Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B17A7EA87DB11EFA1A878B9762E951A.roa
File: 6B17A7EA87DB11EFA1A878B9762E951A.roa (raw, json)
Hash identifier: mzyH12WBDUTu9gkb4rguk767kSbSugLW5uTGSewCrAQ=
Subject key identifier: 1A:2C:2C:D3:7E:B6:35:D6:6C:2B:FD:7A:1E:00:41:54:5A:FF:21:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C445
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B17A7EA87DB11EFA1A878B9762E951A.roa
Signing time: Fri 11 Oct 2024 14:16:34 +0000
ROA not before: Fri 11 Oct 2024 14:16:30 +0000
ROA not after: Sun 20 Oct 2024 14:16:30 +0000
asID: 216166
IP address blocks: 45.202.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50245 (0xc445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 14:16:30 2024 GMT
Not After : Oct 20 14:16:30 2024 GMT
Subject: CN=67093342-68d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:c9:55:91:e9:49:67:cb:bc:0f:c1:0a:fb:
76:aa:87:7c:f3:65:3e:1e:0c:21:44:88:2a:70:25:
20:c8:13:aa:78:a6:2d:f1:7f:f7:9a:dd:12:94:a6:
bf:2e:71:11:81:75:40:04:14:ab:33:59:93:9f:62:
10:a3:e2:ae:76:b5:a6:89:91:b4:89:b9:1e:90:fd:
49:54:ae:97:54:ca:62:d9:d9:4e:87:d9:e1:fc:0d:
de:8e:fc:77:16:04:ad:a0:3c:24:d0:1a:0e:12:c7:
f9:da:71:72:c8:0d:a1:73:b0:aa:28:65:49:ff:8e:
83:56:27:10:fe:76:b0:c8:0b:c5:22:89:3c:42:33:
97:40:6b:7f:0c:d4:ba:4b:a9:d7:d0:35:2d:70:9e:
a8:7f:de:f0:ff:38:d7:67:ce:76:31:a5:0a:8d:0a:
43:7f:88:61:1e:9b:db:fa:e6:c9:59:b0:34:53:51:
89:0d:b4:c1:40:84:fe:cf:fb:a0:ce:64:fa:32:4f:
1a:c6:6f:a4:3e:06:f4:fb:f3:10:9e:b5:13:a0:39:
69:a4:3c:29:bf:ac:c9:eb:dd:bf:c5:b3:0d:bf:ec:
dc:2a:77:6a:d5:fb:f7:01:b9:13:5d:db:1d:ce:d1:
ba:65:60:04:e6:ea:1c:29:ef:41:d2:1c:fb:2a:f4:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:2C:D3:7E:B6:35:D6:6C:2B:FD:7A:1E:00:41:54:5A:FF:21:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B17A7EA87DB11EFA1A878B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:05:e9:c8:f6:a0:2a:cf:0f:08:23:15:88:91:61:f4:ae:24:
07:f0:17:f7:7f:0a:a7:04:41:68:4b:ff:54:e1:d5:5a:f2:52:
ea:48:12:72:c1:18:86:3b:db:50:4c:40:2f:d5:8a:58:ff:60:
de:7a:75:50:31:49:de:30:c0:59:84:0e:bb:86:31:dc:3c:6e:
79:83:7f:d9:82:9c:9f:7f:bb:7c:d8:4a:d7:89:b5:b3:ff:21:
64:7a:49:c5:03:ef:ea:f4:1c:96:28:fd:4e:2a:87:3c:65:f5:
a4:7d:2b:01:5c:0f:bf:8b:6e:93:be:87:ee:15:07:c6:e0:d6:
a6:d1:e4:66:c4:a2:8a:b5:02:7b:0f:4f:ea:51:46:a1:45:90:
ea:97:39:ba:16:82:8f:02:55:68:b0:08:20:10:92:cd:b1:61:
f9:ee:a9:c2:0c:24:df:04:5d:19:c3:50:ed:b0:8b:49:8b:bd:
06:9a:00:c3:f5:3a:9a:af:1b:2a:4f:fc:aa:82:c2:18:7d:cf:
21:18:10:e7:87:d2:01:76:45:6d:f0:e9:00:ca:e4:f0:f8:f3:
9b:fc:dd:b8:d9:4e:13:71:7c:6b:92:cd:9a:40:77:d0:83:a0:
ff:4a:b7:43:f6:4c:32:d5:e6:76:d4:55:3b:c6:6c:eb:3f:fc:
d8:c6:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:36:15 2024 by rpki-client on console-fra.rpki-client.org