Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F67C0B2008411EFAE6EF516017001B1.roa
File: 0F67C0B2008411EFAE6EF516017001B1.roa (raw, json)
Hash identifier: hWQ+h/0s44fiYr9x05v3BK6ZWteLiS7RzUvIBir/VRY=
Subject key identifier: FF:A7:A0:5B:2A:96:51:07:8B:EF:27:3A:67:3D:91:44:81:1C:3A:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F67C0B2008411EFAE6EF516017001B1.roa
Signing time: Mon 22 Apr 2024 08:41:07 +0000
ROA not before: Mon 22 Apr 2024 08:41:03 +0000
ROA not after: Thu 02 May 2024 08:41:03 +0000
asID: 44559
IP address blocks: 45.197.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33751 (0x83d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:41:03 2024 GMT
Not After : May 2 08:41:03 2024 GMT
Subject: CN=662622a3-a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:01:ba:f2:6c:dc:9b:9c:3b:f6:27:72:9e:
78:eb:e1:06:a3:a5:e3:1f:a7:0b:45:71:a4:0f:96:
96:6e:59:b9:a4:4a:5e:11:36:41:a4:d8:f9:5a:11:
2f:a2:26:4c:88:b1:8b:e5:14:ea:a9:7c:a8:d5:fe:
96:d0:d1:26:be:93:a9:4a:ab:4b:77:26:ec:59:4c:
4b:d4:fa:18:67:7b:06:86:a7:1f:7d:74:3b:15:7e:
4e:43:1c:d5:d4:22:10:cf:2a:24:cf:4c:d8:1b:9c:
f4:5c:0e:4e:e8:5c:b1:31:8d:a5:19:6f:42:4a:ae:
f0:61:d5:5e:77:5e:88:d3:5d:aa:99:3a:1f:83:a8:
1d:db:cf:47:f1:5b:0c:56:54:e3:bd:9f:66:90:d6:
ed:f1:ea:cf:26:8b:f9:a3:3c:0b:24:0a:8a:e4:2c:
e1:df:03:b4:b8:eb:d5:89:82:77:71:34:7d:3b:e3:
9d:00:7a:22:ac:b9:ca:20:09:54:b7:a6:ac:aa:e0:
82:69:3d:f6:86:bf:94:c5:45:36:13:5f:6d:3e:9f:
52:f3:3b:65:26:cb:b9:6b:21:4a:c0:e1:ef:25:60:
74:dc:44:16:8d:08:cf:a4:a5:6c:24:ee:77:21:0b:
88:84:64:d8:cb:ea:f0:e6:d3:b2:5c:0a:9c:f2:6e:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:A0:5B:2A:96:51:07:8B:EF:27:3A:67:3D:91:44:81:1C:3A:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F67C0B2008411EFAE6EF516017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:b9:06:c0:dc:e8:50:de:18:e9:9e:e5:eb:68:aa:21:48:f3:
c2:5d:04:2f:cc:dc:90:a3:a8:05:5a:53:8b:90:8c:78:bd:16:
ac:e6:6f:fc:5b:2d:8f:84:36:79:a9:fc:ff:41:78:34:dc:43:
2b:46:f4:1a:8b:60:9c:fb:0c:8e:02:10:9e:86:0e:59:f4:54:
9b:22:5d:80:ca:a5:b4:43:97:b3:d4:c9:e1:28:df:b1:a2:3d:
84:fb:3e:04:48:3e:8d:b6:13:e3:cd:c0:a3:96:5c:fc:12:9c:
ed:c0:ca:de:37:3f:c8:23:3e:00:f7:1d:43:40:a9:73:7e:64:
fb:5a:09:fd:a7:de:95:47:06:85:50:8b:d7:58:a7:21:c2:18:
0e:23:c5:3a:ce:06:9f:f8:2c:f6:45:b1:48:00:fa:e1:e9:c7:
fc:fb:cc:04:2d:e6:01:2d:57:ff:4d:b3:69:f1:2c:60:7c:59:
2a:ba:3d:49:ca:e6:44:63:1e:b4:fe:3b:d1:aa:a5:e5:79:60:
b8:46:7b:93:2a:22:b8:49:9e:57:d2:f5:2c:a8:17:b7:36:5c:
ce:91:58:a3:9b:96:c0:69:d8:b3:db:ad:83:9d:8d:04:49:7d:
7f:e0:5d:c0:a9:3d:89:60:8e:e5:6b:dc:59:9f:4e:30:96:23:
06:91:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:05:53 2024 by rpki-client on console-fra.rpki-client.org