Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CAE5FE4A5C11EFB6B3C271762E951A.roa
File: 04CAE5FE4A5C11EFB6B3C271762E951A.roa (raw, json)
Hash identifier: mrtpKO+UTJb80C5KKgUepZvxCIVykRALPl/in+ZoI6M=
Subject key identifier: 05:30:27:F6:70:E9:F8:B8:E5:17:31:AA:E6:3A:9F:68:FA:D1:3D:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CAE5FE4A5C11EFB6B3C271762E951A.roa
Signing time: Thu 25 Jul 2024 08:00:55 +0000
ROA not before: Thu 25 Jul 2024 08:00:52 +0000
ROA not after: Sat 03 Aug 2024 08:00:52 +0000
asID: 174
IP address blocks: 45.195.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40907 (0x9fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:00:52 2024 GMT
Not After : Aug 3 08:00:52 2024 GMT
Subject: CN=66a20637-6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:22:fb:c3:ee:6f:da:f5:74:ec:5b:b1:c4:
98:21:5a:8c:63:fb:b4:f1:a9:aa:4f:64:e3:f7:b6:
56:7f:2e:98:90:80:47:68:a3:74:04:82:43:45:d9:
4e:1d:b1:d7:de:41:a3:a0:03:68:04:66:30:7e:70:
ff:e4:e5:58:17:72:07:96:b3:14:bb:62:47:76:2c:
a1:ed:e8:d2:46:08:77:ee:1e:69:26:3f:85:22:0d:
16:47:05:14:dd:eb:11:e0:f1:32:8e:ae:9c:c3:3e:
54:23:6d:ac:36:af:97:e3:ae:c3:d4:e5:df:1a:38:
b5:f6:5d:20:35:a5:7e:9e:87:46:45:56:c0:ee:51:
2f:87:e1:4a:aa:67:b5:b1:3f:f0:6e:97:05:61:c6:
71:49:14:03:cf:d1:40:62:44:0e:12:43:61:76:7a:
be:56:11:c5:1d:ff:5a:70:03:61:73:14:6b:b0:f0:
66:69:5a:e1:00:7f:47:5a:92:ea:e6:ed:0e:bc:80:
d7:6a:7b:d4:4f:b7:e3:6e:9c:20:3a:ba:c4:42:85:
0e:c4:00:3a:63:a5:68:67:84:da:d9:44:18:e8:14:
8b:48:35:3e:d0:3e:98:45:e3:94:48:84:0a:fd:0e:
ed:d9:ea:c5:14:0a:bc:38:39:d5:4d:ab:79:be:f7:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:30:27:F6:70:E9:F8:B8:E5:17:31:AA:E6:3A:9F:68:FA:D1:3D:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CAE5FE4A5C11EFB6B3C271762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.10.0/23
Signature Algorithm: sha256WithRSAEncryption
40:38:92:04:f6:24:63:96:93:78:15:52:b0:97:a5:05:04:8a:
1b:03:75:6e:36:b8:2c:a6:fa:39:3b:c8:7f:fd:d3:47:f3:2b:
ab:1d:a8:22:b2:3a:74:fd:e2:fc:87:f4:56:e4:b2:9f:fa:8c:
88:92:01:c3:07:35:b5:c8:1f:2a:d6:93:12:da:b0:18:08:06:
97:cd:1e:52:7b:bd:9a:76:fc:09:f3:72:7a:6d:81:7a:3e:9f:
e4:07:02:4a:94:43:d5:14:c9:d0:1a:62:e1:c7:0f:03:e4:b8:
3d:be:31:7e:6a:49:2b:50:2f:9f:f3:e3:1e:05:6d:f6:0a:39:
f2:4c:a8:d7:dd:dd:99:6f:c5:0e:53:d2:cf:29:79:62:60:24:
9d:8a:76:6a:e2:a5:35:18:4d:e3:fd:2b:7d:09:21:e7:f5:9d:
be:e9:99:51:15:61:8f:db:d3:48:a1:5b:d6:64:c0:1f:b6:69:
ee:90:59:64:75:d9:dd:f0:88:b0:f7:79:bc:77:b1:60:67:66:
30:29:68:e3:82:e6:de:91:2b:87:d5:55:b4:e1:90:39:05:ef:
92:d6:1a:b1:f2:2a:bc:d9:b1:fe:83:bf:3b:c3:26:c9:b8:ea:
c3:92:9b:59:76:6e:be:4f:1b:a9:4c:93:e9:4c:b1:b2:0b:c5:
9a:6f:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:23 2024 by rpki-client on console-fra.rpki-client.org