Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F5828E45AA11EFAE7FA786762E951A.roa
File: 27F5828E45AA11EFAE7FA786762E951A.roa (raw, json)
Hash identifier: 2uixs1aDT1Wuq+exsPJg8umZvsWzfTEzOEqLyzfVxdY=
Subject key identifier: FE:25:DD:63:20:00:12:98:AD:A8:62:46:D8:CF:E9:AD:93:04:1A:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F5828E45AA11EFAE7FA786762E951A.roa
Signing time: Fri 19 Jul 2024 08:37:39 +0000
ROA not before: Fri 19 Jul 2024 08:37:36 +0000
ROA not after: Mon 29 Jul 2024 08:37:36 +0000
asID: 138456
IP address blocks: 45.194.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40360 (0x9da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:37:36 2024 GMT
Not After : Jul 29 08:37:36 2024 GMT
Subject: CN=669a25d3-25f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:fd:b5:90:49:e5:df:23:7e:96:29:2c:28:
87:ca:1b:a6:a6:7a:08:ed:b0:44:65:79:99:1b:41:
de:ce:32:64:46:d7:be:22:33:68:55:18:94:ae:0c:
4e:e0:b1:dc:9a:23:ae:ac:7b:01:c8:06:94:fa:e8:
f9:7e:8f:4f:d3:2b:19:d6:12:f7:64:04:cf:e3:62:
7c:83:20:c6:fb:a7:2b:b6:f7:57:d2:5c:69:35:6c:
e4:6c:7d:6e:53:f1:c6:ad:cd:72:c1:33:e2:3f:3e:
9d:08:49:e9:e9:e6:64:fa:6c:75:c7:6d:33:eb:9c:
4f:75:b7:71:32:7e:76:22:6f:9a:77:cd:9a:84:dd:
06:68:87:fa:b9:60:14:41:48:6b:b9:b6:db:98:b9:
d9:db:88:dd:e6:72:17:ea:28:ff:d7:99:49:b5:97:
5c:92:10:00:68:20:8c:50:36:29:d2:88:ad:57:15:
93:a4:df:c2:e6:9d:d9:80:15:31:63:b1:a8:3d:47:
cf:b2:50:c1:76:32:5e:53:7b:f2:9d:c5:2f:19:f2:
c6:41:fa:7c:f9:0c:3d:03:7d:4a:21:16:40:03:e6:
a2:89:33:9b:5a:5a:ca:8c:e9:21:c8:a7:ad:de:e4:
14:27:7b:a7:70:ce:15:12:35:2b:3b:ff:99:1c:d5:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:DD:63:20:00:12:98:AD:A8:62:46:D8:CF:E9:AD:93:04:1A:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F5828E45AA11EFAE7FA786762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ca:54:bd:6e:72:a8:52:49:79:26:b6:f1:29:d6:96:45:8d:
12:69:bc:7e:e2:86:f4:a7:eb:33:ac:fd:a5:9c:28:ef:9b:14:
be:c5:09:7a:c2:b7:d7:7b:6a:8d:53:1c:91:d3:42:1c:81:87:
f6:eb:92:66:ad:2a:1b:14:7a:56:34:12:7b:a5:a0:a8:97:d7:
07:e0:e8:d8:b3:b7:1d:bc:d6:28:3c:b8:9e:71:90:9e:e9:30:
2c:d3:96:74:41:23:fc:bc:e2:e1:8a:4f:08:85:16:e1:6f:fe:
56:03:20:5d:fc:89:25:63:c9:48:84:89:c3:73:74:a2:7b:bf:
d5:0c:ee:d4:47:ee:b8:da:80:65:2b:3a:9a:3d:d0:7e:02:56:
d4:46:3d:a6:67:1e:db:65:4c:6e:55:18:36:09:ee:7f:27:87:
a6:26:e3:6b:99:5c:5c:31:a6:d7:8e:62:fc:24:d3:b7:44:b5:
e4:01:d1:ec:cb:01:ed:54:7b:49:6f:e1:8f:c5:f8:a4:d7:d1:
57:89:8d:cb:a7:8a:ff:b7:51:80:ff:92:cf:16:48:41:46:b0:
7d:8b:dc:2c:1e:a1:53:e5:49:02:38:fe:dc:6f:eb:28:5b:47:
dc:36:5f:c5:4e:bc:ab:b3:52:d4:d1:43:13:a7:92:fd:2f:fb:
77:2e:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:46 2024 by rpki-client on console-ams.rpki-client.org