Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5882DF44FBA111EE8D40F64A017001B1.roa
File: 5882DF44FBA111EE8D40F64A017001B1.roa (raw, json)
Hash identifier: yjJOvQn5NOYiVDPCAGuj/c8z2kGEI6rL0A9BEI63Y8g=
Subject key identifier: 15:25:6A:41:55:CC:E1:86:AC:AE:B9:85:AE:02:72:26:AA:F2:7B:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5882DF44FBA111EE8D40F64A017001B1.roa
Signing time: Tue 16 Apr 2024 03:28:09 +0000
ROA not before: Tue 16 Apr 2024 03:28:05 +0000
ROA not after: Wed 24 Apr 2024 03:28:05 +0000
asID: 136970
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33489 (0x82d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:28:05 2024 GMT
Not After : Apr 24 03:28:05 2024 GMT
Subject: CN=661df049-8469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:f7:8a:7a:47:41:95:2d:1b:07:97:d3:ff:
ad:9a:ba:c0:95:75:66:45:50:75:fa:11:3f:15:71:
eb:5b:b1:d7:5f:e9:c9:8d:62:6d:49:d3:b9:2d:da:
73:cb:6f:35:fc:87:b7:9f:b6:8c:a1:80:f3:d6:a9:
da:46:4c:cb:e6:59:00:e1:2c:0e:e3:82:77:1a:78:
a7:c3:d9:9a:53:66:07:7a:93:57:e3:0c:fe:93:9f:
0e:d9:97:fe:de:6c:a7:61:ca:20:36:07:06:8c:51:
75:61:81:02:a6:3c:d5:51:87:18:b1:60:70:7f:64:
07:1b:13:0f:94:27:71:f7:ef:ce:0b:08:ce:fa:c9:
3a:00:13:6f:9d:c1:b3:6a:bf:31:96:a6:c7:43:f2:
11:e1:30:b2:f3:2c:84:ea:3a:57:6e:0b:c4:e2:d1:
8a:d9:d7:81:5c:2d:69:56:6b:93:f3:54:f1:68:14:
f8:32:f4:92:d9:38:28:03:7b:36:75:86:75:b0:80:
a9:2e:cb:f6:2c:b8:47:fe:41:9e:5e:70:94:ee:a4:
d5:e9:b3:e8:02:0b:22:fd:35:60:b7:ed:f1:ba:3a:
86:7e:6e:c9:a0:9d:2e:5b:73:98:df:07:c0:5e:c3:
4f:d1:cf:f9:69:56:1d:50:5a:a1:02:35:c0:5e:f4:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:25:6A:41:55:CC:E1:86:AC:AE:B9:85:AE:02:72:26:AA:F2:7B:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5882DF44FBA111EE8D40F64A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8b:aa:2d:1f:46:27:bc:9b:24:c1:ab:b1:89:53:0c:56:0f:
fb:6f:f9:1b:c9:2e:f4:59:83:59:47:3f:34:5d:c4:47:37:83:
ed:2e:49:0f:e7:77:5e:00:e1:62:c2:ae:2d:01:b8:89:90:3a:
58:0e:f0:75:0e:6d:40:3c:55:0a:ef:2f:69:61:75:e8:05:e4:
bd:b8:15:94:92:ef:3c:1b:16:7b:1e:cf:8c:a8:22:32:72:e6:
37:ce:f7:92:5a:70:34:c6:a0:23:f9:61:e0:ec:bc:ad:c4:18:
43:04:b3:99:69:db:7d:7c:8d:d5:f8:83:45:83:bf:53:18:99:
41:ae:c0:ec:e9:5e:dc:22:8e:60:cc:6b:2b:6c:bf:9a:38:18:
24:8e:6e:1b:b7:a1:a9:37:90:8d:85:c1:6f:0d:1a:a2:19:d0:
ff:17:46:00:e6:e6:cb:94:cf:7d:59:44:fa:a0:65:81:5f:2d:
91:3d:26:21:9d:34:5a:62:d0:cf:9e:f2:15:11:35:43:4f:01:
e2:c2:35:6f:91:77:0f:17:cd:98:c2:09:59:49:c7:8e:27:6b:
d1:cb:cc:0e:bc:09:98:c5:6a:8a:1c:42:25:f6:b5:d3:58:2e:
fc:4b:44:c2:de:3c:f3:ca:6b:e7:f7:04:bc:50:e4:98:75:1f:
d9:2c:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org