Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B59F9E2B5A11EE9F546B534AD9E6FC.roa
File: 69B59F9E2B5A11EE9F546B534AD9E6FC.roa (raw, json)
Hash identifier: GwKxydtQf5ksH5g5FxDjZEKUQMFmRW8NeF7uni3L9Xw=
Subject key identifier: 17:53:E4:AC:6E:6C:1D:BD:58:51:BD:2F:63:99:73:1E:F7:3C:1B:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3280
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B59F9E2B5A11EE9F546B534AD9E6FC.roa
Signing time: Wed 26 Jul 2023 02:16:22 +0000
ROA not before: Wed 26 Jul 2023 02:16:18 +0000
ROA not after: Wed 03 Jan 2024 02:16:18 +0000
asID: 139057
IP address blocks: 45.192.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12928 (0x3280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 02:16:18 2023 GMT
Not After : Jan 3 02:16:18 2024 GMT
Subject: CN=64c081f5-22ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:4f:d9:8f:8f:7a:41:20:dc:52:9e:07:50:
09:52:e9:24:3c:6f:00:4d:7e:b1:50:b9:db:3c:22:
ca:32:49:61:39:ce:b1:1e:f4:d8:2e:8b:b0:05:e1:
2c:8d:e5:2a:6d:54:8f:2c:2f:1f:f7:83:f9:d3:dd:
b0:1d:a8:15:bc:55:c6:23:ce:d9:88:f5:64:73:10:
7c:bc:ea:ee:e0:26:0b:e1:f8:b3:df:ae:55:77:6d:
2d:da:a9:ce:02:23:ff:39:82:26:4f:3c:9b:de:ea:
77:46:22:2e:0c:82:fb:35:c5:18:db:ff:b2:5f:67:
07:a3:4c:b8:a8:1e:e5:9b:09:b9:91:2f:f1:c7:67:
94:d2:13:32:bb:9e:af:76:c7:6b:88:b1:c2:1c:80:
0c:2b:4b:1b:74:e1:77:8a:b9:71:73:24:87:ce:8a:
3a:56:54:06:9d:d7:c2:af:81:fd:2e:d9:13:64:31:
5b:15:ae:6f:f8:0c:36:fb:c2:a4:92:e2:64:c2:83:
24:33:5c:cb:b7:55:2d:ca:ca:8f:c5:96:a9:72:a4:
8f:09:7a:10:aa:01:47:19:80:8b:3d:46:54:5a:82:
54:4b:13:58:64:12:03:a6:6e:75:2f:1c:72:64:77:
09:c6:ea:9e:e7:03:20:c7:b4:a9:a9:ad:97:df:6b:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:53:E4:AC:6E:6C:1D:BD:58:51:BD:2F:63:99:73:1E:F7:3C:1B:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B59F9E2B5A11EE9F546B534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.128.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e7:85:ee:75:ab:14:bb:4a:af:06:25:46:95:da:f3:5e:25:
9f:ed:49:85:dd:ab:cc:ae:c7:37:cd:c7:81:52:db:89:84:bc:
4b:44:83:25:9f:a5:5f:66:a5:f0:fd:37:5a:05:ae:19:6a:a2:
01:03:cf:8f:82:4f:10:b1:f5:4b:e5:a7:e2:02:b9:0b:05:2d:
3e:5b:0e:ef:37:67:20:dd:a0:74:bf:b9:1b:78:b0:4e:86:6a:
ab:15:bd:b8:2d:16:5d:c3:f7:33:07:af:be:94:e5:52:27:ac:
5e:9e:80:ea:1a:fe:e5:fa:24:16:41:0a:0f:a0:84:68:96:c8:
82:af:1a:60:10:21:ae:fd:55:35:0b:95:cd:da:74:82:40:50:
ec:f2:29:30:d8:6c:42:da:9d:a0:9c:18:0c:58:12:b1:6f:53:
29:d2:05:7d:5b:f9:55:61:86:69:ce:6c:c9:30:bb:a8:75:e5:
95:99:5b:a6:bc:ef:2d:64:f1:21:60:52:54:71:66:f1:8e:d9:
7d:93:b9:af:26:8c:38:0a:eb:bc:65:a4:9f:65:f7:3c:1b:3a:
f3:af:ce:10:1d:75:87:b5:e5:88:c5:c2:bb:a1:8f:e9:40:bd:
35:81:0a:22:fc:80:42:6a:bf:a3:c3:d9:92:1b:d3:2c:e0:4d:
63:35:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:06 2024 by rpki-client on console-fra.rpki-client.org