Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43A3B5204A5311EF855689B7762E951A.roa
File: 43A3B5204A5311EF855689B7762E951A.roa (raw, json)
Hash identifier: daT+wPECELp9jJANCsImhvDI6nZAzPXhNZLZ+PzT7go=
Subject key identifier: 1E:47:16:90:D2:89:95:20:12:C2:BB:82:AD:5C:92:66:91:74:CA:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43A3B5204A5311EF855689B7762E951A.roa
Signing time: Thu 25 Jul 2024 06:58:15 +0000
ROA not before: Thu 25 Jul 2024 06:58:12 +0000
ROA not after: Fri 16 Aug 2024 06:58:12 +0000
asID: 138630
IP address blocks: 45.204.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40833 (0x9f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 06:58:12 2024 GMT
Not After : Aug 16 06:58:12 2024 GMT
Subject: CN=66a1f787-feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:be:6b:1f:67:97:a8:03:7a:f3:b2:eb:35:
70:4a:07:f0:9c:14:44:a5:fb:63:53:55:4a:55:c0:
b4:c8:a1:a1:2b:ac:c4:5e:d0:4d:14:26:2d:08:af:
75:89:46:6a:14:b9:b8:44:54:e6:77:0b:3c:0c:64:
be:5a:46:5a:c8:d2:c7:6b:cb:22:b8:47:c4:9c:3c:
56:b0:4c:16:88:c1:04:da:4c:a3:83:7a:55:6e:c0:
2b:0c:23:ac:22:e5:67:2d:ad:65:18:9e:79:11:16:
00:59:8c:54:ac:e1:82:ef:20:c4:15:4a:63:9f:5f:
40:29:a9:31:56:37:fe:81:15:73:a0:5b:53:5d:f4:
1c:33:34:cc:bd:bd:ea:7b:b5:55:c3:da:ce:4e:61:
84:07:af:dd:a2:3c:be:82:02:54:2f:9c:65:c4:c1:
b2:90:72:8a:58:65:40:d5:cb:99:e1:b8:54:c5:66:
27:b1:d2:d7:e0:d0:a8:a9:d7:33:31:4f:e7:0f:b2:
fa:99:54:df:d6:c5:6f:a4:50:a2:15:f9:f7:30:d3:
a6:70:da:56:ef:94:cd:54:f5:91:e2:42:65:5a:1a:
b7:ee:4a:21:86:f3:09:d1:5b:70:eb:8f:cb:95:ad:
1a:f9:06:32:94:23:c2:d8:ea:06:5e:a1:c1:d1:69:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:47:16:90:D2:89:95:20:12:C2:BB:82:AD:5C:92:66:91:74:CA:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43A3B5204A5311EF855689B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.95.0/24
Signature Algorithm: sha256WithRSAEncryption
61:80:9b:14:1c:d6:16:3c:8c:72:4e:0c:7b:53:e3:b4:67:9b:
63:af:93:cb:a5:54:a9:50:a7:26:12:a3:36:94:f9:5e:d1:65:
86:ed:11:5a:04:42:2c:75:13:4a:e6:d3:a0:29:b7:91:b7:cc:
ee:b4:55:f0:fc:36:44:9b:36:41:ec:29:72:3b:ab:98:7c:d1:
d8:b2:83:ef:03:2b:36:cf:72:b7:b8:f4:2a:ca:f1:81:3e:c4:
c3:e0:f0:19:f8:38:5f:00:51:58:fe:6d:1f:64:01:01:e9:0e:
d9:be:8f:69:0b:9b:00:0c:90:ef:13:10:45:15:9e:a8:4e:72:
31:89:b2:5c:a2:c1:10:b9:21:b0:d2:a7:78:9f:72:f1:26:40:
d3:3a:4a:eb:0a:0b:c2:00:dd:db:df:77:a7:03:9d:5c:de:ec:
87:a9:72:41:30:ce:53:7a:1b:8d:6c:12:21:b8:0a:92:f7:1e:
49:bc:99:a2:7d:a0:86:de:6b:76:ae:9e:e5:64:69:9f:fd:ae:
23:37:ea:26:73:5b:e5:9f:b0:23:56:6c:a5:d0:68:25:cd:5b:
4b:d5:92:cb:51:d4:58:11:e9:ce:a9:f8:dc:ad:25:4d:29:6c:
67:d3:c2:76:e9:60:5b:64:1c:19:1b:62:03:0d:bf:15:e7:da:
4e:aa:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 08:28:58 2024 by rpki-client on console-fra.rpki-client.org