Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BDC3C0DCC11EFA2588D55017001B1.roa
File: 322BDC3C0DCC11EFA2588D55017001B1.roa (raw, json)
Hash identifier: QOLwlIBh7Obd04yo8nWf8bU8TAr6v0mwtJ/nnhAqvOU=
Subject key identifier: B0:DE:AC:19:C9:A2:E0:A3:BD:20:7D:B5:0B:D4:17:94:65:90:B4:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8909
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BDC3C0DCC11EFA2588D55017001B1.roa
Signing time: Thu 09 May 2024 06:20:14 +0000
ROA not before: Thu 09 May 2024 06:20:10 +0000
ROA not after: Wed 29 May 2024 06:20:10 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35081 (0x8909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:20:10 2024 GMT
Not After : May 29 06:20:10 2024 GMT
Subject: CN=663c6b1e-f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:ba:cc:50:6d:74:08:6c:ac:01:de:63:20:
34:f4:59:19:44:03:19:0c:b3:91:c9:69:b8:5a:5e:
1d:23:1a:16:31:63:ef:38:20:bf:4b:92:50:81:98:
ff:ab:78:9b:f6:26:61:ef:64:ab:da:52:e1:dc:d3:
ac:11:f0:66:99:c2:ad:34:c7:b0:00:26:fe:69:52:
0a:7c:d1:2f:e0:b8:50:e9:d7:4a:3a:db:21:d7:42:
96:3c:ce:07:4a:0b:dc:ef:e0:3c:1a:46:11:df:b9:
ff:8a:23:70:87:7e:dc:d7:4a:fe:ef:9b:7f:3a:f9:
fb:c6:02:ad:c9:d0:97:bb:30:bb:e9:91:9e:b8:c5:
8a:35:cb:ca:63:5e:53:76:cc:72:03:c9:57:d1:23:
f4:df:ef:81:a7:af:19:a9:3e:ee:8f:d6:bf:f9:19:
56:ed:33:2a:84:a2:c4:eb:39:53:6f:18:0b:d8:cf:
d7:94:58:47:38:48:47:2c:d5:60:52:b9:11:d2:53:
5f:7c:9a:72:0f:18:44:d8:ea:66:24:0f:b4:12:53:
65:30:81:32:29:61:d3:ef:df:a5:3f:76:8e:16:e0:
c3:89:53:ca:f7:5e:35:0c:dc:60:eb:96:06:f9:64:
0f:2e:f2:50:6e:8c:74:1f:e3:ea:22:bb:9b:41:f4:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:AC:19:C9:A2:E0:A3:BD:20:7D:B5:0B:D4:17:94:65:90:B4:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/322BDC3C0DCC11EFA2588D55017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:bd:ac:8f:d0:54:20:8b:3f:43:5e:26:ff:3d:0b:21:a5:40:
66:b9:65:8b:9e:0b:a8:e2:ae:79:16:0b:03:f7:86:b3:e1:4c:
a7:48:21:73:73:06:2d:5f:10:a5:58:27:61:27:d2:a3:07:3a:
ac:2d:46:db:ef:08:9d:c6:32:33:6a:4e:42:83:59:e5:8f:9b:
1f:f9:44:8d:eb:01:9b:19:26:9e:11:a5:14:45:44:fc:82:5d:
d6:24:04:fe:6f:fe:5c:08:cb:e8:c1:44:c1:74:60:f7:4e:0d:
fe:e9:8f:36:c9:0f:5a:cf:23:7b:71:18:5e:f0:c7:45:9e:af:
2b:9e:0b:5e:8e:a2:44:67:2d:b5:bf:ce:ec:31:27:57:e7:1e:
3d:e0:50:9f:e2:3a:b1:62:af:a9:62:b1:fe:40:d6:72:0e:d3:
f6:93:98:17:d2:95:ff:b3:6f:76:bb:ca:a9:6e:bc:72:50:4b:
4b:ce:11:8d:fd:b2:b2:7c:70:ea:e5:4a:a9:f7:8f:46:27:20:
11:29:b5:59:2c:fe:c8:5b:a9:fd:4f:98:21:cf:df:ce:9c:28:
73:0a:27:63:a1:c7:07:6c:20:ed:0e:38:fd:7a:dd:02:22:18:
14:bf:bd:d9:f9:3f:ba:9a:11:5d:8a:27:4c:9f:d3:93:fc:cd:
bd:68:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:49:45 2024 by rpki-client on console-fra.rpki-client.org