Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A60C68338611EF856FAE46762E951A.roa
File: 71A60C68338611EF856FAE46762E951A.roa (raw, json)
Hash identifier: Eue0bkQybAD0dpC+Og8/ZIfbxWaIRLXdCFQsA6CSGmw=
Subject key identifier: 5C:0A:58:EE:6A:D3:7D:D2:29:AC:C4:E0:63:EA:C9:AE:5F:AD:B8:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9545
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A60C68338611EF856FAE46762E951A.roa
Signing time: Wed 26 Jun 2024 06:36:40 +0000
ROA not before: Wed 26 Jun 2024 06:36:36 +0000
ROA not after: Mon 29 Jul 2024 06:36:36 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38213 (0x9545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:36:36 2024 GMT
Not After : Jul 29 06:36:36 2024 GMT
Subject: CN=667bb6f8-d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:af:07:b0:8d:67:84:fa:4e:da:b4:27:33:
38:83:5f:ed:fd:49:75:4c:81:28:e3:57:a1:f9:d0:
1f:5a:45:6c:89:50:51:e1:14:2b:93:29:42:eb:02:
31:ce:cb:bf:27:0e:0c:cc:39:3f:43:86:de:57:0e:
5a:b0:19:d3:d8:95:52:38:e8:4e:7b:9f:c1:29:08:
9f:b3:25:0b:0d:74:a1:0b:f8:0c:5e:37:fe:2c:c6:
e8:aa:fb:1b:9c:23:15:ac:9c:0f:c4:6a:bb:7a:a9:
73:0b:c4:a5:ad:e5:94:ec:cb:30:8e:62:a5:06:a0:
e7:b0:d2:a8:28:c8:9d:0a:88:6c:86:46:a0:3c:42:
71:1c:90:b7:1b:99:79:72:cb:46:f7:82:98:70:e5:
aa:ce:7f:35:bd:2b:40:8f:a7:3f:0f:7e:ae:90:06:
10:7c:51:3f:c7:b5:36:ef:e8:e2:d6:11:77:99:75:
19:47:84:18:6c:05:07:4b:92:41:43:2b:d1:39:f2:
7e:e0:43:c0:80:69:8c:3d:32:7c:37:a7:29:7f:8d:
3d:31:ea:f1:c4:fc:a3:a7:2c:02:47:9f:23:ef:10:
ef:05:d9:76:10:87:5c:af:0a:1f:29:b0:b0:47:6e:
f7:2e:07:1d:fb:17:d2:8c:59:7b:53:2f:92:12:2c:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:58:EE:6A:D3:7D:D2:29:AC:C4:E0:63:EA:C9:AE:5F:AD:B8:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A60C68338611EF856FAE46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:80:95:fa:90:13:3a:11:c2:6f:d6:73:3a:3d:44:be:93:3e:
62:45:e7:39:79:5c:ad:b1:24:ea:5f:7f:d1:22:f2:42:57:ed:
47:c7:bd:73:3b:c4:8d:05:63:2f:6f:1b:e0:6b:dd:16:a2:76:
2e:83:d0:17:2b:71:8c:c0:6f:fa:1a:f5:9c:ce:b8:b6:d3:c5:
b8:2e:e0:33:db:8b:3a:66:6f:e9:1c:d6:0b:65:a6:dd:bc:cf:
7f:99:dc:2b:25:99:c1:1e:f5:0c:36:92:20:ca:b1:91:c7:cd:
1f:1b:b0:ac:58:8e:6b:b8:56:a1:3f:6c:0b:07:76:82:61:aa:
08:ee:e9:90:7c:04:b7:6e:70:9d:db:5b:da:7b:a1:d2:ab:38:
e7:3c:ee:db:30:0e:7d:5f:56:ca:12:80:12:22:de:4f:f5:9b:
ea:51:14:86:81:f6:57:8a:da:9f:81:46:d6:2d:81:12:84:5c:
c9:23:9f:9c:0f:d9:04:44:f4:aa:67:71:f1:98:12:3f:e6:24:
d7:e1:14:ca:91:f0:02:17:43:7d:82:03:e8:f9:3f:d2:54:76:
a4:02:74:9d:2e:76:6f:9e:85:8e:b1:85:60:83:cc:46:40:a7:
be:c3:0e:59:9c:56:a3:04:07:7e:c6:dd:41:7e:96:49:e7:c5:
89:26:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org