Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73194EB6418711EF9FEFD09A762E951A.roa
File: 73194EB6418711EF9FEFD09A762E951A.roa (raw, json)
Hash identifier: WrcH8gyZ3hhX7Oi0ePaA4eGuhoy/jjXb3iPMY45pfiU=
Subject key identifier: E3:92:56:04:AA:24:5D:DE:AE:95:CD:09:05:22:CE:7E:E5:39:89:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73194EB6418711EF9FEFD09A762E951A.roa
Signing time: Sun 14 Jul 2024 02:19:08 +0000
ROA not before: Sun 14 Jul 2024 02:19:05 +0000
ROA not after: Thu 15 Aug 2024 02:19:05 +0000
asID: 23470
IP address blocks: 45.207.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39997 (0x9c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:19:05 2024 GMT
Not After : Aug 15 02:19:05 2024 GMT
Subject: CN=6693359c-cdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:1c:49:37:50:39:da:b1:36:cd:0a:8b:5a:
9c:02:bc:44:bc:bc:1c:74:59:09:14:68:57:21:2b:
43:01:cd:15:d4:99:45:55:20:53:86:71:25:f6:73:
32:55:f7:f4:d4:57:7a:3c:93:fe:b0:c5:07:8c:eb:
cf:36:71:3e:aa:39:6d:f0:10:84:ff:94:ac:5d:d9:
58:1d:f8:bd:32:e5:98:70:b7:a2:51:74:26:17:40:
e8:bf:d3:d8:71:96:fa:ef:2c:67:5f:1e:19:3a:8d:
75:66:0b:00:c9:a8:38:37:b0:d4:c9:0d:76:22:a3:
62:84:7e:29:68:fb:05:f9:ce:54:9b:f4:47:45:97:
d0:e3:71:7a:dd:c8:07:45:7d:6d:68:87:bb:20:6d:
5c:25:15:2b:93:55:a0:68:fa:52:64:70:ff:87:82:
27:19:52:99:4d:53:a1:9a:51:22:ae:81:a3:32:01:
a8:ea:60:54:af:d2:f9:96:80:f5:3a:3e:0f:2d:14:
99:b2:be:0a:f8:48:6d:f7:f9:97:22:f1:34:4a:75:
7f:55:6c:de:0d:9e:fa:ee:28:18:cf:8d:61:7f:b1:
5b:eb:7e:65:41:ce:8b:34:f9:d0:c6:67:f4:b4:04:
fc:a3:73:15:68:d8:d7:c2:f3:2c:e7:d9:4e:fb:e4:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:56:04:AA:24:5D:DE:AE:95:CD:09:05:22:CE:7E:E5:39:89:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73194EB6418711EF9FEFD09A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4e:eb:53:8c:da:ed:04:47:ae:e7:74:8f:4f:9b:6e:f7:de:
7e:1b:36:4f:ec:c8:41:52:56:0d:63:30:f3:b4:8f:70:21:67:
19:9a:17:7b:aa:96:b7:7b:13:94:2c:e4:17:1f:db:85:6e:b6:
a1:30:eb:6b:d4:21:5f:a4:2e:2b:c8:32:d0:3a:d5:19:0e:1f:
9e:61:ca:0b:57:e0:01:e3:bf:78:a4:67:44:e3:38:b9:d7:2e:
20:8b:b9:2c:7e:d9:48:ce:72:af:e3:13:ed:b9:b8:1b:f0:c1:
a4:c3:29:5a:eb:0e:cd:06:b5:c8:4e:30:e8:9c:af:6a:d4:28:
58:ae:8e:1a:2a:ae:72:5c:c0:45:b1:1a:86:3f:ae:fd:1f:56:
65:75:d3:8c:ae:dd:14:ca:ff:7b:06:7f:5a:36:1b:81:94:3f:
00:a4:bc:22:f2:59:d4:8b:bc:a1:88:cc:73:f3:5b:67:47:74:
54:26:d7:4d:54:86:42:09:6b:0c:12:02:b2:63:42:02:24:1c:
13:54:59:7e:01:e0:6a:78:37:b0:37:6d:17:87:86:59:f6:d7:
06:5e:22:76:87:af:0e:c7:b3:24:2c:61:03:a3:e6:62:21:25:
7a:f2:d9:a8:f9:e7:e2:8a:86:19:59:e7:c9:56:3f:c9:92:56:
86:88:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 09:51:35 2024 by rpki-client on console-fra.rpki-client.org