Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3308286EFBA111EEA8C11D47017001B1.roa
File: 3308286EFBA111EEA8C11D47017001B1.roa (raw, json)
Hash identifier: XCqhfKTCHYN1rvdKyvH/BFzY4qRwh/B8dKx28tqq5yY=
Subject key identifier: DF:26:83:DE:C4:9E:2B:BF:2F:5C:17:5A:E9:B4:B7:3B:32:F4:04:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3308286EFBA111EEA8C11D47017001B1.roa
Signing time: Tue 16 Apr 2024 03:27:06 +0000
ROA not before: Tue 16 Apr 2024 03:27:02 +0000
ROA not after: Wed 24 Apr 2024 03:27:02 +0000
asID: 136950
IP address blocks: 45.195.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33487 (0x82cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:27:02 2024 GMT
Not After : Apr 24 03:27:02 2024 GMT
Subject: CN=661df00a-71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:7b:15:7e:01:cd:8c:82:0a:3a:73:7a:28:
98:54:99:77:5f:c1:3a:85:c4:47:1b:9a:71:57:53:
03:28:db:b4:1d:01:19:3d:d7:50:97:1a:a7:69:a5:
6f:26:9c:20:67:77:96:34:f5:ba:45:53:13:bb:fd:
0c:7f:07:df:21:48:f0:3a:a7:30:a5:50:88:c2:a9:
c0:d0:b5:ab:12:97:ea:62:5e:d8:93:a1:a9:10:86:
2c:92:fc:bc:9e:22:4e:fc:43:fa:61:69:8a:ee:4f:
db:65:2f:c8:0f:98:95:e9:7d:a2:1d:6e:1f:bf:0a:
71:3b:cf:b6:49:a2:af:0f:d8:e9:57:cc:59:a0:1c:
6d:a7:13:2d:4d:79:6f:9c:a1:a7:00:ef:f9:1c:a1:
98:08:75:ad:e7:a7:4c:5f:7a:e3:56:16:cb:fe:5c:
3f:e3:0d:1b:1f:f0:25:d6:98:02:3a:5e:b9:a4:2a:
5b:32:ae:32:f5:7e:2a:2f:65:6b:33:b1:a6:92:91:
c1:0a:2b:45:fa:44:42:61:d0:fa:cb:0d:48:36:17:
a2:62:56:0f:af:4e:b2:e0:20:46:22:ae:c1:85:33:
0e:2d:af:de:62:86:e0:d8:47:e5:f1:ad:af:68:c9:
69:83:a4:02:fa:94:11:fd:b0:78:44:d8:ff:4f:6f:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:83:DE:C4:9E:2B:BF:2F:5C:17:5A:E9:B4:B7:3B:32:F4:04:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3308286EFBA111EEA8C11D47017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
56:58:4a:8e:90:d3:4e:41:2b:70:f6:2a:49:51:18:1b:f3:63:
0b:cf:b8:27:8a:69:3a:cc:83:18:92:49:0a:ff:1a:ed:01:93:
cd:87:11:bf:29:cf:d7:b6:f1:0b:f7:ec:52:fe:0b:d7:21:35:
8c:d4:e7:ee:b8:61:6d:c5:fc:f4:24:b4:2d:84:92:4a:5a:35:
4d:e3:cb:4a:af:7e:93:00:25:52:0f:a2:cd:ba:df:9a:30:0a:
7d:42:fe:0f:f4:12:49:75:18:a8:76:f0:15:f1:66:b4:0d:d5:
45:1b:64:8d:20:25:00:02:b3:f0:4a:56:46:a9:5f:1b:f7:ce:
26:85:84:79:12:bb:62:62:45:07:8e:04:fc:b1:bd:82:4a:4c:
2e:b6:e2:f5:23:26:27:f6:8a:31:74:68:0d:15:35:4e:63:74:
fa:6d:0a:6f:ff:94:f2:93:37:fc:36:87:74:15:24:74:ad:e4:
58:f4:4b:60:10:f6:06:76:3a:bd:df:c9:03:cb:fb:5c:09:c6:
ef:fa:7b:be:96:f9:07:c0:46:88:c1:5a:59:ca:b2:fb:9b:08:
9c:53:d4:70:3d:00:79:76:b3:c6:6c:60:83:99:8a:bd:30:20:
86:6a:20:80:18:b7:3b:c0:a7:f8:ad:1e:4c:41:12:a4:39:3e:
f1:4b:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org