Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A5A33810D911EE80F5E11F4AD9E6FC.roa
File: 63A5A33810D911EE80F5E11F4AD9E6FC.roa (raw, json)
Hash identifier: RAhUj4dHE08Msa74Pr4gzqTFDg+il6WclUMEMdL8hZU=
Subject key identifier: F5:99:02:F4:29:AE:EB:8C:E6:48:06:BB:CD:4F:EF:20:15:5C:AA:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2CE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A5A33810D911EE80F5E11F4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:47:16 +0000
ROA not before: Thu 22 Jun 2023 08:47:12 +0000
ROA not after: Tue 30 Apr 2024 08:47:12 +0000
asID: 4809
IP address blocks: 45.195.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11490 (0x2ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 08:47:12 2023 GMT
Not After : Apr 30 08:47:12 2024 GMT
Subject: CN=64940a94-acb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:ef:4f:6b:de:3e:81:e9:e9:86:84:df:e0:
f6:01:c9:2c:62:72:cf:02:52:5d:9b:2b:27:46:46:
d8:b9:9a:0c:48:79:5b:a4:4c:08:6e:3a:fe:d4:e8:
06:07:ec:9e:aa:28:87:05:87:8b:05:0a:32:41:ae:
97:1d:56:20:af:55:e3:25:19:e1:2d:91:7e:78:ee:
54:1d:3b:42:6e:e7:06:01:04:33:e9:62:43:67:02:
7f:a6:1f:56:76:e4:dd:cf:57:01:28:10:ff:c4:67:
1d:27:f7:13:5a:a9:5d:17:ac:0e:a1:4d:cb:ae:ac:
89:89:30:b5:74:fb:a9:ed:29:64:5c:30:3f:a6:fd:
dc:83:55:00:29:71:53:b8:c3:80:b0:91:44:06:dc:
5d:e6:b4:21:cc:ab:a8:d9:c7:30:21:b5:bc:08:00:
0d:06:c3:23:c6:8b:8f:72:7e:97:81:d8:d3:7f:4d:
62:41:71:5c:c7:6d:9f:f6:31:c5:b3:79:b2:ac:36:
2d:20:d7:b2:52:ea:ce:7d:d7:02:a1:24:0f:d3:f4:
40:fb:5d:e6:c5:ac:11:48:76:8b:f6:8e:46:eb:49:
c8:d6:89:d5:be:84:f1:d8:f9:b2:8f:7e:30:19:b3:
78:ca:39:cc:55:d8:8c:1c:3a:5f:f5:81:2b:3b:b6:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:02:F4:29:AE:EB:8C:E6:48:06:BB:CD:4F:EF:20:15:5C:AA:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A5A33810D911EE80F5E11F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:64:98:85:ff:88:5f:79:37:41:ae:17:6c:1c:63:c7:91:3f:
fd:04:10:f4:c9:7f:14:b0:9d:c0:01:e8:8e:55:9f:7f:29:4a:
44:ea:9b:d1:db:d1:4c:85:35:32:4c:5f:4f:9d:7e:a2:ef:78:
ba:7a:84:fb:fc:81:2c:f3:3a:20:c8:05:37:f1:14:2f:1f:23:
eb:95:10:a9:51:3a:c1:af:17:a5:5a:16:31:8f:a7:f2:fe:9e:
cf:67:1a:89:c9:38:39:7b:1c:e2:0f:36:57:db:a6:d9:d6:c7:
40:41:45:f5:c8:e2:07:a9:2f:0c:c6:8c:44:ef:85:8b:14:0f:
cb:9e:45:7f:88:32:45:fa:8d:19:4a:0a:1c:a2:9e:4b:bf:3a:
68:75:0c:72:25:0b:f9:4b:fd:7d:f2:4b:de:6c:24:75:43:fe:
4d:cc:a5:d4:89:bd:bc:49:a6:a5:5c:d0:7e:0f:6a:43:91:d7:
a7:67:30:88:31:d4:14:3a:7b:38:2b:35:24:4c:c0:ff:73:c5:
5f:ff:9b:b1:ce:10:8a:1b:a1:bb:68:45:14:af:31:cb:34:12:
92:34:3a:30:c4:b0:cd:ed:26:a1:a0:b4:9d:15:ef:83:13:6b:
8a:a8:a6:29:4c:3a:72:7e:31:fa:26:df:d6:15:25:b5:eb:20:
d6:1a:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org