Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC4FE52038B11EF93CD0C49017001B1.roa
File: 4CC4FE52038B11EF93CD0C49017001B1.roa (raw, json)
Hash identifier: 4wFtUuv7xgBO0yAEoO5NMm3Uun3T1tIAa0BVcWXCCVw=
Subject key identifier: 83:58:6E:F5:C7:6D:6D:BE:8B:5E:5A:2A:A4:40:8B:E4:FA:FB:FE:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC4FE52038B11EF93CD0C49017001B1.roa
Signing time: Fri 26 Apr 2024 05:10:30 +0000
ROA not before: Fri 26 Apr 2024 05:10:26 +0000
ROA not after: Sun 05 May 2024 05:10:26 +0000
asID: 141883
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34258 (0x85d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:10:26 2024 GMT
Not After : May 5 05:10:26 2024 GMT
Subject: CN=662b3746-abb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:a6:75:c2:dc:a5:56:40:b4:5e:85:30:12:
81:a4:e4:e4:bf:e3:02:b4:cb:97:9b:b9:c6:f8:7d:
9a:d1:1c:bf:f3:b3:06:a7:6c:9f:48:19:06:ba:0e:
97:e3:05:7c:6a:6e:48:6a:fd:4c:f2:70:6f:c5:ae:
08:7e:bc:71:7d:a6:1b:33:26:c7:a2:5b:d6:c9:87:
87:d7:70:0d:9b:fe:bc:89:01:77:a2:86:40:95:a1:
01:33:44:7b:b8:d1:72:59:fa:09:6f:a9:9a:51:b5:
4b:3b:c0:09:34:d2:48:d7:23:d9:6f:55:1b:69:2e:
28:95:b9:49:92:da:f5:69:d3:83:cb:a9:c8:d9:08:
5c:94:a7:b6:a0:60:f8:c7:ae:fa:ae:5e:af:f2:ba:
c8:47:ef:ce:f8:97:e1:3a:de:10:01:44:2c:e1:34:
77:f7:bd:43:6c:34:19:d7:9c:e6:d8:f4:22:a2:76:
92:f8:ba:34:59:b2:4c:b6:6b:f9:3b:c8:61:d8:1d:
d2:0d:b1:af:e3:52:d7:4b:66:b8:6d:a2:f2:d6:98:
98:a7:fd:90:50:90:14:e6:ef:17:b4:0f:d9:1c:d1:
34:ef:7e:35:f0:59:96:aa:3a:de:18:1e:7d:fa:c5:
52:49:bd:e3:f2:be:3c:ac:8c:ae:19:17:88:29:0a:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:6E:F5:C7:6D:6D:BE:8B:5E:5A:2A:A4:40:8B:E4:FA:FB:FE:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC4FE52038B11EF93CD0C49017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:2b:c4:0b:c8:4a:64:46:f5:30:94:a9:4c:bb:13:d0:b4:07:
73:b2:2d:4e:cc:d0:c6:21:4d:1f:6c:d9:64:e4:32:30:e4:1f:
53:66:4e:75:4b:d2:09:d6:a7:cc:03:21:16:70:11:e8:02:bf:
81:59:c6:4b:67:26:f4:62:6a:77:7d:73:0a:ad:c0:82:8a:62:
c8:27:d2:f1:b5:39:68:fc:4e:ab:ca:c2:22:1b:88:56:5b:74:
34:9d:eb:3d:78:56:b7:4e:ec:a2:19:b7:0a:15:af:5d:ac:be:
96:0e:5a:c5:5d:12:02:83:dc:b6:d7:63:5b:85:2b:81:7c:c3:
bd:b6:d5:3a:1d:e4:5a:49:98:a1:1a:b9:45:af:d7:b2:83:3b:
3a:32:96:86:39:c0:39:7b:e0:66:1c:49:84:77:8c:9e:fe:57:
c0:c5:61:49:6e:5f:95:7c:48:19:bc:f9:d6:07:01:83:34:c0:
36:48:94:02:89:ec:85:70:72:c3:4f:e5:e4:4f:90:81:60:b5:
9f:e4:84:79:d5:0f:57:32:d2:7f:09:9b:24:6c:5c:47:48:2e:
dc:43:b2:bd:c9:97:6d:f0:ef:8d:f7:db:33:66:65:5d:2f:3d:
9d:de:29:28:65:09:fc:ea:c6:da:93:ad:80:90:eb:0e:82:a1:
c9:44:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org