Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/096278ECF0C611EEA7ADA59B775412E6.roa
File: 096278ECF0C611EEA7ADA59B775412E6.roa (raw, json)
Hash identifier: 6gtb97aGpdmLbBlMSJJhTkZv0u4N/TPfY8ZObgL+t/o=
Subject key identifier: B8:8D:1C:85:7D:FE:F1:B7:4E:05:F4:69:56:94:69:E0:AD:87:A7:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 815C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/096278ECF0C611EEA7ADA59B775412E6.roa
Signing time: Tue 02 Apr 2024 07:53:05 +0000
ROA not before: Tue 02 Apr 2024 07:53:01 +0000
ROA not after: Mon 29 Apr 2024 07:53:01 +0000
asID: 139646
IP address blocks: 45.201.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33116 (0x815c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:53:01 2024 GMT
Not After : Apr 29 07:53:01 2024 GMT
Subject: CN=660bb961-237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:0d:50:44:e1:e2:7b:21:0d:5b:8d:e0:b9:
dc:59:83:d3:92:dc:2b:d3:99:95:70:ac:34:2a:72:
f0:eb:1b:5d:8f:21:b7:9d:54:e2:4a:af:9e:b9:e3:
5d:a4:5f:fb:cf:a3:17:a2:7a:14:b7:d9:9f:93:73:
79:4a:e3:f2:1f:32:4a:e5:ba:59:ac:9e:4c:bd:fc:
c0:d1:a3:03:2b:09:ad:58:0b:d7:4d:5a:d8:a1:71:
e8:b7:6a:09:65:62:88:71:73:88:fe:6d:5e:cc:92:
e2:4f:49:d4:6d:25:db:5e:5a:3f:1c:4f:bd:64:b6:
5c:59:93:21:1e:bc:cd:48:17:2f:8d:7d:9f:0f:fd:
ba:2b:c4:ba:e4:91:f3:a0:4a:eb:fe:5b:c2:0c:71:
e3:9c:9c:be:42:02:46:0a:00:bd:60:7e:8e:10:25:
6a:a6:0d:ee:2e:ef:91:a5:5e:44:c6:09:6f:ec:87:
37:d6:30:e0:11:32:57:41:c5:f3:82:11:77:75:f5:
4b:e5:e7:1b:d8:c8:0e:e3:bd:72:06:2b:ed:40:01:
dd:68:33:cc:f9:ed:77:85:59:b8:40:92:a2:07:4d:
14:d5:16:a0:fa:49:a0:e6:b8:f6:46:23:b5:57:94:
a4:2b:eb:46:49:d4:e7:da:b3:9b:b5:09:00:b2:45:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:1C:85:7D:FE:F1:B7:4E:05:F4:69:56:94:69:E0:AD:87:A7:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/096278ECF0C611EEA7ADA59B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.248.0/23
Signature Algorithm: sha256WithRSAEncryption
17:c4:f6:de:21:ff:13:cc:c6:09:00:30:49:dd:b9:6e:a2:d7:
ff:35:46:78:71:32:76:68:ef:51:d6:e4:dc:37:73:f1:d2:46:
cc:ec:00:e1:ff:f8:e4:ed:12:82:c8:b1:3b:50:61:7e:a9:42:
d4:21:8b:8d:69:25:f2:b6:82:5d:bd:3b:4e:81:53:6a:bf:03:
fe:0e:c0:22:3b:b0:4b:a5:ce:e1:91:bb:dc:ec:91:bc:ce:25:
8e:0e:ea:9d:7c:b7:32:f1:82:b7:2b:a1:88:e0:ee:b8:55:01:
31:20:a1:77:8a:ff:b6:27:d4:23:e1:58:0b:df:75:86:cf:6b:
e9:eb:89:06:27:7c:89:9d:ca:5e:35:8d:77:86:eb:b1:ff:cf:
c3:4a:5d:98:ce:5d:42:8c:c9:3f:78:a1:85:8b:d1:2a:55:a3:
42:80:ad:7c:2c:d9:03:f8:6a:67:62:35:23:19:84:b9:15:8c:
aa:88:1e:54:e5:88:d3:ec:f1:28:db:80:b7:5d:56:a8:d8:ea:
fa:ca:44:c0:39:4a:5a:72:89:93:d9:4e:a5:6e:a0:9c:33:ff:
83:ab:06:4e:53:47:38:07:dd:59:a3:40:67:44:cc:51:f0:eb:
18:82:ef:9d:b9:03:15:ea:6e:df:90:b8:f4:fe:2b:38:76:2a:
7e:1f:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org