Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20AA9B16338711EFA3C7774B762E951A.roa
File: 20AA9B16338711EFA3C7774B762E951A.roa (raw, json)
Hash identifier: tY/ANfvhzJqA0D5bnE6SYG+C/h64dt2riWSLG601UwU=
Subject key identifier: 1E:EE:6F:19:A1:0E:E1:CE:94:AE:EC:FF:63:A5:1C:EC:EC:04:88:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20AA9B16338711EFA3C7774B762E951A.roa
Signing time: Wed 26 Jun 2024 06:41:33 +0000
ROA not before: Wed 26 Jun 2024 06:41:30 +0000
ROA not after: Thu 01 Aug 2024 06:41:30 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38217 (0x9549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:41:30 2024 GMT
Not After : Aug 1 06:41:30 2024 GMT
Subject: CN=667bb81d-62b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:79:8b:50:08:1e:e9:0e:56:c1:10:83:ed:
52:08:cf:b8:47:b6:35:9e:15:b2:60:dd:c4:3b:4f:
f8:4c:ef:b7:40:ba:b7:c8:db:b9:6a:45:70:80:5c:
8e:8a:a6:89:4f:d1:cf:43:88:06:38:c3:39:c0:1a:
4c:c3:90:7b:93:09:fd:1d:fb:6d:75:64:b4:71:cc:
d8:85:20:4e:dc:20:0d:dd:4b:5a:db:dd:44:ee:8d:
53:54:50:e0:2b:38:9a:59:09:5e:f1:51:68:e4:d7:
72:8a:32:e7:70:32:43:5b:8e:ab:ae:b8:44:3f:04:
08:94:b5:d3:85:ad:45:17:6f:66:0a:08:be:dd:b2:
8d:13:c1:08:a5:53:eb:20:64:27:a6:3d:42:cb:33:
3f:39:c0:da:8d:5b:55:42:dd:4a:8f:1f:20:28:c0:
2c:ea:f2:22:fb:8c:89:e6:4b:cb:4c:d4:26:51:9f:
60:8e:c1:0e:cb:f8:e3:b6:85:c7:17:4b:8a:41:2f:
e3:af:37:72:0b:64:39:65:46:79:22:25:b8:b3:6a:
97:38:b5:d1:0b:0c:ef:c5:65:6f:c8:e1:cc:8b:f9:
df:ea:45:7d:f7:f8:0e:08:36:8e:e1:a4:e0:43:4f:
d3:42:79:6f:a6:48:81:5a:ca:53:70:12:1c:3e:ab:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:6F:19:A1:0E:E1:CE:94:AE:EC:FF:63:A5:1C:EC:EC:04:88:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20AA9B16338711EFA3C7774B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
01:42:a7:4a:ec:09:96:aa:c8:fc:9c:f5:3b:4f:86:3a:2c:ef:
a4:20:f9:2b:7a:6f:11:4b:96:ad:7f:d7:2a:48:13:1d:fd:7b:
25:80:94:bd:41:fc:04:c1:87:88:ef:5a:ce:7a:6e:99:ba:ca:
ae:8a:51:f6:09:fe:6f:36:51:f7:c5:dc:e3:79:61:2b:ed:4f:
29:29:ca:91:f7:37:46:4a:61:5d:2f:7f:ec:9d:cc:2f:6b:f8:
47:72:bd:7a:b3:50:60:76:ba:af:73:5a:f6:06:41:b8:80:83:
9f:5d:46:15:6f:04:b7:88:f0:93:a8:8a:d9:61:66:12:05:fc:
7e:45:5f:fd:9b:d3:fb:02:45:3b:e6:a9:cf:98:1e:39:8f:07:
61:9a:6a:99:bd:b9:aa:3f:53:f3:de:4a:02:f4:f8:f8:93:bf:
e1:49:e3:f6:d8:d0:fc:f0:55:bc:06:3e:06:39:be:f6:67:ee:
ff:9b:85:29:18:87:53:51:a3:f3:44:3b:a3:b2:06:70:43:b4:
57:5d:65:b0:dc:0e:d3:ca:ea:32:27:a5:8c:14:8b:d1:f7:9d:
e6:a0:34:8f:eb:6e:54:3c:4c:91:01:2b:35:6f:de:56:08:b7:
e7:73:a7:bc:10:a0:90:c5:06:86:51:bf:55:4b:53:54:a2:8d:
f5:46:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org