Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C8323B8156111EE903D98564AD9E6FC.roa
File: 1C8323B8156111EE903D98564AD9E6FC.roa (raw, json)
Hash identifier: 0uLX+xKGknRlX05IrANkv3yF8A68yoqSuamjEWlwbeQ=
Subject key identifier: 01:53:EE:A6:45:77:EF:6D:37:29:EA:28:EB:B0:00:5C:77:08:D2:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C8323B8156111EE903D98564AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:08:53 +0000
ROA not before: Wed 28 Jun 2023 03:08:49 +0000
ROA not after: Wed 01 May 2024 03:08:49 +0000
asID: 140227
IP address blocks: 45.194.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11654 (0x2d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:08:49 2023 GMT
Not After : May 1 03:08:49 2024 GMT
Subject: CN=649ba445-ef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:cd:ba:86:0b:d0:8c:5e:af:08:9f:b3:45:
b4:ba:31:76:dc:27:0c:6a:59:d6:4f:dc:53:98:b1:
ee:eb:7a:1f:3c:3d:06:04:d7:49:8d:f2:a6:dd:bb:
ac:2b:8f:0d:18:1e:d4:a8:c1:2d:3e:ed:5e:fb:e1:
64:3f:b0:f6:63:d8:f5:9a:81:a6:66:e7:87:92:c3:
94:aa:f1:4c:c7:59:df:13:b3:9a:cd:00:7c:27:2f:
9f:22:eb:50:13:7d:aa:d3:a5:3b:12:11:d7:c2:19:
aa:5d:55:45:d7:bb:60:16:a9:29:0d:ef:8b:f4:fb:
ea:95:65:90:00:87:2a:65:a2:f1:23:19:f6:a5:d0:
b4:9d:d2:27:3d:a6:e9:6c:3c:6c:a1:26:01:81:23:
f1:23:e4:10:b1:90:0e:ab:c1:69:ed:88:6e:e0:c4:
98:38:13:7d:45:46:bd:07:0d:ab:61:c7:9e:d5:98:
e1:55:a0:21:da:0e:6a:5d:7e:d0:8e:8d:96:29:99:
3b:18:cc:bc:d9:fe:01:92:45:6b:07:26:e7:8a:7f:
28:a9:65:d3:24:91:ab:d8:a9:8a:6b:76:45:03:82:
e6:1c:24:0a:17:f1:d3:f4:25:51:73:3f:8d:d2:76:
1c:00:3e:02:78:db:f7:2f:74:ae:28:75:42:0e:79:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:EE:A6:45:77:EF:6D:37:29:EA:28:EB:B0:00:5C:77:08:D2:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C8323B8156111EE903D98564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4d:cf:40:25:a5:7d:ec:f6:d4:8a:51:c8:bc:c6:e9:f1:80:
df:a4:1f:81:6a:4d:81:92:5a:0d:fb:31:3f:7e:11:e2:ab:42:
c5:1f:83:c7:a0:53:bc:0c:8c:a7:24:a4:0f:f1:2c:e1:ff:89:
d0:60:25:0b:ae:c6:02:63:0a:a1:18:e6:f2:a3:fa:00:31:04:
31:4b:76:ee:4c:76:cf:b7:8d:3f:5d:55:ac:31:00:3c:7a:c6:
5e:09:b8:79:8b:ab:d9:6f:e9:b5:2b:33:68:6b:fd:20:a9:44:
23:85:40:e8:be:c2:98:4b:1c:63:89:da:5d:92:f3:84:cd:4a:
c9:cb:0a:8d:c0:90:79:63:bb:16:32:ce:71:1c:bc:4f:e5:89:
1f:a9:c9:86:a8:ca:7f:b2:1f:be:a1:56:59:fd:31:bc:8f:61:
f1:44:18:dc:f9:3d:98:f4:3c:d6:4a:f1:c4:2e:e7:30:96:44:
ca:19:7a:a7:61:08:69:94:4a:74:e7:86:2a:bb:7c:56:0a:8c:
58:5e:72:fb:2a:ef:37:ae:b1:1c:d9:92:7e:0e:1f:0d:06:9e:
dc:90:c6:fd:3b:d3:8d:73:e5:13:0d:12:2c:0f:d1:28:61:e3:
eb:a9:bf:56:00:74:31:37:fc:68:5f:45:a7:7b:ac:13:8a:c1:
53:75:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org