Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842C6E0C4A5311EFA4AFEFB7762E951A.roa
File: 842C6E0C4A5311EFA4AFEFB7762E951A.roa (raw, json)
Hash identifier: 6WGxQgxyXa+CJ9dSfZTH09vknucbnjJPhfvdRfoB5K4=
Subject key identifier: BF:8A:A2:FC:17:F7:09:71:25:94:D4:F5:A6:60:15:B1:4C:02:7D:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842C6E0C4A5311EFA4AFEFB7762E951A.roa
Signing time: Thu 25 Jul 2024 07:00:03 +0000
ROA not before: Thu 25 Jul 2024 07:00:00 +0000
ROA not after: Fri 16 Aug 2024 07:00:00 +0000
asID: 136778
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40837 (0x9f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:00:00 2024 GMT
Not After : Aug 16 07:00:00 2024 GMT
Subject: CN=66a1f7f3-8b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:75:bb:3b:be:b3:18:d0:50:5d:00:9f:bf:
07:4b:f9:12:2e:3c:5f:35:4e:30:b8:7d:61:e3:a2:
e4:72:36:45:ce:6d:db:19:29:d8:86:8b:ed:22:5a:
2a:3e:d2:dc:5f:98:51:56:19:2f:d3:58:97:e5:bf:
18:cf:7b:4e:fb:4c:71:93:1d:39:09:c8:65:a4:6e:
89:36:8d:f8:e7:04:e9:6e:bc:21:c8:da:91:04:d1:
b3:00:d1:87:df:24:ad:5c:33:e6:60:24:e5:aa:aa:
6e:44:52:39:cf:2c:5e:ec:60:43:71:cf:29:3c:82:
79:f2:ad:04:18:b7:68:95:82:96:ab:b4:37:9a:51:
7b:8b:80:85:34:2d:55:bb:43:da:dd:e2:9c:3e:62:
17:1c:d0:90:a5:ca:39:08:cc:fb:6c:0c:bd:0d:94:
e3:28:ed:63:6b:5c:84:e6:97:86:a2:c5:10:54:bb:
39:3c:9d:8f:f1:ef:f3:ac:7d:08:02:25:ab:75:74:
79:82:dc:67:fc:60:36:51:24:47:ea:2f:7a:5f:76:
cc:3b:6e:3b:f4:04:74:0b:84:c5:fe:3e:06:85:a1:
96:74:53:93:df:a6:c1:b7:8b:b9:cc:8e:4f:86:ee:
41:3f:cd:db:f6:8b:42:22:ab:2d:6d:1c:df:c2:19:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8A:A2:FC:17:F7:09:71:25:94:D4:F5:A6:60:15:B1:4C:02:7D:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842C6E0C4A5311EFA4AFEFB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
86:52:86:1e:28:a9:69:5e:51:12:1d:02:57:13:00:c9:31:3a:
e2:ab:c1:92:59:b7:2f:29:f2:b8:ca:73:a1:a2:e9:b7:c6:46:
c9:a5:9c:4e:e7:2e:a7:a8:0d:9b:53:23:12:6b:78:0d:39:f6:
ad:a6:20:08:6d:5e:2a:87:b3:ea:3c:b7:fc:53:2c:da:72:81:
87:0a:6d:83:d9:bf:06:34:e7:ee:b9:a6:31:fa:21:bd:0f:d5:
1b:11:00:29:31:18:13:21:0a:ed:55:f1:77:0a:df:ba:ee:80:
34:de:50:06:ac:b9:a7:f8:6e:e4:1a:e6:c5:fc:d7:71:f3:fd:
72:3b:1a:b8:bd:40:4b:d4:3b:97:b5:4d:b7:9f:d8:27:db:fb:
c9:8a:96:55:39:8d:32:c0:85:ec:5e:3b:f6:9b:42:e6:f9:eb:
8c:a1:1e:23:ea:d2:1c:1d:04:78:b8:1c:e2:8a:02:be:d8:0f:
1f:90:a3:2a:a9:fa:71:4d:dd:43:75:05:87:17:90:b2:ac:ba:
e2:43:90:12:4d:48:af:2c:e0:2b:6c:c4:18:b5:a2:8b:c9:9f:
ae:68:52:e8:55:46:18:7c:ab:ba:4a:3f:8e:fb:60:60:9c:20:
22:12:7e:58:48:60:ed:c3:72:7e:ce:0f:20:00:35:af:bb:60:
f1:db:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 09:53:35 2024 by rpki-client on console-ams.rpki-client.org