Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F74A8783A9711EFA684FDBD762E951A.roa
File: 2F74A8783A9711EFA684FDBD762E951A.roa (raw, json)
Hash identifier: NI6JkR6dzHUeA6Q8y0SRcN4QF8LT7mYnARQhe4PW/jg=
Subject key identifier: 87:6C:0D:7B:C5:C7:02:D0:F1:C3:34:EB:F4:9F:E0:7A:49:50:75:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F74A8783A9711EFA684FDBD762E951A.roa
Signing time: Fri 05 Jul 2024 06:24:08 +0000
ROA not before: Fri 05 Jul 2024 06:24:05 +0000
ROA not after: Thu 01 Aug 2024 06:24:05 +0000
asID: 39600
IP address blocks: 45.204.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39087 (0x98af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:24:05 2024 GMT
Not After : Aug 1 06:24:05 2024 GMT
Subject: CN=66879188-d24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:86:8c:46:04:50:3d:18:28:0b:39:10:7a:
6c:b6:2c:c2:fd:b2:2a:a0:59:75:c8:1e:15:11:af:
f2:04:7d:c1:62:b1:c0:74:0c:15:e4:d1:d7:46:6e:
fc:c5:f8:25:7f:1e:27:eb:ed:6b:1f:e4:78:15:1a:
9e:2c:76:80:ed:4a:f5:8d:ae:a5:19:32:6d:4e:59:
62:62:3f:c0:a4:96:33:7b:12:d0:2c:0e:02:8d:5f:
61:b5:58:fd:f1:96:ea:1c:e7:1a:72:6c:87:65:3e:
13:58:d0:54:63:9f:d9:3a:8e:9a:af:2c:56:ca:34:
fe:a4:2b:22:04:1f:cd:8e:06:4d:5c:0e:d1:53:1a:
dd:1b:4f:16:e0:6a:03:fe:10:db:1a:2f:23:b2:11:
f5:1c:f3:a9:d3:4d:a4:7a:a7:f3:de:48:a4:60:20:
88:20:30:f0:58:d2:d0:43:be:c1:bf:6c:e9:ea:e1:
61:30:50:0e:d2:38:d8:71:1d:a2:39:96:44:23:ea:
e7:fd:24:50:a5:15:0c:ec:76:09:e1:68:83:a3:c3:
0d:e6:38:ea:bc:c8:29:1a:17:8b:de:15:98:a5:52:
a8:f4:c6:47:35:bc:c2:b3:0f:1a:cb:90:b3:a5:c4:
a2:eb:8f:48:7d:22:d3:b5:ca:de:c1:00:c5:c0:61:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6C:0D:7B:C5:C7:02:D0:F1:C3:34:EB:F4:9F:E0:7A:49:50:75:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F74A8783A9711EFA684FDBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a3:41:a0:f5:5a:c7:51:2b:59:6d:8d:c6:c3:37:6d:09:70:
59:31:bd:48:c9:f4:26:64:7d:ee:b9:3f:2d:cd:0c:ec:15:6e:
54:ef:21:c4:64:a0:f9:ed:3a:51:0f:69:35:2b:31:1b:b1:91:
ad:f0:e5:8b:74:7b:38:7c:57:13:fb:ac:ad:53:b7:d1:69:09:
72:a2:8a:9b:63:46:1b:d2:53:bd:a9:d3:0f:7a:78:ba:6a:e5:
c4:27:21:41:ce:fb:75:f9:a9:dc:b7:53:91:92:83:1b:58:98:
2a:b4:69:d3:48:3d:3f:5c:fd:db:09:80:e0:73:af:f7:3f:f2:
b3:f3:88:9b:98:44:dd:47:de:cb:54:67:39:2f:ae:07:be:50:
e5:f9:92:df:08:96:af:42:a0:7a:99:36:46:74:57:7a:a1:39:
dd:9e:99:bb:bc:a5:29:8b:3c:fc:fd:6d:d9:84:49:eb:89:b7:
a0:32:c5:0f:66:ff:f8:fa:22:c1:82:59:52:05:f2:dc:c5:f3:
57:6a:1c:c3:68:37:b4:f9:f5:50:77:e6:cf:bd:6b:23:0b:ed:
bf:97:d9:c0:1f:c5:1c:59:8a:4d:51:c3:54:78:61:fa:40:dc:
52:c6:f3:f5:34:f7:b3:b0:3c:30:65:0a:3c:53:14:34:f4:b6:
25:d3:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org