Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B8F6CDE385D11EFBBFB97B4762E951A.roa
File: 2B8F6CDE385D11EFBBFB97B4762E951A.roa (raw, json)
Hash identifier: FnQjm2fgsB3H17C55hCQmW4Nty9HuWHwxYeYj1nNDMw=
Subject key identifier: 24:04:0F:5D:F3:DE:B2:85:88:4E:A6:43:59:C5:8E:EB:20:4E:72:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9775
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B8F6CDE385D11EFBBFB97B4762E951A.roa
Signing time: Tue 02 Jul 2024 10:23:49 +0000
ROA not before: Tue 02 Jul 2024 10:23:45 +0000
ROA not after: Fri 09 Aug 2024 10:23:45 +0000
asID: 63139
IP address blocks: 45.197.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38773 (0x9775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:23:45 2024 GMT
Not After : Aug 9 10:23:45 2024 GMT
Subject: CN=6683d535-fab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:ca:e3:4b:ef:43:f3:7b:07:50:ec:c7:04:
7f:1e:eb:c6:76:af:01:f3:ad:7c:52:8c:1a:52:e1:
68:ae:ec:e9:c7:03:5f:aa:cf:13:e0:05:d4:8e:ec:
3d:51:3e:c6:b1:e8:56:89:94:05:f4:65:28:ee:d7:
7a:ae:bc:58:d2:78:8a:95:ad:b2:a6:ec:23:3a:9d:
e0:60:2c:3d:f6:0d:fd:77:31:bb:98:e0:a0:98:e6:
60:af:56:ff:0c:c3:9b:68:c1:9a:12:6a:79:36:e1:
83:10:4d:05:37:e7:cc:53:b6:1e:03:6b:56:a8:a1:
26:b7:87:e3:6a:44:df:53:58:5f:91:fc:86:a0:f0:
73:d8:b3:41:53:f4:5a:6f:d7:d0:37:a6:c7:f6:89:
51:a1:4d:e3:44:2f:d5:bf:fe:ce:84:2a:3f:a9:85:
a5:47:2d:92:18:9e:0f:5b:22:4d:9c:be:81:63:be:
2f:58:a2:d6:34:b5:88:f0:22:40:2c:63:9a:0b:2c:
c7:b2:2a:04:7d:de:f1:67:38:56:d8:06:58:cd:fd:
d4:d2:d5:24:21:4c:2f:32:e7:bf:4d:77:54:d8:1c:
af:ff:a4:ce:d3:e0:f9:48:68:5e:d1:52:3a:be:b3:
0e:74:6e:1a:7b:fb:24:9d:61:39:04:e2:11:65:ba:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:0F:5D:F3:DE:B2:85:88:4E:A6:43:59:C5:8E:EB:20:4E:72:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B8F6CDE385D11EFBBFB97B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e3:3c:3f:71:bd:d3:24:e6:8f:b6:0e:ee:2c:f3:e8:c3:e2:
49:e1:40:96:43:4e:90:cc:90:77:0a:37:34:e6:91:fe:fd:a3:
44:17:73:11:24:6b:2a:71:f9:07:f4:51:4b:57:72:10:e5:a6:
17:55:c6:26:33:35:87:60:22:47:be:1e:d3:09:43:5a:aa:19:
28:40:d5:15:21:d6:4a:83:0a:c8:98:9a:4a:a2:17:8b:9b:e1:
d4:26:27:06:53:09:5f:74:f0:89:71:79:6a:08:df:d9:b3:ca:
21:7e:d4:47:6c:ca:72:6e:1e:0b:3b:af:d4:56:09:69:18:78:
80:fc:43:c1:26:5b:2e:58:23:0f:35:1b:ec:20:ca:75:46:6f:
15:1b:4c:19:af:39:4f:80:c7:fd:c2:8e:cd:31:d1:bb:f1:9b:
6d:de:eb:b6:9a:7c:8d:2b:c1:3c:1a:54:cc:dd:23:44:7c:7b:
ce:ee:db:63:54:6d:b2:04:b7:e0:24:b7:d8:a0:a4:6b:43:8b:
78:9d:95:9d:fa:1b:f0:c8:ee:b1:af:8b:de:b3:6b:17:5e:e2:
8b:b9:51:af:a2:b9:01:ec:09:d7:19:78:95:3d:96:e2:8a:ec:
dd:0d:59:f9:2b:a6:c0:d2:af:a5:e1:84:f9:b0:a4:85:3a:fb:
d0:af:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 02:42:51 2024 by rpki-client on console-ams.rpki-client.org