Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735530B045AC11EF9ADF7C98762E951A.roa
File: 735530B045AC11EF9ADF7C98762E951A.roa (raw, json)
Hash identifier: eVgWmtYhsRtkP0LmWQtDl319XciQIqAeQaN4Z9S5yMY=
Subject key identifier: 60:99:93:EB:1E:F4:3B:59:76:B9:88:66:62:83:05:2A:92:EB:01:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DBA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735530B045AC11EF9ADF7C98762E951A.roa
Signing time: Fri 19 Jul 2024 08:54:04 +0000
ROA not before: Fri 19 Jul 2024 08:54:01 +0000
ROA not after: Mon 29 Jul 2024 08:54:01 +0000
asID: 138456
IP address blocks: 45.195.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40378 (0x9dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:54:01 2024 GMT
Not After : Jul 29 08:54:01 2024 GMT
Subject: CN=669a29ac-6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:1b:24:00:68:b0:8f:da:96:7d:e3:80:15:
dc:40:01:50:b4:0f:d3:91:71:97:96:8a:d8:23:59:
45:59:08:08:c3:fe:89:97:cb:15:02:1d:85:69:84:
c1:66:e7:14:49:93:b1:fd:3f:2a:19:c0:bd:00:7d:
fb:8a:af:a3:c1:66:51:74:8b:31:8e:dd:48:e2:49:
db:b5:c5:ee:06:5d:ec:b2:ac:0c:77:e7:a1:77:d9:
80:81:2e:0b:dc:08:e8:5d:53:94:fc:c8:08:e6:aa:
d9:cb:5a:c0:05:5c:d5:56:36:34:f3:41:e0:aa:1a:
30:7b:6e:2b:23:d2:90:87:05:04:1c:46:04:dd:b3:
08:fa:d5:44:22:f0:e7:2a:b5:78:93:72:8c:93:28:
25:e5:ef:4b:04:21:5c:08:c5:65:23:39:0b:32:c8:
c2:1f:c6:a5:08:11:8a:ac:95:95:81:ab:5d:86:3e:
8c:c5:8a:12:90:db:34:30:c1:d1:4e:6d:7c:c7:ef:
ee:ee:52:df:24:53:6c:39:31:47:b8:a9:21:af:b0:
e0:28:56:91:01:39:ae:92:59:62:f9:cd:be:0f:46:
b0:eb:41:12:54:68:57:3a:ce:19:22:ad:3d:5f:93:
2b:4e:33:db:c6:09:58:fc:4d:d9:df:45:d9:ea:03:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:93:EB:1E:F4:3B:59:76:B9:88:66:62:83:05:2A:92:EB:01:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735530B045AC11EF9ADF7C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.136.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:89:e2:ac:a9:9d:87:3b:39:f6:19:49:40:6b:4d:7c:78:
9d:fb:ab:62:c9:4a:4c:fc:3c:9d:f5:f3:6a:33:a5:97:41:04:
90:a2:3c:63:bb:b9:5a:8d:a5:a1:11:66:80:3f:ff:1b:2e:e8:
91:44:a4:4c:3c:f2:55:1d:68:77:cb:b6:0f:dc:a9:23:0b:da:
f6:12:09:93:cf:fe:0a:1e:d8:82:81:e0:36:aa:83:52:59:5e:
bb:c5:22:a9:03:f0:73:32:f9:9d:63:c1:0f:11:bb:56:4a:4b:
82:4b:0b:9d:51:64:31:22:66:d2:07:99:44:fa:8c:ee:60:4b:
bd:b3:74:e5:62:4c:5b:f4:87:89:a4:2e:bf:3f:57:d9:e9:48:
93:79:12:7b:a2:56:9d:99:31:9f:aa:72:3a:e5:0c:91:00:dd:
15:a5:f4:d8:e9:95:72:47:d8:a8:3a:92:e6:f8:bd:91:4b:d9:
94:b9:79:8f:73:e2:1f:24:0c:63:5d:f8:b8:71:a0:96:c8:ac:
2b:e7:ad:e7:e2:09:a9:8a:10:4b:f5:24:b5:ca:dc:54:78:ac:
69:82:13:8c:b3:10:24:d3:9c:a6:16:37:61:a4:ea:9d:44:d5:
a9:1d:bc:78:39:86:8d:cf:9b:8d:54:0d:85:e0:9b:2b:8e:25:
06:20:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org