Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29604BC8EF9711ED912F52874AD9E6FC.roa
File: 29604BC8EF9711ED912F52874AD9E6FC.roa (raw, json)
Hash identifier: jfuQTWXAhewe+1JSajxZ5WDV2UsPzkIS6aTSbo8V1nw=
Subject key identifier: 50:F4:D6:A9:76:22:45:D8:4B:8D:90:47:15:7A:C3:0E:42:F5:CF:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 203A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29604BC8EF9711ED912F52874AD9E6FC.roa
Signing time: Thu 11 May 2023 01:00:03 +0000
ROA not before: Thu 11 May 2023 00:00:59 +0000
ROA not after: Thu 25 Apr 2024 00:00:59 +0000
asID: 26617
IP address blocks: 45.195.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8250 (0x203a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 00:00:59 2023 GMT
Not After : Apr 25 00:00:59 2024 GMT
Subject: CN=645c3e13-fd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:1e:a3:dd:1c:37:a5:47:c4:2a:72:9e:34:
e7:4e:84:84:c7:91:dc:01:40:ba:58:1e:2f:28:ef:
3f:fc:fe:9b:3f:a6:3a:56:3d:53:2d:91:48:7a:9e:
fa:76:8c:3a:d0:c6:be:a1:00:76:58:97:77:3b:e6:
99:ef:1e:91:ef:0c:89:68:1c:b6:66:c1:91:f2:98:
5f:75:af:7c:ab:67:00:3a:b7:17:12:5e:d9:e1:a1:
2e:5e:8a:cc:ab:26:29:45:fa:4a:8e:7d:b2:7a:80:
c7:4c:f4:c2:25:92:9d:6c:a6:e7:aa:b6:a1:7d:e8:
3a:18:d7:6c:23:df:83:fd:43:21:3e:b6:8c:35:76:
42:74:3e:bb:f5:4d:98:68:e4:40:77:77:c9:35:6b:
4a:03:cd:bb:ca:b8:8d:5c:f6:72:f0:5f:fa:c3:28:
f7:a5:e4:e1:37:fa:cc:f8:0b:b5:27:75:ad:c3:04:
fc:3f:39:e3:c8:78:95:e0:f6:7d:d5:d4:8e:8f:ec:
c3:36:97:f1:17:53:90:91:87:3f:9f:c0:43:7a:6e:
17:f5:1e:f3:5b:6b:57:e9:b4:8e:20:ce:c6:8a:36:
6d:bc:35:06:ec:47:30:51:3b:19:fa:46:84:35:ba:
4f:5d:e2:c9:71:cc:f7:1b:13:41:78:20:59:e3:20:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F4:D6:A9:76:22:45:D8:4B:8D:90:47:15:7A:C3:0E:42:F5:CF:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29604BC8EF9711ED912F52874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.146.0/24
Signature Algorithm: sha256WithRSAEncryption
44:01:de:06:45:9f:2e:bd:7f:9e:05:40:c3:9f:9a:8d:1b:a3:
92:fe:d4:9d:c6:cf:63:a5:69:d6:ff:14:67:6c:a7:5f:99:3c:
e0:89:4b:38:b7:bf:95:ae:94:77:32:e4:68:9e:68:bd:18:6f:
70:0a:5e:37:f4:8e:8d:f0:12:d6:27:5e:a4:7d:2b:8c:b4:7a:
ef:2a:55:24:5e:b1:41:b1:84:d6:dc:2b:fc:f0:4d:e9:88:2c:
e5:c7:40:b5:be:77:80:f1:07:58:56:de:62:2a:f8:d9:b7:f8:
72:d0:08:b4:e0:1e:67:26:6a:68:3c:73:db:00:82:39:04:dc:
d8:dc:4f:93:a6:27:d9:9d:da:23:7f:41:6d:f4:73:a8:df:45:
be:ba:ac:0d:41:d2:ac:09:15:9b:10:e7:17:af:11:3f:fa:10:
4b:6c:53:52:43:5e:44:fa:eb:4d:95:7b:e1:af:04:9c:73:b5:
4c:16:c0:d6:1c:82:5d:90:92:f4:a0:66:e8:01:b7:97:11:ff:
3f:bc:cc:56:eb:12:57:cf:e3:72:58:6e:b8:b2:1c:73:de:72:
8d:82:63:a0:45:47:84:e7:1e:76:a9:e4:e4:e5:89:b5:db:bd:
bd:24:a1:0f:30:89:b1:d3:39:eb:95:12:7f:ad:a1:4b:b9:63:
63:f9:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:26:58 2024 by rpki-client on console-ams.rpki-client.org