Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E74E98002F911EFB8A85E23017001B1.roa
File: 8E74E98002F911EFB8A85E23017001B1.roa (raw, json)
Hash identifier: 2SUf4Uq6c3Y7j4WzbixLqQNMRLS4LAEz1g68w93ejgg=
Subject key identifier: 5E:77:BC:BC:7B:5C:15:14:5C:89:DC:C7:C7:87:F7:46:B2:5E:42:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8521
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E74E98002F911EFB8A85E23017001B1.roa
Signing time: Thu 25 Apr 2024 11:47:13 +0000
ROA not before: Thu 25 Apr 2024 11:47:10 +0000
ROA not after: Sun 05 May 2024 11:47:10 +0000
asID: 21859
IP address blocks: 45.204.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34081 (0x8521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:47:10 2024 GMT
Not After : May 5 11:47:10 2024 GMT
Subject: CN=662a42c1-a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:22:8d:38:ab:a3:54:8e:fe:05:b7:2c:06:
f5:a2:0a:1c:78:35:d1:12:49:7f:46:78:fb:bc:bb:
b5:3e:38:e1:e3:f3:dc:f4:13:64:c0:14:28:65:ee:
09:46:b8:5e:fc:a5:3c:c7:f5:e7:61:21:5d:0e:b8:
00:65:ae:f0:d8:57:bd:93:39:46:7d:6a:d0:d0:55:
c6:8b:40:59:80:ae:ae:ff:b0:61:63:1b:ed:b1:4a:
66:97:d8:ae:79:81:3f:68:9e:ab:29:a3:28:5e:d3:
bd:af:a4:bd:5a:90:20:66:e7:ae:d4:96:79:69:48:
fe:94:91:fa:56:90:f4:15:45:92:60:ee:99:8a:e5:
ec:3f:86:68:bc:b5:6a:9d:ff:d7:e8:89:dc:8d:93:
39:a7:b6:3b:98:4d:a0:c8:dd:ae:df:e9:be:56:ff:
14:2f:05:08:db:99:8f:f0:e0:36:f9:f2:b4:60:fd:
d8:66:29:72:23:3f:73:ef:3e:65:00:9c:44:4b:8f:
90:54:1c:21:2e:99:93:a6:10:54:10:74:08:24:6e:
cb:92:f0:2f:23:d3:34:b9:82:c7:38:4d:81:c1:78:
28:80:1e:94:ed:ed:dd:21:04:f1:9e:30:53:28:1b:
63:1b:35:ac:a4:e1:36:16:fc:04:57:c1:cf:36:d8:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:BC:BC:7B:5C:15:14:5C:89:DC:C7:C7:87:F7:46:B2:5E:42:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E74E98002F911EFB8A85E23017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9a:91:50:57:a4:01:31:43:94:f1:fe:4d:37:d1:b4:8f:64:
c2:50:2b:aa:51:23:94:02:ee:49:4b:c2:19:e5:d4:f8:7b:83:
d7:d4:52:f8:9c:7f:ff:58:ef:ef:95:b3:38:89:cb:42:50:2b:
dd:15:b6:65:6c:66:70:c2:05:e1:59:e9:90:9c:66:b6:e6:1b:
61:23:70:73:ed:7f:4f:da:fd:40:e2:a3:1e:2b:72:79:7c:36:
a6:bc:1d:47:e8:0b:a6:aa:b6:c5:a9:9f:18:5a:61:3f:1c:73:
9a:99:ab:e6:64:f2:76:d2:2b:6c:d0:a1:20:51:6b:ee:3f:56:
08:fc:c5:f4:97:45:01:5a:53:36:5f:09:00:9e:ab:df:6d:c6:
4c:e4:a6:56:a3:35:a2:65:85:1c:82:2b:d1:f5:8f:39:47:c8:
30:7e:24:11:0f:a5:9d:1f:60:7f:c0:83:51:a6:98:e5:1b:2d:
02:1b:d4:15:f8:2a:d8:b6:28:00:2a:63:34:e6:c9:45:75:ad:
31:7d:d5:ef:28:76:29:4e:bf:75:13:fe:e7:2b:97:66:9e:7d:
9f:72:3f:52:75:fa:b6:bb:a5:94:c8:8a:ad:7d:50:e5:b8:43:
e9:94:cb:0b:0f:e5:6d:59:f1:20:4e:8b:b4:3d:08:90:6c:3c:
27:bd:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org