Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F25A8E43E9811EF9A7E164A762E951A.roa
File: 8F25A8E43E9811EF9A7E164A762E951A.roa (raw, json)
Hash identifier: SxvsIWDvuUqZKGpM/M1qFJiwiw3XEYBVUZDBVHfEVos=
Subject key identifier: 31:EA:1F:43:DD:0B:B0:99:52:51:3C:D1:DC:A7:35:4C:90:67:87:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F25A8E43E9811EF9A7E164A762E951A.roa
Signing time: Wed 10 Jul 2024 08:44:03 +0000
ROA not before: Wed 10 Jul 2024 08:44:00 +0000
ROA not after: Fri 02 Aug 2024 08:44:00 +0000
asID: 139646
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39510 (0x9a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:44:00 2024 GMT
Not After : Aug 2 08:44:00 2024 GMT
Subject: CN=668e49d3-049a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:38:fe:9a:3e:a8:4b:04:f7:d8:b4:f6:2b:
e7:99:17:80:26:a9:a6:fb:41:1f:45:a3:6b:63:03:
c8:f7:2a:89:70:c4:ea:1f:ab:b3:e0:b3:a3:5e:da:
35:16:cb:7d:f5:30:2d:ee:da:9a:b5:bf:e9:27:03:
e0:31:e6:17:44:9c:05:9d:3d:d9:49:a5:53:de:df:
ab:27:d8:51:fa:1e:56:b4:23:7c:64:cf:88:e7:52:
0e:73:d0:f1:a0:65:84:82:7c:4d:e2:2d:35:02:e6:
de:d8:72:9f:fd:4f:23:69:03:94:a9:83:82:d0:7d:
11:c4:85:c5:f2:7a:c4:7d:40:ff:17:5f:0b:3e:c6:
13:2a:fa:13:46:68:10:39:2b:27:87:69:67:a7:8f:
42:32:ae:cc:24:d2:78:fc:b1:b6:ce:01:10:d8:9e:
69:0d:90:05:63:00:33:0f:87:83:2a:7e:b3:9c:e3:
05:9e:57:a1:a4:78:e5:99:5a:8e:b3:22:04:ef:94:
57:98:db:02:f7:d1:25:c5:2e:bf:da:22:84:8f:f7:
47:ea:f6:5b:ac:95:a1:14:df:01:49:29:9d:6b:02:
18:30:c4:d1:4d:6a:20:d3:82:ea:3e:13:14:2e:c0:
a7:23:33:20:72:95:1c:35:1e:10:f8:a1:95:83:ca:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:1F:43:DD:0B:B0:99:52:51:3C:D1:DC:A7:35:4C:90:67:87:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F25A8E43E9811EF9A7E164A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
23:14:a1:0b:6b:2d:8f:fc:b6:bf:24:b8:04:b3:ba:bf:e8:cd:
3b:43:94:25:3a:96:b8:a2:e9:bb:31:98:94:8d:76:81:31:b7:
7d:ee:d2:e6:85:d8:5a:cb:43:2c:5c:ac:3e:f1:22:2f:c8:1e:
2e:04:aa:24:5a:01:3d:ed:0d:33:80:f5:5c:a4:88:3b:4a:db:
0c:e4:5a:50:9a:33:9f:81:2f:0e:b0:2a:58:81:c7:60:c9:88:
d9:4e:d0:05:c7:9c:b9:62:87:fa:bb:36:8c:ef:bc:2e:29:6a:
65:b4:ac:72:35:b1:64:6b:6f:db:5a:ee:43:6a:32:06:23:29:
a3:56:67:33:cf:3d:70:19:66:8e:88:6d:54:43:86:39:33:65:
90:83:32:f8:2e:e1:0e:d4:c7:24:2e:3e:57:79:72:69:22:97:
00:82:71:33:f0:53:9c:a2:6f:1d:ac:e0:cd:7d:51:d3:28:7b:
38:b5:ad:4d:fc:37:44:93:a3:6b:dc:0a:df:07:a8:64:fc:9a:
13:bf:60:05:85:0c:e1:d1:7e:92:ec:d1:39:fd:d7:32:d9:95:
b3:3a:a3:74:15:e5:e6:b2:62:c1:1d:33:95:a2:49:e1:0f:18:
33:30:cf:e8:81:20:0a:09:d6:a3:6c:11:1e:5f:0d:8f:6d:3d:
50:d0:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org