Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABFF75002F611EF8BAB8C0B017001B1.roa
File: 4ABFF75002F611EF8BAB8C0B017001B1.roa (raw, json)
Hash identifier: 4hA13tTqUkcN/2FOHocobPSk5vk3k0N3slc3d74wFVI=
Subject key identifier: 8B:86:79:2B:33:99:DA:B4:CC:9C:B3:9B:8D:6E:CD:B2:8E:DA:BA:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8503
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABFF75002F611EF8BAB8C0B017001B1.roa
Signing time: Thu 25 Apr 2024 11:23:51 +0000
ROA not before: Thu 25 Apr 2024 11:23:48 +0000
ROA not after: Sun 05 May 2024 11:23:48 +0000
asID: 21859
IP address blocks: 45.196.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34051 (0x8503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:23:48 2024 GMT
Not After : May 5 11:23:48 2024 GMT
Subject: CN=662a3d47-6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:e8:69:c0:53:7b:45:61:25:f3:06:68:fa:
0d:d1:b9:de:cf:d7:d9:75:3f:33:b7:44:d0:12:86:
ef:25:2b:da:7f:13:53:4d:10:f8:65:c5:bc:94:c3:
e0:94:e9:d8:18:17:9c:05:b9:e1:21:4a:f1:28:49:
31:d4:5d:ed:2c:85:ff:89:2a:82:de:f5:4d:e8:40:
a5:ca:35:fe:40:3f:6b:dd:c2:d3:fd:0d:26:9e:9e:
72:6d:e4:c4:19:31:42:21:83:fc:90:1e:28:2a:92:
4a:c9:ec:aa:68:e6:4e:af:63:97:a7:c8:74:bc:9a:
55:5d:59:dd:2d:0a:c0:92:b9:20:95:f1:a2:18:e2:
66:6f:91:b7:dd:23:ea:5e:d1:71:a6:dd:ee:3c:c2:
b0:67:2c:56:24:45:f0:39:a7:a4:74:10:f2:c2:2c:
a6:dd:a4:4e:01:2d:aa:8e:5b:96:54:7b:27:5a:71:
95:52:23:42:3b:91:df:87:3b:df:43:fc:04:87:83:
23:5f:8e:6c:81:c2:c4:70:d6:72:89:ea:91:e8:d5:
5c:6e:0c:9f:49:5c:03:cb:b1:ad:36:58:a3:9b:d5:
30:b9:4b:30:d9:28:9b:b9:c3:d7:83:1d:08:1e:44:
54:ae:fe:18:35:84:7b:05:32:c1:15:8f:8a:a3:81:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:79:2B:33:99:DA:B4:CC:9C:B3:9B:8D:6E:CD:B2:8E:DA:BA:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABFF75002F611EF8BAB8C0B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:e6:97:ee:2f:3c:43:96:e8:e3:9e:87:27:3f:0e:e9:14:ed:
a1:ff:e0:75:66:de:04:d6:41:d8:53:73:b0:b4:48:bf:ab:c6:
5c:1b:b5:e5:77:2c:48:9a:68:97:16:70:4a:a2:b4:af:2a:cf:
98:79:1d:6a:1e:ce:27:bb:a4:09:d8:6f:5c:6e:89:c9:54:50:
b3:e2:e1:68:e9:42:60:fc:4f:a9:b1:a1:b0:9b:2c:2e:7d:fb:
15:82:25:9a:02:65:ad:43:96:7c:5f:6c:0d:7f:8f:43:9f:46:
d9:d3:a3:e9:aa:23:83:b0:b9:3e:38:2e:3c:6a:1a:91:ef:d5:
13:9d:2d:13:7c:0f:b1:96:2b:5c:24:4e:70:c4:35:f8:fe:4c:
7e:51:cf:4a:be:a5:14:55:3a:b7:f7:55:15:5b:10:3c:6c:7f:
a3:39:7a:36:c6:7d:9e:d6:ac:e0:6e:85:59:cd:ad:44:b8:c6:
ac:f2:5c:95:a5:cb:e1:9a:49:8a:c5:dd:0a:ee:ec:71:f6:af:
f3:8d:08:5a:9f:9f:96:f5:e5:40:35:f9:6a:1a:f8:30:0d:99:
07:e8:5a:34:c1:0c:f0:96:97:df:f7:c5:dd:97:45:3f:f4:24:
77:35:e1:50:1c:af:74:a1:1f:4a:f9:2c:ff:c9:1e:a9:3f:32:
02:05:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org