Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60B6E32045A411EFAC043861762E951A.roa
File: 60B6E32045A411EFAC043861762E951A.roa (raw, json)
Hash identifier: 9sUGXO9xleWZ9lJZZmljNMyfmnNgkCcrERYG6hJs7+M=
Subject key identifier: 53:4C:82:98:94:CF:70:A9:F6:6B:EB:1E:7C:59:DD:20:81:9F:54:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60B6E32045A411EFAC043861762E951A.roa
Signing time: Fri 19 Jul 2024 07:56:17 +0000
ROA not before: Fri 19 Jul 2024 07:56:14 +0000
ROA not after: Mon 29 Jul 2024 07:56:14 +0000
asID: 138630
IP address blocks: 45.204.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40322 (0x9d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 07:56:14 2024 GMT
Not After : Jul 29 07:56:14 2024 GMT
Subject: CN=669a1c21-8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:c1:d0:51:25:9c:f0:df:cf:69:ea:eb:39:
07:16:e9:c7:88:13:a7:c0:f6:a7:eb:a0:00:c6:68:
8a:0c:7a:15:63:8e:a1:e6:c4:1d:84:b3:81:74:65:
b3:41:fd:0c:51:4d:4b:a0:00:a8:78:6d:89:71:0f:
02:08:b6:93:a9:90:93:08:0c:ab:a4:44:fc:b6:4b:
5b:11:f1:97:e0:6d:21:a3:1b:1b:b0:01:4f:05:ca:
07:c9:43:ed:03:25:8e:77:4b:9c:b2:62:4b:d2:03:
07:d6:79:8d:c8:c3:11:50:b0:ea:14:8e:b1:28:36:
09:e0:3e:78:96:f0:5f:bb:03:45:3b:82:d0:1a:c8:
c7:94:58:4b:30:9a:48:48:d8:b3:92:cb:9c:a6:cb:
ab:ea:ae:ab:58:c6:65:4e:2a:fd:18:bf:6f:b1:2c:
53:40:14:3d:75:30:34:34:f2:2f:df:f6:c7:84:86:
bf:95:d6:72:f9:96:cb:30:58:2c:9f:51:a6:7f:d6:
6b:10:85:54:54:8b:37:a3:5f:8c:37:81:29:3b:60:
bb:2f:d3:65:d1:72:dc:a1:49:25:83:00:6a:a5:79:
de:2c:95:1e:45:34:3d:4c:7f:75:4e:2b:c0:76:8a:
3b:56:05:54:66:6e:6a:4b:09:d7:a6:ce:ce:d7:e0:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:82:98:94:CF:70:A9:F6:6B:EB:1E:7C:59:DD:20:81:9F:54:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60B6E32045A411EFAC043861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.95.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ae:a1:34:3b:d0:58:79:63:53:1a:74:f5:20:e7:09:17:b2:
8f:84:a8:5c:a2:7a:b4:38:a2:15:c2:48:85:f5:f1:5b:f3:68:
e7:25:d1:24:0c:4d:fc:e2:08:83:52:45:bd:7d:38:84:19:d7:
c9:b7:a6:d2:d2:d7:82:18:f9:f5:94:f2:2d:91:5a:cf:5e:20:
cc:91:27:f9:78:11:3d:cc:cc:41:51:e4:50:d5:3b:9b:fc:b8:
f6:1c:11:8a:1f:80:0a:a1:4e:0f:75:08:11:49:4b:6c:d3:0a:
24:26:ff:ca:87:75:6a:87:84:d6:44:6b:48:94:87:bf:22:11:
e1:09:8c:b3:ee:83:f2:48:11:4d:53:f5:e3:47:38:96:fe:17:
46:41:38:32:b7:da:42:cb:0d:97:0e:78:4f:77:cf:a0:9d:0d:
f7:a4:27:41:23:14:55:eb:03:23:bd:b0:e5:a2:7a:bf:8d:a2:
a1:9c:41:58:51:54:c8:fc:d6:90:ad:37:d0:0e:e8:0a:0d:57:
50:2a:32:64:6c:67:2e:90:3d:84:d7:67:67:8f:2f:9e:69:49:
52:9a:61:3c:ce:13:e2:67:60:89:d4:62:3f:16:03:12:56:cc:
8e:71:93:66:08:5f:51:83:ac:89:e4:c8:a6:4b:7e:f7:de:70:
63:d8:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org