Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E648B623E9C11EFBAA8AF62762E951A.roa
File: 6E648B623E9C11EFBAA8AF62762E951A.roa (raw, json)
Hash identifier: fs2GmtdwCU31qsnyTdsafQ6k6z6YUEIaXHzx3j48OpQ=
Subject key identifier: 97:03:EF:20:C2:CB:10:BE:90:D8:9D:0A:0C:7F:F9:AA:E6:5C:E9:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9AB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E648B623E9C11EFBAA8AF62762E951A.roa
Signing time: Wed 10 Jul 2024 09:11:46 +0000
ROA not before: Wed 10 Jul 2024 09:11:43 +0000
ROA not after: Fri 02 Aug 2024 09:11:43 +0000
asID: 139646
IP address blocks: 45.207.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39600 (0x9ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:11:43 2024 GMT
Not After : Aug 2 09:11:43 2024 GMT
Subject: CN=668e5052-8688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:af:79:de:5d:f3:ca:b4:8e:74:a8:8f:f4:
40:41:e1:a6:ef:63:b8:85:54:9d:12:27:4c:3e:38:
75:8d:27:69:53:b4:9b:f2:53:6d:14:7f:b2:2e:2a:
8c:06:6c:a7:1c:82:bd:aa:cf:52:d8:f7:c6:bb:81:
e8:45:f2:5f:00:2e:d1:71:f9:e6:e9:49:97:e3:61:
ad:3e:93:31:19:b6:2f:b9:f7:0a:00:05:c1:75:56:
bb:f4:04:a4:47:72:f6:63:28:45:46:0b:5f:96:b4:
a3:44:e9:d7:aa:ff:0d:15:2e:21:c7:2a:e9:42:06:
91:50:01:4f:dd:5e:39:79:6e:5b:b9:b1:d3:5e:7c:
f0:c8:ad:57:66:da:b9:f5:42:bc:b2:17:0a:3d:2c:
f7:5e:bb:54:70:d8:c4:a4:1a:49:cd:87:5b:5b:d1:
83:3c:ab:d1:bf:c0:55:d7:90:04:b4:01:66:8e:71:
9b:dc:d2:ca:26:4a:d8:87:ab:ea:4b:3a:b8:b6:ba:
0b:68:4e:f3:9b:04:1b:00:4f:5d:53:b3:0d:ee:7a:
3a:75:93:08:c9:d2:ae:77:8d:ce:db:19:9f:e3:79:
88:3b:0b:8e:55:b3:ae:ea:42:ad:05:6f:72:43:bb:
f1:af:dc:d8:00:a7:99:1f:93:db:68:e5:25:ec:d9:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:03:EF:20:C2:CB:10:BE:90:D8:9D:0A:0C:7F:F9:AA:E6:5C:E9:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E648B623E9C11EFBAA8AF62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
39:7a:6e:89:69:65:54:3e:bd:5a:37:5b:3c:6f:0a:a6:57:cc:
55:67:ce:bb:2d:6c:33:6b:32:ed:2f:03:e7:4b:09:e8:15:e0:
5c:36:05:b3:18:bb:9f:bb:34:d6:66:7b:79:d6:45:d3:97:9a:
4f:7b:51:8c:20:c7:8b:2d:84:21:c3:38:93:37:18:1e:e3:85:
cf:55:c0:03:6e:66:a3:79:cf:b0:b9:0a:05:78:a9:e0:8e:bc:
c9:80:df:d0:61:73:c8:5d:a0:32:67:50:ee:6c:a1:b5:46:26:
2e:c8:be:8e:c6:7f:f6:8d:38:c2:95:fc:b7:7c:c0:0b:87:01:
a5:cb:30:bd:63:0b:6e:c5:7c:1a:b9:be:c0:23:cf:23:c4:a4:
d5:c7:0d:91:8d:51:86:ea:da:79:df:f1:ad:a7:b1:2d:0e:3a:
6c:1e:a0:e8:33:0a:b4:70:04:ea:f5:46:40:1a:4e:c5:c4:95:
d1:89:c1:ec:1e:21:b1:03:ad:0b:1c:32:fd:c8:3f:e1:e8:fa:
00:08:a9:d9:fa:34:4b:52:b8:36:0d:e3:cc:d8:03:93:23:26:
a0:82:c4:63:cb:cd:19:05:93:4b:bd:de:ba:25:48:89:e9:fd:
89:2c:b5:ae:8b:8c:53:62:5c:bd:35:c0:04:eb:dc:2e:b1:73:
04:b5:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org