Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18C0E1C6321011EF9E969AA0762E951A.roa
File: 18C0E1C6321011EF9E969AA0762E951A.roa (raw, json)
Hash identifier: WBxeoSJkHhWlUIW+2nNkW+7JzCSsV+7cv+CinNxPGZo=
Subject key identifier: 6E:F0:54:C2:29:FE:FF:0E:1E:58:15:9B:75:16:05:19:14:74:71:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 945B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18C0E1C6321011EF9E969AA0762E951A.roa
Signing time: Mon 24 Jun 2024 09:56:59 +0000
ROA not before: Mon 24 Jun 2024 09:56:56 +0000
ROA not after: Sat 27 Jul 2024 09:56:56 +0000
asID: 20473
IP address blocks: 45.200.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37979 (0x945b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 09:56:56 2024 GMT
Not After : Jul 27 09:56:56 2024 GMT
Subject: CN=667942eb-f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:7f:0d:5b:3e:af:fa:78:31:08:c6:02:d7:
45:3f:02:15:5f:e1:e0:c8:12:15:63:cd:f2:a7:47:
60:dc:dd:fa:c7:92:07:ca:11:5f:6d:07:ee:30:1c:
d3:29:70:71:3b:74:5b:8a:6f:e9:3d:42:a6:da:c5:
bc:15:7e:a5:4f:49:96:ec:b5:6c:5a:2d:87:71:ce:
17:66:be:f1:11:a4:0d:fb:2b:48:1f:16:37:18:26:
a7:f1:28:10:fb:2a:e1:10:74:bd:da:6d:5d:8b:38:
a0:ce:4f:75:61:87:13:33:1b:f9:c6:e3:3a:2a:74:
6d:67:10:bd:f4:a8:53:99:85:a1:fb:29:53:4c:c2:
c1:c7:89:8a:c7:21:c7:40:78:85:0a:8d:1b:71:3f:
85:55:69:3b:93:cd:79:0f:b5:e0:d2:c0:97:ec:5d:
e2:26:72:cb:03:bb:f5:50:6d:1c:c9:4a:83:25:86:
7c:7c:6c:c0:c3:ac:af:92:e3:18:b2:2d:3c:27:82:
20:63:c8:f1:3b:de:83:c0:6d:86:9d:48:16:41:79:
8f:6e:96:e9:1e:ab:54:97:ff:7e:74:b4:77:b0:b3:
01:e9:dc:dd:3d:68:3a:61:04:03:b8:07:60:49:9e:
15:5a:fb:03:bf:7d:1a:86:4c:9a:b8:4f:6b:0e:27:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:54:C2:29:FE:FF:0E:1E:58:15:9B:75:16:05:19:14:74:71:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18C0E1C6321011EF9E969AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:30:5a:10:37:7e:51:81:eb:ab:95:7e:af:f1:cf:ec:2c:ba:
df:fb:ed:b3:07:a4:b9:5f:f5:b7:e7:22:ed:c2:c5:1f:79:67:
ff:04:1e:b8:5e:93:89:86:1d:46:a1:f5:9c:3e:96:ff:29:45:
d8:d4:60:67:37:5e:a9:b7:44:80:15:06:91:50:d5:46:65:04:
60:a3:57:ce:49:ae:54:96:b1:83:77:f4:d6:7c:2a:27:5d:d5:
40:ae:6c:4a:a5:f2:e1:fc:75:46:af:e5:c2:8f:7c:cf:d2:c9:
42:76:3c:eb:e8:6e:da:32:80:ef:cf:b3:4b:9a:ce:b7:c2:9f:
60:72:4b:f8:cd:23:0f:8f:ca:40:67:41:33:1c:f8:f8:24:44:
57:dd:11:26:06:34:6d:6c:12:f3:35:d3:36:c1:20:f4:e4:0a:
9e:65:5c:96:23:66:b2:94:e7:13:4e:d2:e7:26:1a:2b:35:a2:
a0:7c:5f:4f:65:b4:cd:24:69:09:6c:c7:98:c5:07:4d:cc:ee:
23:a8:79:8f:43:95:d5:1f:cd:78:44:06:72:bc:2e:35:93:66:
3c:58:97:56:0b:3d:be:1f:88:35:1a:8c:da:2a:82:0a:d1:83:
40:d1:eb:5d:52:c7:e6:70:df:8c:ec:0b:91:c3:db:35:ec:fb:
aa:25:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org