Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842812463B9711EF96A40286762E951A.roa
File: 842812463B9711EF96A40286762E951A.roa (raw, json)
Hash identifier: FiAfcbKxJSL5YiJLVnJ8QAatlbHDuWvjwUKyLQafTjA=
Subject key identifier: FD:15:42:5C:5B:68:FC:11:A3:66:06:CF:99:71:FE:BF:A5:FB:20:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9942
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842812463B9711EF96A40286762E951A.roa
Signing time: Sat 06 Jul 2024 12:59:01 +0000
ROA not before: Sat 06 Jul 2024 12:58:58 +0000
ROA not after: Wed 07 Aug 2024 12:58:58 +0000
asID: 174
IP address blocks: 45.196.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39234 (0x9942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:58:58 2024 GMT
Not After : Aug 7 12:58:58 2024 GMT
Subject: CN=66893f95-f3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:c0:76:fc:34:9b:22:3a:9d:32:01:0e:d2:
45:cb:d5:4f:54:29:13:5a:4a:b8:77:0e:80:67:d0:
0c:db:ff:76:7f:90:d2:0b:f9:46:41:8d:0e:e5:f2:
d4:56:3f:13:3c:c5:85:f1:54:d4:be:27:d0:07:28:
88:0e:82:ec:04:88:40:fd:95:0f:d6:e1:aa:08:6e:
35:c5:9b:dd:ec:7c:51:16:03:2d:b8:f5:8f:af:6b:
87:6a:a4:7e:14:19:59:05:92:4d:66:00:9c:f3:bc:
99:4d:cc:b3:c1:92:c1:5e:f2:d4:ef:a8:dc:82:bd:
c4:f1:86:b4:67:49:ea:9a:5d:e7:9d:a3:23:9d:0b:
6f:6a:f0:0f:23:cf:79:51:de:d7:cb:04:eb:aa:9d:
16:d4:45:a7:54:9c:f7:46:f8:29:c6:56:8d:bd:b7:
1b:ff:52:84:ea:6e:5f:92:cf:37:04:d4:21:71:33:
ea:df:d4:36:61:0b:23:91:bb:1d:96:2d:4d:0f:53:
94:42:11:d3:c6:5f:1c:d3:57:38:07:37:31:6b:45:
bf:50:f3:6c:bd:e5:ed:ce:e0:e5:f0:4c:b1:a8:69:
a7:24:7a:bf:b4:d1:18:06:aa:43:bf:9a:ec:4c:f5:
ce:77:3a:a2:8d:94:75:1b:d2:57:52:ba:9f:d8:0c:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:15:42:5C:5B:68:FC:11:A3:66:06:CF:99:71:FE:BF:A5:FB:20:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842812463B9711EF96A40286762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.160.0/19
Signature Algorithm: sha256WithRSAEncryption
65:f9:70:a8:d5:8b:40:74:6f:eb:9f:85:1b:3f:39:d3:be:84:
2b:b7:10:5b:0c:1d:ed:23:e0:d7:e6:5d:7e:87:5f:e4:61:47:
29:d3:fe:97:14:c2:4c:05:d4:ab:f1:47:4a:43:63:b5:45:85:
e8:3b:83:57:36:6a:96:f8:81:27:52:0c:c8:ac:fc:c7:b3:9a:
6a:9b:b0:ba:38:0c:ce:fe:39:d3:2c:77:3a:f7:c9:85:dd:6d:
b0:54:f7:55:a9:78:8b:bb:46:bf:a3:63:88:d7:14:8a:94:d6:
1e:1c:57:be:10:fd:ba:47:eb:47:2b:d6:57:8a:28:de:f2:3f:
6c:e2:0e:cb:84:2d:2f:9c:93:90:b9:39:e0:c5:ea:46:c2:08:
1a:dd:e9:b6:72:82:c0:08:e4:8b:a7:44:79:88:ce:56:c1:54:
08:36:a5:50:49:4e:b2:25:ff:23:a3:2f:df:8c:b3:ec:f0:2c:
97:38:e6:ca:71:17:c5:6b:a1:9e:78:ab:8c:95:6c:82:93:d2:
f0:71:7d:f4:5c:cf:8e:5e:58:89:04:c0:8f:df:a4:a3:5e:26:
b9:31:94:02:c2:5b:1b:10:c6:b3:eb:37:f0:dc:2b:eb:bb:81:
3a:68:c4:ee:1d:9a:73:fb:df:4f:9d:b1:ad:ce:96:ca:e4:51:
a3:38:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 03:13:56 2024 by rpki-client on console-fra.rpki-client.org