Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6D60BE48CC11EFA5684F54762E951A.roa
File: 3B6D60BE48CC11EFA5684F54762E951A.roa (raw, json)
Hash identifier: N1USuH6W+bzpdZo3a/ql7ozP56Z1LRdCQeu9b3/LkDw=
Subject key identifier: 6E:E6:63:FF:63:58:77:24:94:EE:EA:B6:63:E1:E1:9E:F3:63:86:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6D60BE48CC11EFA5684F54762E951A.roa
Signing time: Tue 23 Jul 2024 08:19:08 +0000
ROA not before: Fri 26 Jul 2024 08:19:05 +0000
ROA not after: Sun 18 Aug 2024 08:19:05 +0000
asID: 138456
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40602 (0x9e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:19:05 2024 GMT
Not After : Aug 18 08:19:05 2024 GMT
Subject: CN=669f677c-4996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:1a:59:df:ba:87:c9:f7:f1:a9:e2:fd:24:
fd:47:76:13:86:06:4d:e6:ac:76:fa:58:77:e9:d9:
37:ad:f3:06:24:e6:07:48:25:63:53:2f:58:bf:21:
45:b3:bb:9f:b7:e6:51:12:f6:6b:06:0a:52:3a:62:
bd:ef:2b:e6:54:13:f7:00:3f:34:26:3a:3d:07:74:
fd:cf:88:7a:b5:c2:b8:7c:c3:51:40:09:d4:2a:8f:
57:35:c1:af:89:c5:bb:10:e5:08:ef:1c:13:39:31:
b5:54:67:4c:a5:d3:ee:ee:05:53:30:db:20:65:98:
10:48:07:d4:3b:7b:f6:b4:2f:d6:2a:6e:ba:8b:f7:
9c:d4:f1:1b:2d:84:65:aa:3a:2c:0a:2d:e8:a2:30:
fb:c1:98:8f:23:e9:c0:9c:ba:2e:66:27:93:15:76:
41:27:e9:22:3c:fa:74:00:8e:0f:68:8f:fc:e2:2a:
5f:48:e2:ba:d1:6e:b5:b6:52:c8:44:3f:7e:30:21:
fb:25:0a:c4:0c:ec:cc:48:35:9c:98:00:c6:23:eb:
1a:30:36:cf:fc:9a:41:40:98:d2:fa:8c:41:dc:7b:
6a:41:cb:fe:94:b8:72:c4:31:50:07:47:9a:19:a9:
b1:8e:a9:01:d3:4b:63:59:35:69:32:95:e9:0d:a5:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:63:FF:63:58:77:24:94:EE:EA:B6:63:E1:E1:9E:F3:63:86:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B6D60BE48CC11EFA5684F54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:66:42:d3:c2:7a:be:d0:04:2f:79:5f:4a:24:be:08:2f:26:
6a:79:17:c5:e7:c9:b6:d1:85:8f:86:3a:63:c5:39:f3:a3:c9:
0f:c5:43:c0:26:b7:37:27:71:45:aa:a5:a6:b4:66:e9:a3:b0:
12:13:9b:86:66:9d:8b:a4:9e:21:ad:3e:4b:7e:32:04:de:28:
9f:db:c0:94:af:8c:52:f0:26:07:ee:56:36:98:94:8f:e3:3b:
8e:d4:b9:4e:30:70:c9:92:60:43:1a:cf:76:ef:d3:12:b7:6f:
1c:ba:e0:06:f0:f1:4d:8f:29:3e:11:5f:70:b6:71:5f:84:9d:
5f:e8:d5:2a:7f:be:9a:f5:b3:26:fa:e2:4f:ff:5b:fb:ee:9c:
3d:28:81:d9:ff:c4:aa:d0:bb:80:66:82:aa:61:4a:7d:33:81:
44:2c:53:d0:3a:8a:e9:06:db:be:25:01:09:34:50:9c:20:70:
bb:a4:33:75:07:6d:03:d2:63:91:ce:ba:31:07:a2:25:3d:14:
12:a1:20:77:8e:da:72:26:46:7d:d2:d3:02:fe:35:e9:22:76:
d2:61:34:f2:39:d5:ac:4c:82:60:1c:c3:42:30:69:12:98:57:
9a:7f:f9:2e:bb:13:e4:66:03:0e:06:89:e7:18:a8:a0:7c:11:
76:44:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:23:05 2024 by rpki-client on console-ams.rpki-client.org