Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AE5661C4A5911EFBDC1395F762E951A.roa
File: 3AE5661C4A5911EFBDC1395F762E951A.roa (raw, json)
Hash identifier: g75Zzh/LB8WDfWGeVatUsBJNyeUGPml+R565CwW5oLs=
Subject key identifier: B7:BB:BB:68:59:26:D2:5F:37:5E:4D:49:01:C4:97:A8:B9:4F:88:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AE5661C4A5911EFBDC1395F762E951A.roa
Signing time: Thu 25 Jul 2024 07:40:57 +0000
ROA not before: Thu 25 Jul 2024 07:40:54 +0000
ROA not after: Sat 03 Aug 2024 07:40:54 +0000
asID: 174
IP address blocks: 45.195.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40879 (0x9faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:40:54 2024 GMT
Not After : Aug 3 07:40:54 2024 GMT
Subject: CN=66a20189-5c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:0d:ec:41:ae:da:d7:5a:dd:37:2b:1a:2b:
57:da:15:83:d3:29:da:79:75:51:2a:29:de:81:ed:
54:1a:ad:81:08:29:81:88:0e:8c:5c:af:5b:a3:74:
6d:eb:b6:26:af:6c:5e:19:3a:47:c7:57:9f:41:97:
40:7c:30:68:9c:5c:ba:12:03:1f:d6:e3:fe:26:2d:
85:59:9c:64:af:69:3c:03:77:f8:f3:f0:98:0f:bf:
e9:dd:36:7e:56:e3:af:c3:72:a7:63:da:94:d9:80:
0a:9d:f2:ab:79:5b:05:8f:fb:9b:06:10:c8:83:63:
b3:0d:8b:76:a9:35:b4:5d:d2:74:25:9d:90:8f:e7:
ff:40:16:58:a9:e5:4c:e8:8d:07:ec:ca:6d:57:7d:
2a:83:8c:ad:7d:1c:4c:6a:12:b8:d3:ed:71:58:ad:
89:4f:9b:2a:dc:46:d5:24:ff:7f:e7:92:b9:79:73:
89:a2:f4:df:d4:67:46:77:5f:33:4a:f6:20:1b:72:
8d:3b:af:fe:86:e2:b9:88:3c:46:dc:9c:17:f5:31:
07:65:e7:d0:12:f1:4f:36:d7:0b:68:32:c2:2b:15:
8b:d2:1e:c4:a3:76:bf:c4:cf:94:de:43:26:58:11:
ee:ad:af:f2:c1:85:ae:07:89:ec:52:80:ff:d1:8c:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:BB:68:59:26:D2:5F:37:5E:4D:49:01:C4:97:A8:B9:4F:88:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AE5661C4A5911EFBDC1395F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.67.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:71:fa:8f:c9:db:0c:aa:ce:5e:3b:e2:a3:7b:ba:92:f4:39:
a1:58:a2:b9:60:c9:01:d8:f3:71:36:50:7c:33:cc:d9:20:79:
1b:86:89:e2:55:8f:df:55:9b:3d:e4:4d:70:02:00:8c:43:e3:
03:27:8c:8c:b2:4c:28:91:03:96:52:f6:bf:2f:0f:9b:40:50:
d5:73:f3:15:f6:b3:a6:c0:c8:e5:c7:a8:80:9f:70:13:3b:b8:
6c:f2:45:37:e8:e4:91:5a:99:4a:cb:79:a4:b3:a4:79:8a:bf:
fe:d1:f3:b6:7f:0d:48:dc:23:de:4d:16:2e:dd:d3:22:3f:07:
52:03:a2:2d:4f:39:b9:cc:fd:4b:a1:12:4d:2c:31:97:25:00:
08:e4:99:21:65:ae:77:76:6c:28:2a:b5:ff:8f:9a:16:70:06:
20:18:14:4c:26:ae:cb:ac:8b:f6:76:32:e6:3d:f4:18:6f:8f:
28:2f:84:69:fe:47:44:1c:f9:08:e5:0d:92:77:26:b1:e4:ce:
72:04:f0:4f:15:c3:0e:14:07:7a:14:df:38:ad:9c:00:67:69:
e8:43:ab:be:63:d8:d9:43:79:d3:09:d3:3b:94:c3:94:82:bf:
9b:fd:53:67:a1:ad:36:ba:39:2d:1e:72:32:91:3e:d6:79:1f:
e5:50:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org