Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77144E8C3F5A11EF88BA9F70762E951A.roa
File: 77144E8C3F5A11EF88BA9F70762E951A.roa (raw, json)
Hash identifier: N2WoI3mOnPGqKrsHdqVIoh70qn4iUKLohkyyaXLWmHg=
Subject key identifier: B2:8A:86:3D:25:FF:96:C9:30:53:AA:DA:13:D8:24:3E:31:D5:F5:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77144E8C3F5A11EF88BA9F70762E951A.roa
Signing time: Thu 11 Jul 2024 07:52:05 +0000
ROA not before: Thu 11 Jul 2024 07:52:01 +0000
ROA not after: Mon 19 Aug 2024 07:52:01 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39858 (0x9bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:52:01 2024 GMT
Not After : Aug 19 07:52:01 2024 GMT
Subject: CN=668f8f25-812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:e5:b6:0f:99:d4:61:2c:4e:a2:ab:c8:2c:
af:9f:dd:e6:08:11:17:d0:4e:03:62:a6:34:80:75:
1e:ca:2a:2a:4e:96:95:d8:77:3b:09:d6:d8:38:81:
b0:ae:09:d2:58:01:e0:e0:e3:6b:a5:18:02:d3:20:
fe:7d:4c:43:31:41:24:68:ec:5d:20:e3:03:99:14:
9f:66:2f:ee:a3:be:50:73:f8:97:97:26:b7:e7:81:
2b:31:bf:95:20:30:d6:85:f1:99:06:26:57:5e:b6:
ab:7b:8b:8f:31:e2:d0:a2:87:89:c5:b8:5b:1d:b2:
7e:f1:2b:c2:52:f6:e5:31:6a:77:79:38:25:b9:8b:
be:26:90:11:00:c5:52:1b:d5:2a:cc:f9:d4:d6:6e:
68:b0:38:9f:e9:1b:1b:df:42:cd:f0:82:3e:59:3a:
a7:f8:8d:d6:63:d5:87:fb:aa:18:14:07:35:f0:27:
a8:0a:58:cf:06:6c:9c:9e:9a:dc:6c:46:89:ca:87:
79:1e:31:c0:08:8c:b3:78:46:14:08:f4:d8:9d:cb:
f3:56:d2:fb:83:23:2e:85:4e:b3:3b:21:27:99:ec:
29:f3:15:bf:7e:e8:55:b0:5b:40:09:ee:ad:88:60:
86:35:bb:eb:a4:8d:89:13:37:d9:51:f2:ea:60:3d:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:86:3D:25:FF:96:C9:30:53:AA:DA:13:D8:24:3E:31:D5:F5:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77144E8C3F5A11EF88BA9F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b3:58:90:29:62:9a:df:12:98:a1:1f:17:d0:fe:b0:08:c9:
c0:2a:a8:c5:4e:76:62:48:eb:82:8d:7c:fe:88:a4:8d:55:d8:
bc:d2:a8:d4:c3:53:1d:ec:38:86:09:6f:56:f5:30:b8:78:03:
93:9d:c0:0f:38:c8:04:ea:50:26:93:63:34:f9:c2:d6:e7:e5:
44:d6:08:43:46:72:e6:ef:8b:50:d4:60:f5:57:8d:1d:23:6d:
7a:d8:c9:53:a8:31:92:aa:70:af:b7:2b:67:25:0c:19:a7:36:
5e:9f:9b:fc:ae:53:f6:c1:3a:70:ec:cb:7f:39:d9:13:e4:31:
76:0e:eb:90:8a:ad:ce:44:07:24:40:66:57:b6:42:4c:e3:bd:
f0:83:ed:d5:cd:25:3e:65:61:67:87:eb:01:92:15:a5:5a:b0:
ca:37:8f:d7:ed:bb:69:32:5f:50:38:41:73:1d:e9:8c:a4:63:
3c:af:c7:a9:da:a0:68:a6:62:58:b9:10:53:7b:ab:4c:02:bb:
64:c7:2c:94:57:02:b5:43:8e:1b:35:68:50:07:c5:24:cd:d4:
48:c6:20:d8:11:3e:9b:68:c7:6a:c7:a1:41:ad:51:0d:6c:f8:
64:ac:0f:32:8c:26:ae:7a:b1:d2:28:cb:92:1f:f7:91:5b:9d:
fe:9c:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 09:21:46 2024 by rpki-client on console-ams.rpki-client.org