Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C24D42EB2A11EE8C1262BE775412E6.roa
File: 89C24D42EB2A11EE8C1262BE775412E6.roa (raw, json)
Hash identifier: wOWUX6pkH2470pdrbh+XqYYNARAqqq8mypw4Tpwj/hg=
Subject key identifier: 07:0A:D3:46:E3:7E:00:40:A7:9F:85:0C:60:E0:8D:26:F3:E2:3E:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 803F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C24D42EB2A11EE8C1262BE775412E6.roa
Signing time: Tue 26 Mar 2024 04:37:23 +0000
ROA not before: Tue 26 Mar 2024 04:37:19 +0000
ROA not after: Mon 29 Apr 2024 04:37:19 +0000
asID: 149440
IP address blocks: 45.195.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32831 (0x803f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 04:37:19 2024 GMT
Not After : Apr 29 04:37:19 2024 GMT
Subject: CN=66025103-4162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:2d:71:22:49:1b:1e:7a:c4:9b:c2:aa:5a:
ad:74:be:f6:7a:76:a7:c7:88:c1:bd:32:24:57:08:
c1:55:d3:71:1c:8a:f5:b7:5e:5b:f0:4b:54:93:33:
23:8f:5f:d2:c8:d7:c4:6b:07:ea:09:69:a2:2d:97:
73:dd:1f:ea:61:cf:d5:8c:ad:7a:d3:91:f7:c4:9c:
bc:31:47:51:29:b8:b5:f8:2e:35:53:22:2e:b4:b8:
e6:a2:81:47:4e:c3:d3:03:71:d9:c3:fc:5c:03:fb:
f6:94:5d:a6:22:a6:12:c2:cc:f4:0c:ed:15:2a:1f:
7e:2e:97:d6:20:85:b2:8c:8f:fb:24:30:f3:66:d7:
80:ed:11:f7:e8:29:68:0a:cc:be:32:4a:ef:34:2b:
93:c6:b8:ad:80:8c:3e:14:21:be:41:4e:dd:6a:b2:
9b:74:6c:77:0a:c9:f4:4d:10:48:54:be:a6:e8:58:
fb:5f:2b:eb:86:d2:db:71:9a:56:7e:9f:d1:d3:dc:
be:21:cd:7a:a5:62:be:50:74:52:f8:49:2e:b6:d6:
cc:30:51:e0:6c:a1:28:18:c8:34:bd:09:aa:92:0f:
b7:56:15:03:9e:3b:b6:6b:de:73:bc:f1:1b:49:13:
6f:43:9c:24:3b:a4:18:db:74:a6:55:45:d0:d9:d0:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:D3:46:E3:7E:00:40:A7:9F:85:0C:60:E0:8D:26:F3:E2:3E:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C24D42EB2A11EE8C1262BE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:07:9c:41:e9:83:c8:fc:cb:21:11:96:19:b8:6f:e2:d9:f9:
fa:14:5e:65:48:99:d3:85:8d:f9:6b:e0:64:25:ea:9e:eb:65:
b0:53:ea:87:0f:1a:56:45:6a:76:5d:d7:b3:86:1e:ad:d5:14:
80:00:30:86:0f:ca:0d:47:c3:3c:aa:c2:8c:f3:f9:33:c0:f8:
b4:fe:16:9b:2f:6d:be:97:9d:05:07:de:3d:71:71:e6:1d:fc:
fa:9d:8d:21:13:90:6d:db:6c:83:90:36:cd:83:89:f5:fa:24:
12:f6:8e:5b:3b:fe:21:fd:05:51:45:d6:5d:da:d2:38:da:8c:
ef:70:5c:5a:9a:61:70:90:f8:6f:c5:9b:76:c3:7b:20:93:ca:
c0:bd:07:1e:39:0e:aa:08:4f:80:e3:b8:08:c5:4f:81:1b:26:
64:6b:f2:76:03:f5:8f:6a:71:0e:2b:fc:00:aa:61:de:af:29:
96:08:d1:8a:38:f0:5b:61:55:f3:c7:be:99:ab:a6:ae:dd:00:
a5:51:96:d7:d1:df:35:42:e4:35:ad:18:b6:d5:d0:ff:87:60:
fa:3c:ea:57:e3:d5:e4:65:fd:f5:ad:32:16:0b:98:79:a1:53:
e0:75:8a:04:41:81:60:90:74:17:ff:c5:51:cf:d5:06:c0:84:
23:d3:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 05:25:37 2024 by rpki-client on console-ams.rpki-client.org