Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/298A627802F611EF9AED350B017001B1.roa
File: 298A627802F611EF9AED350B017001B1.roa (raw, json)
Hash identifier: NztT1ZGsbOw19oo0y+DIqvK9O23vIzSI8cAEIKPCGB4=
Subject key identifier: A3:81:B9:D0:2F:BE:1F:A2:02:88:C3:41:FB:68:46:B7:74:9D:F9:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8501
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/298A627802F611EF9AED350B017001B1.roa
Signing time: Thu 25 Apr 2024 11:22:55 +0000
ROA not before: Thu 25 Apr 2024 11:22:52 +0000
ROA not after: Sun 05 May 2024 11:22:52 +0000
asID: 39600
IP address blocks: 45.204.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34049 (0x8501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:22:52 2024 GMT
Not After : May 5 11:22:52 2024 GMT
Subject: CN=662a3d0f-1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:83:5d:77:4f:fb:35:fa:2f:2a:d8:e4:8b:
af:cc:a6:a7:3f:39:bd:2c:b0:e4:aa:6e:9d:96:f1:
ac:e1:ae:eb:71:f3:e3:c0:c0:32:30:04:17:ac:1f:
6b:8a:f1:85:bc:46:23:b2:c9:36:6d:ba:ef:12:2f:
3e:8d:c2:c0:41:d1:55:56:71:a4:5b:0a:cf:0a:19:
b7:26:32:6a:9a:1f:b3:44:55:16:b2:d9:04:b9:1c:
b9:26:22:80:b3:61:28:a9:f4:1b:9f:e0:b1:e3:8b:
4e:a4:de:db:1b:69:67:ac:31:3a:41:b9:1e:0a:a7:
85:49:02:f2:df:ac:f7:94:62:57:9f:7d:3b:fb:b1:
e6:49:d5:72:72:27:b2:ad:70:b7:f7:b6:38:77:93:
97:db:e5:6a:35:7a:d7:7e:10:ff:a1:91:d0:67:09:
17:ba:9b:47:0f:a9:67:31:b5:c5:e1:3d:09:7c:2f:
58:02:8a:0e:ad:28:fa:b0:b6:19:cc:b9:f9:a4:ef:
cb:01:c8:5c:b9:34:f8:4e:27:1c:a5:77:3f:91:6c:
0e:b9:57:11:46:a3:ce:f2:db:19:c3:c5:37:aa:83:
94:a8:d0:15:8a:37:6b:20:a8:67:69:ab:4b:ab:a1:
80:62:46:be:1a:b8:7c:57:f9:cc:b7:89:d4:e7:62:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:B9:D0:2F:BE:1F:A2:02:88:C3:41:FB:68:46:B7:74:9D:F9:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/298A627802F611EF9AED350B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.24.0/22
Signature Algorithm: sha256WithRSAEncryption
31:be:16:3c:b2:93:7c:8d:c1:58:ea:f2:cc:d7:a1:7b:7f:c4:
e4:4e:46:9a:4c:20:d7:87:13:0b:52:9e:7c:3e:f2:35:b6:ae:
a6:b6:39:69:4f:a9:9d:d4:45:41:67:f6:df:68:e1:f1:ad:b0:
a3:11:53:23:f9:d6:9e:b5:9a:ac:8b:0f:12:dc:31:0e:06:10:
9c:18:6d:75:a4:ec:75:79:16:c0:be:28:9e:9e:4c:e2:f6:5b:
cb:70:13:bd:3e:69:53:31:71:ba:b3:f8:92:bc:f7:a3:9b:7e:
1c:bc:9b:45:e9:34:93:1c:d4:6c:0f:89:a4:ec:62:4b:3e:7a:
48:83:fb:ef:f2:76:82:32:52:d6:bb:33:a1:03:f3:01:b3:42:
3c:2b:dd:73:cc:0d:15:e9:d2:65:e7:b2:e4:71:65:81:90:0f:
8a:f6:a1:bd:ee:f9:f0:ed:02:83:52:d5:ad:95:02:a5:75:b1:
a5:2e:ac:90:f4:26:54:0c:8d:95:53:f5:60:77:df:fc:9d:b1:
1f:4e:73:c1:08:40:54:0e:42:96:22:5c:7b:df:d4:b9:1b:5e:
b4:ac:a6:0e:27:2c:c0:6c:18:6c:54:e3:a7:65:7c:e3:2f:e4:
e6:77:85:e3:5e:26:c3:4a:5a:d9:41:6c:5c:30:17:fb:cf:91:
0d:79:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org