Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAE6B3A022311EF82A48B53017001B1.roa
File: 8BAE6B3A022311EF82A48B53017001B1.roa (raw, json)
Hash identifier: SEkW6PkGymf2vCs2frafSS7X4OQIAqZDyzjklaSwOUQ=
Subject key identifier: 97:D8:6B:5B:4F:CD:BC:20:21:0C:D3:88:B4:13:EE:A1:61:0E:B1:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAE6B3A022311EF82A48B53017001B1.roa
Signing time: Wed 24 Apr 2024 10:15:16 +0000
ROA not before: Wed 24 Apr 2024 10:15:13 +0000
ROA not after: Fri 03 May 2024 10:15:13 +0000
asID: 54467
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34002 (0x84d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 10:15:13 2024 GMT
Not After : May 3 10:15:13 2024 GMT
Subject: CN=6628dbb4-cb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:ee:03:1a:44:89:32:52:f4:10:f8:82:38:
f6:53:23:44:0b:ed:4a:89:e7:12:a5:4e:42:7e:81:
f6:08:74:0a:b1:1e:ce:b8:72:d3:f4:ef:c1:b7:89:
43:d3:56:21:fb:86:14:ff:ad:21:f6:71:4b:a8:5a:
a8:82:e2:cf:42:85:2a:74:78:c7:85:c4:f1:70:8d:
b7:1f:da:59:dd:a1:71:6a:44:42:06:ae:0b:a1:29:
c0:92:70:df:b2:5d:66:2e:31:27:95:00:f0:b7:36:
8f:52:1d:4f:64:d0:84:00:d7:c4:22:36:19:2d:03:
61:1d:78:39:8f:80:e5:79:3b:e6:7f:0e:23:f0:40:
08:e7:db:d6:76:5d:40:ae:22:53:2b:7a:34:99:19:
ef:1f:5f:32:e6:3a:07:be:c5:8c:26:e9:d6:b3:88:
6b:a1:76:68:ff:f7:79:d9:ec:f3:68:72:45:16:bb:
66:b0:5f:62:c5:b7:87:35:e5:12:c0:b1:98:72:6a:
70:7e:46:ab:1f:55:0a:b8:9d:78:1d:ad:5b:94:b1:
cf:e1:7e:e0:a6:2c:d7:54:df:e6:a0:2e:b3:3d:e0:
20:81:a1:25:0a:29:7e:ff:63:66:f2:20:84:f8:4c:
84:52:c2:ff:ee:2b:0e:f4:6e:32:43:7d:3e:79:c3:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:6B:5B:4F:CD:BC:20:21:0C:D3:88:B4:13:EE:A1:61:0E:B1:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BAE6B3A022311EF82A48B53017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:90:d9:6f:10:a2:8e:87:5c:de:95:de:e7:e7:4b:3a:a8:f1:
ae:5a:83:44:8f:c0:ef:13:8c:98:88:ab:a6:f5:8e:44:95:e9:
4a:71:62:cd:dc:6c:8d:e1:ea:e0:26:eb:ad:ec:30:5e:d6:df:
44:99:ce:55:33:11:ce:8f:97:6e:02:b3:f1:f0:f0:1c:4c:2d:
4f:e4:d4:55:e3:88:49:9a:1f:7d:d7:0f:34:38:91:16:e2:89:
59:2b:ce:da:17:41:b8:a3:6e:f7:db:cc:fb:62:e7:44:31:5a:
ad:c8:e9:c0:d5:bd:2b:8d:ac:07:bf:62:03:68:3e:ab:56:59:
1a:a1:6d:df:ae:95:1e:3c:76:03:d5:2a:71:7d:66:b6:8f:e8:
b1:27:6a:4f:15:f2:65:5e:b7:72:8f:37:c8:ec:4b:db:3c:72:
58:9c:bf:d3:27:3b:03:1c:b5:4f:c1:61:19:63:a3:f0:f4:71:
92:0c:fc:8a:4e:16:9f:a6:c0:67:ac:9a:20:35:80:b9:30:85:
74:3b:35:3f:2f:b1:50:4b:81:98:db:8d:54:a3:ec:42:d7:6b:
0f:12:05:96:c2:f2:09:d8:45:d5:b9:9f:84:52:1b:28:50:28:
94:37:c4:31:87:bc:17:ad:21:63:af:53:c7:1a:43:90:66:f4:
de:dc:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:15:33 2024 by rpki-client on console-fra.rpki-client.org