Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457FC8C64A5711EFB3007B51762E951A.roa
File: 457FC8C64A5711EFB3007B51762E951A.roa (raw, json)
Hash identifier: SvrhTiCcteofc7yu91VaKPDPDE8iGPrlTu9vEJGShL4=
Subject key identifier: 8F:66:9B:7A:46:1D:30:D1:FA:62:8A:13:CB:57:02:E7:AE:9A:B4:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457FC8C64A5711EFB3007B51762E951A.roa
Signing time: Thu 25 Jul 2024 07:26:56 +0000
ROA not before: Thu 25 Jul 2024 07:26:53 +0000
ROA not after: Fri 16 Aug 2024 07:26:53 +0000
asID: 138630
IP address blocks: 45.204.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40867 (0x9fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:26:53 2024 GMT
Not After : Aug 16 07:26:53 2024 GMT
Subject: CN=66a1fe40-7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:21:a8:d1:da:f9:0a:41:ce:eb:61:86:ee:
17:e8:0f:b4:74:c2:32:16:d4:57:50:05:ff:ea:be:
ef:31:73:0e:b8:5a:6f:6f:23:95:d5:5c:81:d3:94:
e6:e2:5d:b3:0d:0f:fb:bb:3c:ae:e3:3f:9c:50:88:
39:a9:0f:70:42:99:9b:c7:34:98:78:7a:fa:3c:d6:
90:9c:b5:4e:01:78:e6:c7:80:e8:4a:92:f2:01:c5:
ce:db:6b:26:49:fb:70:8a:b8:bc:f7:f6:d1:c4:1d:
63:d9:a4:4e:23:9c:f4:ed:82:db:5f:58:56:1a:7d:
6f:be:df:e1:2d:6b:d5:27:f6:e3:44:3b:c4:81:c5:
ce:37:0f:f3:6e:43:ad:b9:cd:a4:0e:0a:1c:22:8f:
02:90:4f:b7:a9:fe:63:fe:82:b1:d6:f6:e8:ea:7b:
a4:3b:a1:71:41:41:4a:6c:95:90:18:ba:a2:38:41:
89:01:cb:63:64:2b:16:d1:35:18:ad:8f:13:57:f7:
63:e2:cc:6a:76:bb:d9:08:85:d3:74:4c:d7:d8:91:
86:54:a9:28:4e:7e:e0:0f:54:f6:02:f8:4f:51:66:
7e:17:e5:b3:57:f1:2a:35:97:c0:1b:94:44:e0:f4:
66:f3:57:4b:3f:3c:ec:ef:08:d4:90:ca:4d:94:2f:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:9B:7A:46:1D:30:D1:FA:62:8A:13:CB:57:02:E7:AE:9A:B4:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457FC8C64A5711EFB3007B51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.86.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d5:4f:18:a5:d5:79:93:d8:a2:5a:57:75:b9:e9:b6:07:32:
75:ad:1d:00:a8:46:57:c0:2b:2b:c6:b8:37:8a:ab:0e:55:5b:
53:b0:0c:02:f8:62:30:03:3e:e1:72:31:e8:ce:31:1f:a1:94:
07:a9:04:9d:9d:a1:51:a4:51:b8:bd:9a:9d:03:cb:10:fe:a8:
27:fe:c4:bc:00:dc:9a:3c:fe:c1:6a:75:a6:0c:01:c2:41:56:
ba:94:32:13:1f:10:be:cd:3e:f1:6b:77:35:2d:ac:1c:7b:83:
ae:60:37:75:95:dd:c8:e9:f0:ad:31:6e:82:3a:5e:93:09:56:
4a:17:7e:60:3f:be:a8:99:f9:52:11:67:0f:09:12:cc:dd:3f:
45:06:ec:ef:04:ad:06:60:b9:10:1d:6e:7b:2f:56:fa:7e:5f:
b8:ca:04:f1:1a:04:d9:00:cb:da:01:f6:46:40:e0:79:e3:b6:
93:17:8a:6a:0f:54:6e:8b:b2:b7:85:9b:2e:1d:5c:ac:fc:b8:
13:43:3a:10:b0:0b:68:ae:9c:57:18:30:0e:bd:80:73:41:ed:
16:24:de:53:ac:0e:89:88:81:87:c0:ee:0a:a6:95:7c:76:6a:
0d:dc:39:b9:12:e4:ec:36:34:f5:05:f8:20:4d:53:91:a1:10:
9d:04:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 10:13:43 2024 by rpki-client on console-fra.rpki-client.org