Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1769AA7E499911EF84736343762E951A.roa
File: 1769AA7E499911EF84736343762E951A.roa (raw, json)
Hash identifier: R3r5GLYyOET4ZZvHKM7zz7JaIf6FZgBh4OeEMgEY4J4=
Subject key identifier: 67:5A:D3:3C:11:7D:E3:C3:8E:1C:1C:D3:DD:66:86:C2:46:13:CE:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1769AA7E499911EF84736343762E951A.roa
Signing time: Wed 24 Jul 2024 08:45:34 +0000
ROA not before: Wed 24 Jul 2024 08:45:31 +0000
ROA not after: Sun 18 Aug 2024 08:45:31 +0000
asID: 138456
IP address blocks: 45.194.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40743 (0x9f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:45:31 2024 GMT
Not After : Aug 18 08:45:31 2024 GMT
Subject: CN=66a0bf2e-0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d1:fb:d9:9c:0a:cd:f3:84:4e:95:39:85:35:
d0:1e:2d:ee:b8:e2:d0:84:69:ac:ec:16:86:90:20:
6e:ed:53:0e:eb:f6:d3:40:59:2c:5f:48:39:27:01:
0f:d0:29:de:92:ad:bc:66:50:88:6f:56:94:0e:92:
17:d3:46:47:3c:0a:71:07:8b:1e:c6:e2:04:cb:51:
88:40:93:e1:1d:5e:73:eb:a4:a5:3a:e1:bd:c2:85:
15:67:2c:da:00:de:7f:4a:af:c0:ec:bf:9b:a3:61:
fb:a7:a0:17:29:dd:2b:5c:4c:96:f6:d4:8b:81:27:
4e:89:1e:10:22:50:bb:59:cc:cc:72:79:e8:0c:91:
f8:52:76:bc:d3:7c:c3:a7:75:17:13:b6:21:53:cb:
df:98:7a:e7:f8:d0:76:d3:d2:21:8c:bc:48:66:2e:
c4:43:40:5f:1e:ee:ae:59:9a:32:0d:ce:42:b4:25:
de:80:2b:3f:1f:b6:62:55:b6:5b:66:be:9c:cf:03:
4e:de:e8:18:e2:d7:a5:31:61:9a:26:6f:cb:24:9a:
28:8d:54:b0:6c:e7:d6:0d:0e:f7:25:ba:6e:2b:21:
58:ca:7d:f8:a9:1b:31:68:05:0b:a1:e1:c4:de:29:
aa:1c:14:69:4a:5b:d5:1c:29:31:61:c9:39:2d:3f:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:D3:3C:11:7D:E3:C3:8E:1C:1C:D3:DD:66:86:C2:46:13:CE:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1769AA7E499911EF84736343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:77:e7:f3:3d:29:76:0f:ce:cd:6f:25:bd:ca:2c:31:7b:bd:
fc:86:d7:96:18:76:27:89:e8:2b:a2:7c:1b:9a:11:c5:dd:af:
d8:97:7e:99:4e:09:a4:bf:df:5d:58:29:2e:00:3d:fd:27:ee:
07:76:42:a7:c1:5b:7e:06:d5:e4:be:2d:49:b9:f0:e5:ad:13:
5b:7d:1a:bd:ba:2c:eb:10:ba:e0:b7:6b:15:cb:83:a8:af:b3:
2f:29:4f:ec:9a:ef:90:62:9e:99:6e:31:1e:8c:d5:d8:a2:8f:
d2:16:f1:55:ce:17:f5:4a:48:c0:68:29:82:fb:30:bf:7b:fe:
c1:d4:02:fb:68:b6:e8:9e:a7:54:c8:b4:e9:9e:5d:b2:ae:b0:
6d:70:2e:4b:f5:01:06:a9:2f:4b:12:92:a6:a0:e6:e2:73:81:
13:5c:69:ec:5b:c7:4b:53:fc:65:c2:9b:de:e6:4f:d6:77:ff:
54:ed:05:8d:cd:52:d1:56:8d:15:b7:01:a7:a4:0e:28:fc:dc:
0a:09:da:b4:6b:74:87:9d:04:04:6f:67:72:4c:8d:ad:49:0b:
e9:27:eb:d5:b2:dd:40:0b:85:e3:a6:48:89:23:ad:e4:72:18:
2a:1f:16:10:ac:ef:23:58:a2:c0:43:2d:ac:36:6a:b0:46:7f:
f3:71:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:25:49 2024 by rpki-client on console-fra.rpki-client.org