Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145AA5423E9811EFB9FCAA45762E951A.roa
File: 145AA5423E9811EFB9FCAA45762E951A.roa (raw, json)
Hash identifier: gM8QG1DHo85YBTfVzaYUgMUT2GpzQlekRrGn0hqt8Ek=
Subject key identifier: 6A:9F:59:3A:C6:2E:6E:AD:25:4C:A9:A2:0E:DA:AB:B7:76:AD:66:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145AA5423E9811EFB9FCAA45762E951A.roa
Signing time: Wed 10 Jul 2024 08:40:37 +0000
ROA not before: Wed 10 Jul 2024 08:40:34 +0000
ROA not after: Fri 02 Aug 2024 08:40:34 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39494 (0x9a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:40:34 2024 GMT
Not After : Aug 2 08:40:34 2024 GMT
Subject: CN=668e4905-f8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:fe:c7:e0:3b:c6:af:0b:d6:73:d0:ef:33:
fe:06:f0:49:17:2c:58:0e:ca:ce:79:8c:5a:f8:8e:
81:c9:63:82:fb:6c:3d:8d:4b:4d:d4:7e:f0:2c:fe:
3b:9f:2a:63:65:48:20:d3:6a:2e:2d:ad:dd:a3:67:
3f:28:e2:2b:1b:76:d3:6f:cc:47:7a:74:3e:d2:01:
bb:45:a0:c8:87:f1:a0:bf:c1:19:6d:07:3e:b3:a3:
9b:c6:84:de:d4:01:aa:e3:87:75:26:7d:9a:bc:dc:
d5:0a:ff:09:ce:51:1e:49:4b:e8:4a:20:a5:00:ca:
88:ba:01:e9:89:8a:49:4a:de:de:ae:c9:5f:2d:69:
c1:05:d0:40:de:90:f3:42:e8:92:a6:f0:47:20:7e:
ef:74:27:0f:bb:a8:6c:7a:7d:f5:5b:d6:d0:e5:6f:
3f:16:f1:30:f1:2d:b1:a5:4c:0e:ea:b8:58:f9:18:
d6:ea:52:0d:01:59:96:4a:45:34:5f:85:d7:89:bb:
67:89:23:b4:63:48:be:0a:90:65:b5:da:71:af:c3:
f4:6f:57:ee:e9:d9:71:23:f4:bd:37:0d:98:97:bb:
02:f9:f4:8a:83:e1:2a:d5:fc:60:49:4a:6e:63:81:
f7:87:7e:df:f0:8c:1d:a3:7c:2b:b6:d0:ff:1b:02:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9F:59:3A:C6:2E:6E:AD:25:4C:A9:A2:0E:DA:AB:B7:76:AD:66:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145AA5423E9811EFB9FCAA45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
54:8a:7b:49:e7:fe:fb:54:35:f8:39:d6:e7:e2:64:8d:3b:f3:
c7:8c:e3:a5:85:0b:5b:f2:c7:71:c0:0d:e8:5a:7a:a3:ed:bc:
b0:e2:1e:11:6e:2b:20:b1:fd:84:0c:83:4a:95:3a:c4:bc:76:
32:31:a2:83:52:1e:51:75:67:65:6e:66:49:82:99:4b:a9:83:
d0:0d:77:ce:4b:7b:58:c6:79:3a:a1:ec:13:af:77:5d:8a:34:
4e:c8:d6:57:56:86:b9:02:db:8a:a8:d8:68:3c:f5:a3:ec:a0:
eb:bc:e3:57:e2:94:b6:8d:00:5b:b4:19:3f:7f:51:eb:15:c3:
4d:c4:0f:07:0a:53:1c:d3:b5:ba:4a:7b:b6:14:73:05:43:fe:
4a:2c:8e:3d:94:01:fe:c8:0a:bd:fb:58:68:61:53:49:e3:2b:
2d:54:25:1a:02:1f:7a:69:ba:71:18:d5:a7:d8:fa:e3:c4:21:
b4:28:2b:f2:62:c1:6c:ec:b1:4a:bb:5c:8c:8e:e4:4b:74:ea:
04:bb:da:1d:85:65:69:0b:9d:f0:7d:5c:23:7b:89:d8:d6:24:
be:c3:89:67:81:1f:42:bf:14:3f:fe:89:be:71:6c:6d:81:4c:
0f:7e:bf:f3:bf:24:89:22:2e:63:43:97:0e:65:72:fb:ce:72:
28:64:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org