Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460A690E49A811EFBEDAB2AA762E951A.roa
File: 460A690E49A811EFBEDAB2AA762E951A.roa (raw, json)
Hash identifier: TWYz9B7Pr4IddeF/snvJW/+GNSHoNer9bAFHtM9HLaM=
Subject key identifier: 55:D3:AA:F4:91:BD:0C:73:F2:32:F7:3C:B4:01:C3:CB:5A:03:EF:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460A690E49A811EFBEDAB2AA762E951A.roa
Signing time: Wed 24 Jul 2024 10:34:15 +0000
ROA not before: Wed 24 Jul 2024 10:34:12 +0000
ROA not after: Fri 02 Aug 2024 10:34:12 +0000
asID: 44559
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40771 (0x9f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:34:12 2024 GMT
Not After : Aug 2 10:34:12 2024 GMT
Subject: CN=66a0d8a7-c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:1c:35:c1:73:d7:1a:01:e6:84:95:e2:21:
4c:6a:4c:92:d2:ce:d3:dd:48:8d:20:0a:f6:39:5b:
df:b7:87:49:da:f3:4e:81:a1:b5:4c:f2:f1:db:cb:
ab:93:d4:bf:1c:5d:c4:29:06:5e:33:31:bd:5d:ab:
56:2b:64:2e:8e:ce:9d:26:e0:78:3b:40:ce:aa:a2:
02:d3:05:f2:ca:8f:11:21:5a:cd:1b:a5:ce:4f:3a:
1b:da:32:10:d1:5f:db:7d:db:fc:f3:0f:1e:fe:3e:
1b:1a:1c:e3:d5:63:5b:19:78:a6:21:9b:5f:1d:91:
bf:52:d1:31:32:a5:ab:f4:d7:c1:93:14:00:21:89:
db:07:6e:1b:69:6f:de:d9:5d:de:cb:3e:df:6f:d9:
7a:cd:66:77:8a:7e:68:41:b3:1b:c5:7d:65:44:30:
a6:e1:22:20:e6:27:21:64:88:6d:05:cb:85:07:3a:
fa:c8:ac:85:8c:3f:77:ec:d3:f4:7b:c1:6d:2a:d2:
75:0e:05:86:c5:4a:53:62:a9:81:d2:33:56:88:5d:
1a:c6:10:23:a3:54:57:37:83:68:ca:73:dc:f0:d4:
9a:12:5c:05:34:4e:b3:93:29:45:7d:30:14:7f:8c:
9a:89:f1:34:39:1d:05:6c:1f:16:0d:9d:1f:21:7f:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:AA:F4:91:BD:0C:73:F2:32:F7:3C:B4:01:C3:CB:5A:03:EF:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460A690E49A811EFBEDAB2AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
63:d6:22:a6:71:bc:72:34:89:41:31:04:b6:11:c0:20:85:4e:
05:ed:04:1a:a3:d7:68:52:7a:57:45:0e:5c:d6:7a:e4:f2:2f:
7c:c2:da:ff:d2:f2:f7:58:2a:4c:99:13:2d:fb:8a:81:80:a1:
6f:b6:31:53:80:b1:c4:4b:13:90:4f:f4:61:51:ab:60:85:8a:
64:2e:70:26:97:85:63:62:3c:41:8e:d0:36:44:98:60:75:8d:
78:cb:67:47:f4:4c:b4:ca:86:5e:af:83:c2:ab:ef:f5:02:af:
c9:29:07:ad:b1:3d:c8:70:32:03:bb:10:0c:0f:a4:1c:dd:e8:
2d:96:f4:6c:82:fa:01:81:89:88:53:a2:74:2b:dc:2e:e7:58:
79:b2:5d:18:9f:63:48:5b:c4:37:01:59:5b:ec:3c:bf:ec:d7:
c0:37:1f:3c:3e:38:d3:a4:41:84:cf:a1:98:6a:19:ad:38:9f:
73:72:80:5b:da:9d:29:a6:da:0a:a5:fd:be:b0:ac:94:79:cb:
20:d3:f1:a4:88:a4:90:ec:d0:5b:b7:73:be:92:c5:7f:10:6c:
62:43:72:60:0a:23:bc:44:3b:bc:22:c5:44:6d:e7:4b:e6:a0:
9b:79:7a:05:f3:04:e3:79:09:61:65:7b:5c:3b:6b:92:18:f1:
ef:d0:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:33 2024 by rpki-client on console-fra.rpki-client.org