Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11760E54FAC611EEB87AEE3C017001B1.roa
File: 11760E54FAC611EEB87AEE3C017001B1.roa (raw, json)
Hash identifier: M9RTJ2oXXKIgMTidiUek5856qYTSm+RAhW8LMCQvn08=
Subject key identifier: 28:C8:A5:05:1D:7D:C5:ED:78:DA:4A:C5:59:A3:C5:63:BA:80:F3:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8264
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11760E54FAC611EEB87AEE3C017001B1.roa
Signing time: Mon 15 Apr 2024 01:18:30 +0000
ROA not before: Mon 15 Apr 2024 01:18:27 +0000
ROA not after: Wed 24 Apr 2024 01:18:27 +0000
asID: 136950
IP address blocks: 45.195.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33380 (0x8264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 01:18:27 2024 GMT
Not After : Apr 24 01:18:27 2024 GMT
Subject: CN=661c8066-436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:6d:b3:06:06:68:eb:a6:42:29:6b:a8:ab:
e2:bb:9b:0a:98:a6:f7:e6:ba:87:70:3a:8f:b0:4b:
cd:12:70:22:d6:20:09:87:98:ec:dc:1c:70:23:9e:
87:ff:d8:1f:9a:7f:b4:ef:22:09:74:4a:74:89:74:
ec:d8:9e:bd:99:be:cb:a1:3a:8e:72:ab:f7:f9:5f:
6c:dc:ce:e7:4a:e6:66:49:a7:e0:fa:b6:6b:c6:61:
e6:c9:24:37:3f:e4:9b:98:96:18:98:64:ad:3e:79:
0a:de:de:27:8b:8c:7e:0b:75:3b:19:12:7e:53:96:
e8:d8:ce:f3:dc:38:ec:14:a8:d9:be:75:44:48:6d:
f9:48:d7:1a:a4:43:8e:02:4d:7b:4c:86:62:84:26:
43:46:33:65:57:28:61:74:82:ca:cc:98:5c:ef:87:
53:fe:55:8c:e7:48:db:75:0d:4f:83:53:6a:9e:94:
54:62:de:be:0c:df:7b:ab:91:0a:82:8e:c0:3b:fe:
87:64:8d:14:69:4d:a5:86:fa:e5:37:fc:3b:b2:f9:
04:f5:f5:65:b2:85:7f:b3:82:5c:42:7b:40:2a:59:
c2:03:23:1e:53:43:46:ac:d3:04:35:db:6c:ac:6f:
74:91:e2:f3:4b:b6:b9:59:01:64:8a:0f:30:1d:ad:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:A5:05:1D:7D:C5:ED:78:DA:4A:C5:59:A3:C5:63:BA:80:F3:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11760E54FAC611EEB87AEE3C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2b:85:74:a3:89:81:8b:0f:4f:41:a3:2a:84:65:5b:e1:ad:
ba:ba:25:47:f3:b4:42:93:db:65:f0:0b:93:d6:bd:2e:4e:b1:
cc:9b:eb:ad:51:e5:45:5d:33:a1:c3:93:4d:a5:aa:fd:56:69:
bf:84:a8:81:17:e1:1e:b1:d7:58:80:29:7f:c0:be:0d:54:78:
49:77:fe:3a:e2:38:c1:55:a3:76:99:3c:1a:c7:db:86:3b:32:
89:0b:fa:86:56:ec:5b:69:ee:27:c8:76:46:2c:b4:4d:e5:96:
b2:82:df:1e:bf:67:39:81:df:bf:c3:11:42:c3:a2:81:06:f7:
f6:ba:eb:b2:65:b9:90:88:46:dc:5e:0e:11:0e:e6:96:b1:54:
b1:11:f2:e5:3e:37:80:b2:8a:c0:e2:e1:d6:08:12:da:f7:e4:
79:49:32:16:3f:6f:c5:24:5b:f0:bf:c3:0f:ca:11:fc:4a:5f:
c0:4a:dc:64:49:eb:5d:63:42:e0:46:e5:82:3b:cb:3a:de:a1:
08:14:08:c6:ba:a7:74:44:13:11:a1:a5:d4:f9:8a:45:57:3f:
3f:fd:7f:a1:05:52:11:1e:ba:8e:3e:91:97:35:25:5b:78:5f:
a6:68:01:a9:71:60:0f:c5:5d:8b:0a:b0:79:e3:03:4f:6d:8a:
96:1c:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:04 2024 by rpki-client on console-fra.rpki-client.org