Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A91BD403B9611EF99C23D7D762E951A.roa
File: 8A91BD403B9611EF99C23D7D762E951A.roa (raw, json)
Hash identifier: fIZJKiMvH2i6h3GyRqLMXG7wXXpTR7CCI3tId9/Y+Ng=
Subject key identifier: 71:8B:E0:05:6D:E5:F1:29:A9:E2:60:5E:4A:D9:A1:E6:FF:58:83:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9932
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A91BD403B9611EF99C23D7D762E951A.roa
Signing time: Sat 06 Jul 2024 12:52:03 +0000
ROA not before: Sat 06 Jul 2024 12:51:59 +0000
ROA not after: Thu 08 Aug 2024 12:51:59 +0000
asID: 204174
IP address blocks: 45.207.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39218 (0x9932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:51:59 2024 GMT
Not After : Aug 8 12:51:59 2024 GMT
Subject: CN=66893df3-7f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:9c:40:f0:4e:b0:57:cc:14:1c:f4:fd:30:
68:34:7b:7c:bc:8b:c5:72:64:a5:e6:51:5d:ac:21:
7b:12:6b:ed:f3:33:86:9e:2b:d6:ea:30:b5:df:10:
78:89:89:54:58:ed:7f:f6:d3:13:55:74:6e:36:30:
c6:57:b7:90:61:e6:f7:4e:73:82:dc:f1:50:08:9e:
d6:01:7d:ab:b9:87:e7:f2:5a:20:f3:4d:6a:5e:b3:
82:1b:4b:99:a3:2b:c2:77:0b:02:d0:cb:c3:71:3c:
8e:0c:8e:a2:3c:a5:95:30:53:4d:6b:03:54:6b:ef:
74:39:b5:88:2b:a4:81:69:57:d0:64:25:8a:a8:ef:
eb:df:9f:c9:d3:d3:10:68:37:75:8d:c1:ac:f6:ba:
ff:f0:bc:c4:7e:89:ea:de:d0:66:aa:85:35:14:2e:
bf:f2:10:80:ee:5d:97:04:f6:c0:c7:10:7d:39:75:
87:62:cc:27:da:59:ba:a0:c6:22:c4:8a:c5:7a:68:
23:0b:bc:ae:e2:7b:cd:0c:a7:9a:79:72:b6:b3:b0:
63:b0:54:06:98:01:38:05:ee:38:cf:ea:43:94:da:
b1:85:be:3d:74:d2:d3:14:65:c3:04:ed:29:78:8a:
c6:ea:8c:e1:c3:1d:32:1c:ee:96:42:d2:85:69:91:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:E0:05:6D:E5:F1:29:A9:E2:60:5E:4A:D9:A1:E6:FF:58:83:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A91BD403B9611EF99C23D7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.220.0/22
Signature Algorithm: sha256WithRSAEncryption
04:aa:91:ba:5a:d2:51:66:25:45:80:1e:25:32:75:64:1b:d7:
4d:36:de:57:06:d3:64:1b:12:28:f1:42:0e:44:96:1c:db:10:
e3:b9:97:06:88:06:85:53:df:ce:4d:ed:2b:40:9a:6c:83:5c:
4b:d8:b8:d9:e2:7c:30:75:bd:70:f0:e1:69:7b:5c:74:07:4d:
90:44:cb:8b:fe:6e:7e:94:57:58:4e:44:8f:8d:a1:88:61:62:
8b:ff:69:11:e8:ca:1d:44:38:1a:04:b1:a2:97:bc:47:82:ef:
46:1f:51:57:7b:2a:62:1b:04:a6:d9:70:27:92:69:97:fe:23:
9f:d2:df:a4:e8:fa:ac:1d:81:7d:68:1d:5a:e1:1f:f6:a3:95:
6e:5c:2d:a4:f6:f1:08:6d:c4:51:0d:13:d9:bd:40:ce:4c:bf:
e7:93:dc:08:56:38:29:a2:b5:90:d3:a8:ec:d1:ac:27:48:e5:
f3:72:12:e4:da:24:74:f2:88:dc:5d:8b:8f:18:28:54:a5:a5:
b4:f8:2c:a7:d8:3d:c3:a3:0a:b1:ba:86:c4:15:ac:9c:91:e2:
c4:e9:a5:0b:19:1a:55:22:84:03:5a:64:ce:ac:44:de:90:ca:
36:c0:0b:a2:f2:9c:aa:47:85:84:b4:5e:31:4a:98:a4:c0:f4:
f8:50:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 02:43:40 2024 by rpki-client on console-fra.rpki-client.org