Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E95A0A441511EF90C3EF46762E951A.roa
File: 30E95A0A441511EF90C3EF46762E951A.roa (raw, json)
Hash identifier: BxBSkqKqIBM9c2QB1hDl97Ds+HZTzPjhlca+zMAAJe4=
Subject key identifier: 80:2F:BB:D8:4E:1D:FD:DF:A3:EF:32:21:DB:10:91:64:1D:B4:CA:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E95A0A441511EF90C3EF46762E951A.roa
Signing time: Wed 17 Jul 2024 08:18:48 +0000
ROA not before: Wed 17 Jul 2024 08:18:44 +0000
ROA not after: Sat 27 Jul 2024 08:18:44 +0000
asID: 22773
IP address blocks: 45.207.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40212 (0x9d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:18:44 2024 GMT
Not After : Jul 27 08:18:44 2024 GMT
Subject: CN=66977e68-e469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:0b:e6:85:2e:e1:cb:39:d6:b2:92:26:1c:
71:b7:3b:eb:29:a6:bf:f2:ce:d5:54:c5:94:6f:7c:
de:11:0c:a3:3d:ff:71:67:59:c2:24:4a:58:4c:90:
a4:ea:ca:ba:b3:65:cc:4c:64:69:55:a2:49:13:c5:
59:e0:7b:0f:ec:c6:f4:eb:f1:15:af:7a:23:31:10:
33:7b:5d:b1:cc:6f:5d:c0:ef:ca:2c:ee:05:f9:75:
9d:fd:42:52:e0:7f:c7:00:f5:95:75:57:e6:a6:93:
c6:89:ff:9e:f9:4b:b0:7c:45:7a:cc:3e:97:73:88:
4a:98:6d:f5:41:d3:0c:4a:b0:bb:f3:ae:45:ee:66:
ed:4e:bc:d1:a2:e8:7e:55:ba:a2:bf:66:e2:77:29:
6d:05:9c:ee:7c:76:a5:47:a0:b6:0d:e3:a6:1f:2f:
56:fe:42:37:39:e1:0c:28:5b:0a:29:2f:f7:f2:53:
4e:80:79:e2:e4:01:4e:e6:f3:85:d9:a1:b5:ab:e6:
5c:f8:74:6b:67:93:95:4a:95:33:11:f6:10:4f:ea:
64:f9:49:4c:c5:63:a9:6d:b0:81:9f:cb:26:4a:1e:
d2:60:aa:d6:e4:eb:bf:cd:76:7e:50:a3:8a:58:c9:
cf:45:42:78:ff:60:1b:22:01:9e:4a:ce:b0:da:2d:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:BB:D8:4E:1D:FD:DF:A3:EF:32:21:DB:10:91:64:1D:B4:CA:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E95A0A441511EF90C3EF46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:08:63:83:26:a1:03:f8:26:99:69:9d:b6:a6:49:c4:eb:78:
6e:ef:e3:88:3a:9e:c8:43:72:6c:af:ff:85:dd:d9:60:dd:75:
ec:16:82:7a:db:38:e3:29:20:c0:db:c6:de:62:cb:b3:57:b0:
1e:4a:4f:c2:7c:4a:09:7a:53:bf:97:b5:10:9d:7b:9a:bb:52:
83:2b:0e:79:70:38:95:71:58:56:33:3b:7c:4d:ee:37:14:50:
2a:46:0a:80:13:ba:f2:03:82:ef:4f:eb:ab:b7:19:3d:77:ab:
40:d3:da:7e:c0:70:3c:9f:cb:b6:f6:67:aa:43:5c:39:78:8d:
34:07:52:f1:97:84:26:ef:db:1d:4b:b4:74:b0:50:ab:78:90:
75:2e:48:e0:f1:5b:3f:73:b3:e6:c4:c5:60:50:47:2f:61:95:
67:45:a6:59:1e:3d:5b:44:b7:4b:c4:cc:4a:3e:9a:53:04:6c:
a0:5b:a5:17:42:ac:8f:63:dd:a2:2d:2a:80:5c:35:ae:a1:03:
0f:27:4c:17:d9:31:e9:b1:e6:15:92:3f:bf:14:57:cb:98:60:
87:8f:db:83:6c:37:ac:06:cd:a7:05:bf:39:ff:31:86:47:65:
3c:7a:59:cf:7b:55:21:5e:3e:a2:f3:8e:43:a2:aa:d2:b0:02:
6b:af:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:26 2024 by rpki-client on console-ams.rpki-client.org