Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3FE2BCFB9511EEA868E95C017001B1.roa
File: 4F3FE2BCFB9511EEA868E95C017001B1.roa (raw, json)
Hash identifier: fBeCRaMvRJev9Cbz+v/e9NYdy+Hcg/s/cc2jrDqYDfA=
Subject key identifier: A5:84:0E:68:81:EC:03:B9:02:37:85:B6:C7:0D:55:24:90:24:25:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 827F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3FE2BCFB9511EEA868E95C017001B1.roa
Signing time: Tue 16 Apr 2024 02:01:59 +0000
ROA not before: Tue 16 Apr 2024 02:01:56 +0000
ROA not after: Mon 29 Apr 2024 02:01:56 +0000
asID: 141883
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33407 (0x827f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:01:56 2024 GMT
Not After : Apr 29 02:01:56 2024 GMT
Subject: CN=661ddc17-444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:1d:67:f9:db:02:42:c4:09:8e:f5:ec:d7:
4f:37:08:ad:33:c5:3b:21:25:1b:4b:52:af:4a:ec:
02:8c:59:6a:db:9b:d5:20:7f:5b:1e:37:bc:37:c7:
b7:d7:0c:5b:63:14:4a:48:55:f5:45:6d:c6:17:14:
c0:c8:9c:b7:59:36:c7:17:43:71:3b:5a:fe:31:e0:
62:7d:28:a7:21:bf:0b:83:cf:e0:ab:40:27:e3:e9:
fb:5b:a8:b9:c1:b6:ff:84:88:f5:eb:00:1c:d3:cd:
53:4c:53:53:e2:c7:01:b2:f3:ec:aa:91:7d:3f:69:
9d:c4:9b:8d:e8:28:fe:77:19:82:74:bd:59:f2:58:
53:ec:5f:8d:75:d5:6e:9e:03:01:f2:c0:8d:87:89:
fe:e2:a7:85:33:f1:56:dd:d1:f7:77:28:91:08:0c:
89:43:67:a8:e5:4d:7a:20:64:dc:0c:bc:af:07:56:
52:fc:55:20:98:2d:ca:a7:85:71:06:22:56:87:6a:
6a:86:e2:d7:58:a0:c6:31:3f:76:e6:54:50:e5:05:
fa:0b:8b:81:0b:13:1e:61:c6:d6:f7:ed:b3:a5:ad:
a1:56:7b:5c:5f:2b:87:b8:db:83:b4:28:d4:7c:28:
ce:c1:94:aa:6e:12:4d:7b:92:1a:11:8d:10:03:54:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:0E:68:81:EC:03:B9:02:37:85:B6:C7:0D:55:24:90:24:25:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3FE2BCFB9511EEA868E95C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:90:6e:39:ee:1a:48:65:e2:af:30:89:ad:17:b1:f2:5a:a0:
72:49:af:21:fb:45:11:9d:2f:db:fa:fd:1b:7a:b3:49:3d:27:
78:e1:39:87:12:6d:8a:07:9c:ec:76:29:8b:08:ed:52:a3:26:
79:13:fa:d1:cc:4b:cb:8e:6a:78:81:3e:c0:41:9b:f3:15:72:
dd:56:9a:5e:00:15:6e:ba:0c:e3:c1:4a:8d:84:9d:f2:56:a4:
08:06:57:41:51:b5:b7:fb:ad:28:77:7f:d6:63:83:42:1e:8d:
25:e3:be:24:de:15:7a:f4:77:80:95:5b:7c:32:17:71:f9:b4:
21:da:f3:56:0f:28:fa:68:ee:6b:b6:d3:6e:f0:3a:52:8f:66:
00:7d:13:75:29:35:24:8c:2a:4c:5d:de:a7:f0:35:98:38:9d:
88:3b:9b:b2:f0:dc:1f:f3:97:fe:7b:36:30:a8:60:40:1b:75:
d8:ad:be:28:d1:46:b8:b0:01:0c:0b:9a:d1:29:67:3d:db:f1:
e8:ec:9e:4b:5c:34:7f:5d:63:fd:04:20:37:54:d9:78:67:1c:
1f:46:35:a1:d3:cc:2b:23:85:a8:90:8e:ca:d3:6c:9a:04:eb:
1d:9d:ac:b5:a9:6e:2d:9f:2e:eb:3b:2b:6f:e8:54:24:5b:91:
f9:38:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org