Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BCFF5C429511EFB6844B48762E951A.roa
File: 64BCFF5C429511EFB6844B48762E951A.roa (raw, json)
Hash identifier: C1ukcXlSWpMgaTFeOpw/AcTFjuLna9FLSv/h4UeUB8o=
Subject key identifier: 2B:33:28:68:70:10:EC:1C:51:12:CA:AF:E9:10:3C:13:5D:44:20:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BCFF5C429511EFB6844B48762E951A.roa
Signing time: Mon 15 Jul 2024 10:31:28 +0000
ROA not before: Mon 15 Jul 2024 10:31:24 +0000
ROA not after: Sun 01 Sep 2024 10:31:24 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40086 (0x9c96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 10:31:24 2024 GMT
Not After : Sep 1 10:31:24 2024 GMT
Subject: CN=6694fa80-5dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:03:50:d6:f8:81:3f:8d:69:71:9a:d8:8c:
c5:64:df:7c:52:39:0e:5b:5e:07:65:d4:61:c7:c4:
ab:d1:3c:4e:10:39:aa:6c:ee:70:fd:13:6c:e8:4b:
d5:07:09:94:48:6a:47:1b:56:23:19:d0:e3:9f:c5:
69:e5:27:07:92:4c:72:62:12:3f:a0:58:04:28:01:
6a:78:10:ce:44:22:81:ff:29:ec:38:2f:f9:98:e5:
74:d0:9c:e6:9c:12:bd:0f:4c:cb:fa:c5:bc:f4:83:
fd:05:72:a1:31:4d:99:75:33:ba:e8:29:50:e6:ad:
73:21:24:04:ed:37:bf:93:67:4a:9d:80:81:f1:eb:
9f:3e:b6:71:18:67:ab:df:71:df:f7:00:34:06:87:
12:60:82:cf:de:84:2e:d7:44:8a:22:2d:2b:56:b2:
64:44:b7:cb:81:17:4b:ba:24:28:9b:e2:1d:01:c3:
a2:19:a4:45:cc:76:60:95:4e:01:40:92:f1:36:7b:
2f:f3:82:0e:82:36:23:9e:81:5b:b7:db:6e:ad:74:
2d:2a:ef:05:50:16:7b:00:78:45:29:a7:ea:fb:c3:
76:84:91:16:7e:a6:6c:6d:fb:a9:d6:65:fe:be:93:
79:73:7e:5e:db:d8:59:d1:e5:3c:b0:d9:dc:14:7b:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:28:68:70:10:EC:1C:51:12:CA:AF:E9:10:3C:13:5D:44:20:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64BCFF5C429511EFB6844B48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:58:e8:29:4e:c1:a0:9f:c3:3a:8c:91:39:87:f6:d2:ad:
e1:de:25:75:59:24:e0:11:a6:06:39:dd:e6:01:bd:8f:6c:20:
8b:59:dc:f1:9a:67:de:73:79:0d:ab:ea:6a:45:33:6d:03:02:
5f:c8:5d:f9:34:c6:98:3b:17:56:4e:b7:40:fd:9a:29:69:fd:
7c:c2:38:71:ea:b6:57:52:55:b1:7c:b8:dd:89:d7:91:f9:1f:
9c:31:8e:86:54:fa:d6:8f:c9:cd:4f:c4:9b:c7:13:44:ae:93:
fe:9a:87:ab:99:2a:74:e4:82:49:0f:e2:97:72:fd:92:0a:6b:
a7:74:9c:3f:75:a9:92:22:e7:60:4e:74:cd:cb:2d:c8:3c:2b:
4e:5a:2f:1c:da:f5:63:fe:80:40:c3:97:a6:7f:e2:2e:3f:2b:
60:99:41:25:9c:0b:fd:10:9a:a3:68:05:b4:36:4c:15:05:62:
62:0d:78:ac:d1:19:27:94:5e:24:01:ce:13:97:38:6d:d0:3e:
f1:bf:aa:33:21:d9:0f:fd:81:70:90:80:89:bb:4d:20:cc:d1:
c8:82:82:29:f6:51:b2:ab:af:e7:e4:09:a9:27:e5:3f:69:c7:
81:21:e6:b4:0a:b7:23:87:cb:67:95:51:db:1f:48:b9:23:df:
3c:c3:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 16:12:18 2024 by rpki-client on console-ams.rpki-client.org