Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0FAF78FD5111EEBD25E208017001B1.roa
File: 3E0FAF78FD5111EEBD25E208017001B1.roa (raw, json)
Hash identifier: SEUbwPudQybIRno7JNKWsTKmw7HKA7VDmYLDmqtcfVQ=
Subject key identifier: 8A:C1:FD:E0:44:E3:CA:31:BF:DB:8D:A2:FA:9C:82:C7:F1:90:8D:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8363
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0FAF78FD5111EEBD25E208017001B1.roa
Signing time: Thu 18 Apr 2024 06:59:47 +0000
ROA not before: Thu 18 Apr 2024 06:59:44 +0000
ROA not after: Fri 26 Apr 2024 06:59:44 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33635 (0x8363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 06:59:44 2024 GMT
Not After : Apr 26 06:59:44 2024 GMT
Subject: CN=6620c4e3-b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:93:2a:e1:69:e1:83:10:79:06:8d:93:1a:
c9:42:98:93:a0:f9:a2:7f:48:ce:e8:a3:3e:99:19:
30:2a:50:d5:60:49:20:6e:d6:01:4d:62:b0:2a:a8:
d8:5c:a9:25:84:d9:46:50:41:9f:d2:78:3e:1f:5c:
7d:6f:95:27:13:bb:b6:2f:ce:7f:1b:87:f6:af:9d:
b9:45:44:35:a7:7f:99:92:d9:2a:6e:cc:a8:d9:43:
5c:33:37:b2:ee:12:6d:87:90:32:92:05:0a:fa:c3:
d9:55:ea:98:5d:65:95:d9:4f:a8:e0:45:36:af:3b:
a8:8c:d1:14:78:fc:4b:61:8c:d8:0a:ba:2d:d0:55:
44:10:bc:87:83:8a:62:5b:92:b5:62:41:cd:38:bd:
2f:38:b2:32:91:23:69:06:5e:27:4b:7a:5a:dc:a1:
3d:76:4c:f1:5f:8b:e5:4f:90:a3:66:d4:46:65:48:
96:c8:68:13:fa:33:d5:d4:32:21:d6:84:15:e4:99:
a9:00:4c:61:c6:4f:9d:34:88:60:1e:39:67:81:bf:
b5:69:19:02:82:b8:2b:53:60:51:96:45:f0:bc:d6:
32:4d:41:35:07:e2:6e:7c:53:9d:ca:ac:c3:f0:4f:
17:93:76:d1:a6:10:ac:55:87:95:75:26:6a:72:9e:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:FD:E0:44:E3:CA:31:BF:DB:8D:A2:FA:9C:82:C7:F1:90:8D:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0FAF78FD5111EEBD25E208017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:82:ea:44:f8:53:2c:a8:14:d3:77:50:4c:7f:3e:3f:c8:d3:
57:b0:74:cf:d4:91:5d:ae:d8:e4:bc:dc:e2:7b:91:5f:93:d8:
c6:a2:e9:e4:69:8e:c3:f2:04:cf:f9:71:21:f6:d4:12:69:af:
74:a7:d4:1d:1d:1d:02:5f:c8:0b:23:6e:f2:17:0b:3a:a4:76:
0b:34:78:4c:7b:da:d3:c2:1c:d5:5f:01:24:0f:6d:0e:a0:65:
04:d7:d1:54:79:3c:a4:8d:4a:01:49:e7:96:ed:29:38:a5:43:
be:eb:24:d0:44:9b:9c:fa:05:47:00:54:6f:fb:3e:b6:1f:be:
73:a3:2a:5c:9a:85:b8:0c:89:9d:8b:14:5d:a1:67:b2:02:09:
4b:8b:95:53:92:52:72:3c:db:65:9a:e4:98:4a:3c:45:bd:73:
bf:42:00:cb:9a:ff:3c:54:b2:9a:64:f2:70:20:6e:c8:90:35:
74:28:4e:7b:8a:55:d0:68:f0:f4:ba:49:2d:a7:a8:4b:62:f2:
1b:4a:7f:4f:cd:7a:f1:a1:04:e7:de:7e:13:2d:39:68:67:3e:
fb:4a:50:ca:9d:b5:bb:59:e7:d1:d3:36:76:a9:cb:ca:e0:13:
36:82:92:64:a8:e0:e3:db:b3:b9:c9:ad:e5:61:ed:ca:50:e9:
8d:8b:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:27:24 2024 by rpki-client on console-ams.rpki-client.org