Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F7DCE645AA11EF8D5E9C8A762E951A.roa
File: 68F7DCE645AA11EF8D5E9C8A762E951A.roa (raw, json)
Hash identifier: s2r064gTwUV5R9RLUJz5dc66gDwnaj1qUjOVFx4RIqk=
Subject key identifier: 0B:45:87:60:09:34:1C:8D:D1:73:29:A3:AE:2B:58:64:6D:C0:DF:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F7DCE645AA11EF8D5E9C8A762E951A.roa
Signing time: Fri 19 Jul 2024 08:39:28 +0000
ROA not before: Fri 19 Jul 2024 08:39:24 +0000
ROA not after: Mon 29 Jul 2024 08:39:24 +0000
asID: 138456
IP address blocks: 45.194.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40364 (0x9dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:39:24 2024 GMT
Not After : Jul 29 08:39:24 2024 GMT
Subject: CN=669a2640-bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:50:cd:15:19:52:af:7f:25:a1:b1:3a:6c:
1e:92:f5:a5:71:d8:ba:99:6c:18:ae:00:b4:53:a0:
7a:36:be:86:be:73:3b:4e:ba:47:b4:5a:16:95:5d:
4a:99:c0:9c:72:ec:63:1d:a9:6c:d3:45:37:e1:1c:
4b:6f:b9:cf:1b:b6:e5:a1:7a:5c:7c:e1:05:0e:16:
0d:b9:9a:e2:a2:16:7d:99:55:fc:e5:4f:4a:2d:3a:
d2:b2:de:16:96:67:57:a0:e1:82:1b:25:e0:8d:ff:
2c:2f:7e:bb:5a:83:72:fe:73:44:ba:99:f0:ec:a9:
b1:19:6e:35:fe:54:81:65:f1:f9:0b:c1:f2:08:12:
87:36:d6:1b:15:15:b3:66:f2:9e:94:2b:8b:13:e3:
52:52:82:32:61:4a:6b:0e:e3:f9:9c:68:4e:57:cb:
a1:f6:17:54:1b:02:db:22:ea:be:7c:c2:0a:f1:b5:
85:0a:3c:78:3e:e2:a8:78:2b:94:62:18:c9:26:49:
fe:e9:fb:93:21:ea:25:05:50:2b:40:99:0e:24:1d:
db:cf:c5:e4:6b:e8:93:f3:05:20:09:b4:ee:9f:bd:
6b:95:0b:26:7f:87:62:a6:76:fd:64:fb:cf:72:1a:
22:55:27:30:28:e5:f8:f3:34:04:81:e8:87:dd:2d:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:87:60:09:34:1C:8D:D1:73:29:A3:AE:2B:58:64:6D:C0:DF:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F7DCE645AA11EF8D5E9C8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.96.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2f:2f:0e:4f:17:95:e9:80:db:cd:fd:93:82:a6:4d:be:3b:
d9:11:6d:1d:14:7f:35:ec:d6:1c:64:0a:91:9f:0c:8f:9e:2d:
6f:2b:3b:63:f6:b5:43:de:5b:ef:c2:09:ac:d7:f9:96:67:8b:
8a:2f:e2:00:68:d5:38:1d:db:ef:95:59:19:b5:2a:1e:4f:b2:
2f:9f:2d:82:dd:03:14:1a:2a:07:94:e9:1a:c7:8d:ed:e1:4f:
ec:32:d8:0c:c9:7b:b4:cd:ad:f5:61:cf:e7:cb:66:34:a5:f0:
7b:85:70:f2:14:e0:34:91:86:f3:7b:2a:7e:d4:61:ee:bf:06:
86:fb:cc:c4:e2:cb:c3:a8:f1:31:3a:8d:d4:99:77:6d:ec:78:
d8:a4:84:bc:84:e8:6b:17:66:44:00:cf:de:b5:0e:e0:25:05:
54:5a:e9:4d:33:a7:09:3d:cc:16:40:b2:ad:06:04:8f:93:79:
55:b3:ba:72:42:cc:b1:cf:fb:06:6a:16:2e:25:b7:87:7e:16:
12:e8:8d:44:96:f4:dd:e0:a1:05:1e:9a:7b:52:5a:59:44:9e:
cb:fc:88:fb:36:95:f7:19:4a:16:49:3c:2d:6c:fa:76:dd:bc:
fb:9e:93:d8:e4:7f:be:3e:58:4e:f6:99:fe:45:ce:52:11:a7:
6c:fb:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:09:46 2024 by rpki-client on console-ams.rpki-client.org