AA11EF80744E62017001B1.roa
Signing time: Wed 01 May 2024 11:05:52 +0000
ROA not before: Wed 01 May 2024 11:05:48 +0000
ROA not after: Sat 11 May 2024 11:05:48 +0000
asID: 136950
IP address blocks: 45.195.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34603 (0x872b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:05:48 2024 GMT
Not After : May 11 11:05:48 2024 GMT
Subject: CN=6632220f-6107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:37:da:ed:a0:38:6f:3d:1d:20:87:e8:21:
9b:e3:89:0f:9f:b6:29:49:64:77:9c:77:2d:0b:f5:
3e:89:5e:97:d0:42:2e:44:2c:11:8e:80:a1:44:a9:
a0:d5:a2:56:d1:04:eb:93:aa:33:0e:20:57:78:2c:
c6:0f:02:92:4e:79:04:85:23:69:ff:ea:c1:d7:68:
ec:5c:da:3d:f4:86:48:f3:9a:83:74:a0:e0:67:61:
70:19:1f:09:4d:d9:ea:16:76:69:97:61:5d:2a:fd:
af:f3:59:5e:0e:a7:28:5c:47:73:c1:40:9c:b1:ee:
07:4a:e4:18:43:52:2b:a8:f2:1d:b4:f1:5f:64:dc:
b6:87:c7:b7:74:e5:03:e6:af:02:8f:76:b9:f1:18:
de:21:65:55:36:c7:95:19:8a:65:03:8d:33:c6:23:
91:ba:a5:70:24:05:99:6f:08:08:cd:78:de:8a:40:
f3:41:9f:ff:67:6f:3b:3c:74:4d:ea:d8:1c:c8:d0:
54:a8:25:c1:e6:7e:b5:8d:3c:e4:59:e9:5c:0a:bd:
ab:d2:f8:03:0d:34:02:e0:5b:c1:21:73:df:7c:8d:
07:27:90:bc:2b:9b:64:99:ad:39:1a:0a:58:27:7b:
d6:be:4b:24:06:1d:59:4f:75:50:6e:9f:5c:52:34:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:79:FD:FD:5A:F8:D1:63:F7:3E:83:E5:10:6C:FA:65:3D:EC:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CDF93407AA11EF80744E62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
42:16:74:76:f9:70:fa:d8:57:5f:a0:10:1f:62:ac:eb:6a:c6:
c6:4f:c3:76:ed:31:e5:e5:fa:93:06:74:6e:84:b7:fa:90:84:
37:33:0e:4e:c7:43:21:89:fa:20:28:cd:8f:24:a7:56:a5:44:
b1:49:67:b4:4d:68:ed:b5:e5:17:27:ac:87:a5:cd:7e:ae:7a:
81:64:d7:e1:cc:93:89:6a:6d:bc:4e:88:68:8b:5d:ee:68:e7:
77:fe:26:d3:8b:0c:26:20:53:97:3f:eb:01:25:3e:db:a2:be:
5c:38:ee:b9:d9:48:1b:db:3c:3b:c9:c0:3f:fd:74:8e:68:fd:
60:e9:3f:47:98:b7:6f:96:ea:fb:89:33:87:89:83:e3:e5:37:
a3:f3:fc:46:be:1b:27:1d:61:02:08:be:6a:f5:b0:ec:83:97:
32:7d:75:95:4c:71:fe:8e:07:26:97:bc:01:5c:8e:5d:05:15:
10:bb:e3:05:fb:ff:1f:2e:91:45:1f:e9:c1:fe:5a:12:47:77:
a2:ed:b0:ba:4b:83:99:bb:c8:40:f9:34:17:6d:42:4d:90:23:
af:b1:14:79:f1:cb:b1:ed:15:98:4f:16:b6:ca:ec:81:b8:db:
b8:f2:a4:c5:5d:ad:1a:a5:55:1c:57:43:2e:22:5b:5a:bd:c1:
bb:9c:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:23 2024 by rpki-client on console-ams.rpki-client.org