Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E1106E3E9811EF9A1CD945762E951A.roa
File: 32E1106E3E9811EF9A1CD945762E951A.roa (raw, json)
Hash identifier: AMbsnBKpX9BinaiKl5/yZeZ/uQenDR1SpLTbmZbW7uQ=
Subject key identifier: E8:E0:F4:AC:00:51:D2:54:37:24:5B:10:5B:7B:AC:1B:E4:7D:4D:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E1106E3E9811EF9A1CD945762E951A.roa
Signing time: Wed 10 Jul 2024 08:41:28 +0000
ROA not before: Wed 10 Jul 2024 08:41:25 +0000
ROA not after: Fri 02 Aug 2024 08:41:25 +0000
asID: 139646
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39498 (0x9a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:41:25 2024 GMT
Not After : Aug 2 08:41:25 2024 GMT
Subject: CN=668e4938-ce77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:a5:2c:05:12:86:be:4d:f9:89:d7:48:37:
c3:03:66:9c:e4:98:af:99:39:29:10:92:24:c6:67:
ea:0c:b6:c9:09:30:f8:58:09:75:bc:d3:e0:81:dc:
a7:4a:d5:96:b7:33:73:65:1e:05:37:62:66:82:14:
22:37:e2:7b:5d:a4:25:21:8a:6e:2d:ab:72:7b:22:
bf:8d:d9:4a:4a:fd:9a:f0:f0:e5:e9:b3:70:8d:39:
c0:b4:bd:f8:d8:a9:d8:35:70:f9:a0:1a:b7:46:d1:
de:d5:17:d4:b7:a6:86:5c:c0:66:0f:5e:ac:d1:ea:
7e:02:68:ff:7f:34:5e:cd:15:b8:15:9d:e5:e5:36:
2b:63:4a:fd:9d:6a:c0:f7:25:bb:3b:50:d0:6b:47:
70:1b:e7:e5:40:00:0d:0d:c2:8e:fc:8e:2d:a2:c4:
5d:6c:ac:0f:80:99:71:28:3b:08:c4:74:21:59:73:
f0:c3:ae:4b:ff:19:4d:b8:35:2d:75:6f:5f:48:e8:
78:47:65:97:6c:2d:6a:2d:04:3a:53:55:81:f7:2f:
a6:10:0d:0f:32:84:98:b3:cf:c8:c1:8e:19:c7:da:
b4:cc:68:17:7f:89:da:55:bd:a8:dd:a7:83:56:a0:
35:40:1d:1b:fb:4f:f1:67:a1:1b:f1:60:6b:a7:99:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:F4:AC:00:51:D2:54:37:24:5B:10:5B:7B:AC:1B:E4:7D:4D:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32E1106E3E9811EF9A1CD945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
84:c1:03:01:1c:ed:9b:ec:40:80:6a:c9:2e:c8:e3:83:d9:0d:
fc:85:43:7c:14:35:57:13:e2:5a:89:65:ba:51:d8:35:19:d3:
8b:10:e7:78:06:a0:8a:da:d0:7f:72:a7:42:64:81:8b:ea:98:
ef:22:8f:30:5d:ff:88:44:d5:02:4e:36:07:c9:74:04:c6:a6:
b4:4e:65:24:65:fc:a5:8f:c2:67:aa:a1:2b:21:ff:66:4d:0a:
7d:62:30:57:6d:70:31:1d:4b:59:02:2e:39:7e:a3:d4:23:93:
c1:10:34:6a:a2:d1:ea:38:6b:be:0f:c8:c6:f3:b7:7c:b7:c8:
31:61:f2:e7:c6:1b:80:4d:01:64:4b:43:81:3d:d9:ba:7c:e1:
36:da:85:6b:fe:46:3d:00:be:82:98:7e:68:09:65:da:35:ce:
16:b6:a2:69:be:f9:ea:04:22:16:61:fd:92:2d:3e:fd:2d:f8:
8c:ea:c3:5f:38:91:e6:7c:4e:17:2f:1b:96:66:d7:43:21:fc:
b6:82:f3:3d:0e:b5:c8:e8:c6:b2:63:8e:5f:52:ea:f3:d3:a2:
52:e1:c3:2b:1f:ef:4f:29:4a:1f:69:84:42:98:e4:a0:35:1c:
16:fb:f1:d5:a9:f8:11:7c:e5:10:f3:4c:7e:8b:12:ef:b7:65:
46:40:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org