Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D92FB847ED11EF8A96A767762E951A.roa
File: 09D92FB847ED11EF8A96A767762E951A.roa (raw, json)
Hash identifier: hxC19OhyvyZTVfnFaxaOHFpG8cAJBQDOrCvnRYeazX0=
Subject key identifier: 1D:2D:F6:42:C5:04:46:33:7D:6F:B9:F5:F5:F4:69:CD:4A:6F:B9:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D92FB847ED11EF8A96A767762E951A.roa
Signing time: Mon 22 Jul 2024 05:41:27 +0000
ROA not before: Mon 22 Jul 2024 05:41:24 +0000
ROA not after: Wed 31 Jul 2024 05:41:24 +0000
asID: 151800
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40499 (0x9e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:41:24 2024 GMT
Not After : Jul 31 05:41:24 2024 GMT
Subject: CN=669df107-3fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:fb:c4:11:0b:cf:38:40:cc:74:0d:5c:07:
dc:fa:6d:3a:8b:52:68:79:30:2e:59:75:bd:69:99:
d1:c0:52:b6:a5:b5:06:b9:d2:86:e0:24:85:22:8c:
82:60:c1:0c:f8:de:b8:df:ef:44:e4:50:f4:fa:d5:
20:7b:28:ab:14:3e:67:3c:e6:9d:62:f1:3e:b9:59:
d0:6d:f8:c8:fc:28:74:74:01:d3:ea:53:88:f9:5a:
e0:f8:34:dd:93:7a:0e:46:7c:41:1f:02:27:42:a0:
97:ec:fc:06:ac:97:7a:21:76:0e:4b:aa:2f:28:98:
ba:40:2c:8b:3d:2d:c1:f9:d5:a6:39:08:e9:d9:1b:
28:46:b3:f2:2a:60:ef:69:1a:ff:ee:8e:92:cd:68:
13:27:1e:00:b3:05:23:68:03:33:dc:fa:74:4f:ae:
f5:c5:e5:9f:5d:52:8c:80:a8:2a:08:63:f7:40:69:
b7:30:f9:73:6d:80:cb:84:11:81:60:63:83:49:f0:
66:66:dd:e4:26:b0:31:1b:d0:fb:34:98:c1:8b:f3:
a9:63:6f:be:ba:bc:ff:11:a6:00:86:f9:4d:01:dd:
1a:23:1f:30:34:bf:b8:09:05:04:b2:75:b8:05:c5:
3e:c3:8b:7d:ce:87:7c:06:e6:54:01:19:76:c9:d5:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:F6:42:C5:04:46:33:7D:6F:B9:F5:F5:F4:69:CD:4A:6F:B9:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D92FB847ED11EF8A96A767762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:65:13:0c:2f:a1:3a:3b:9e:ca:6f:56:9c:52:a1:cd:4a:bc:
9c:99:62:20:b7:30:92:32:48:c4:f1:bd:57:bb:a6:d7:f2:d2:
ac:64:83:8b:e8:3f:58:f0:c4:d8:af:47:73:5b:4e:91:a0:42:
36:ef:dc:ea:7f:cf:de:66:4d:47:f6:94:08:46:aa:5f:33:3f:
da:5b:dc:cf:83:96:47:4a:28:02:1d:2a:f6:e4:2f:a4:7d:91:
f8:b7:04:bc:e0:5b:6b:4a:e4:20:8f:2d:0f:e2:5f:d5:50:52:
aa:be:51:6c:d8:9d:17:8d:96:03:3e:1a:c2:49:39:4c:29:9d:
cf:e6:65:73:0f:8b:11:4f:1a:a5:d4:e1:4d:74:9a:c1:99:e2:
11:68:fa:57:26:4b:35:cf:08:82:b2:b9:1d:27:20:a0:7d:15:
70:52:19:4a:17:06:fd:cf:1d:4f:4f:e7:3c:68:41:2d:ab:88:
fe:b4:55:f1:df:73:70:8d:a8:4e:7f:43:09:c9:0d:73:f5:63:
65:90:a3:66:a7:22:89:43:6a:a7:63:14:8d:0f:2f:7a:26:73:
b1:8b:18:04:70:e0:a1:7f:10:2c:41:b8:f5:53:c8:58:c6:7f:
08:29:12:4e:97:c4:dd:da:c4:a6:73:30:b1:13:70:fb:1e:0d:
30:af:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org