Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906A3CCAFB9E11EE9C65C534017001B1.roa
File: 906A3CCAFB9E11EE9C65C534017001B1.roa (raw, json)
Hash identifier: nJl5mATbTreTYvt/Gu0QDmJzTsP1ffHqAhL9sD7aJvY=
Subject key identifier: DF:20:D3:7A:62:36:7A:57:58:E6:54:EB:0A:3F:03:72:4C:4A:C3:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906A3CCAFB9E11EE9C65C534017001B1.roa
Signing time: Tue 16 Apr 2024 03:08:14 +0000
ROA not before: Tue 16 Apr 2024 03:08:11 +0000
ROA not after: Wed 24 Apr 2024 03:08:11 +0000
asID: 136950
IP address blocks: 45.195.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33481 (0x82c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:08:11 2024 GMT
Not After : Apr 24 03:08:11 2024 GMT
Subject: CN=661deb9e-f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:c3:40:4b:d9:a6:92:e2:2d:cb:71:79:bc:
0d:5b:54:54:5c:8e:62:c3:35:16:22:0c:bd:3a:f3:
dd:76:0c:26:6a:c0:f7:c9:4a:ea:40:7e:d2:ac:76:
27:25:e3:8e:e4:15:e7:10:fd:b4:0b:98:f5:d5:9b:
0d:40:f9:16:f3:8c:ee:5e:57:38:d6:1c:aa:a7:44:
da:ea:a4:6e:22:67:48:b1:a8:28:29:f7:79:06:d3:
74:2b:46:fd:ed:c1:ca:00:18:7b:31:f6:f6:fb:6e:
46:0a:f4:d4:1e:b1:65:96:21:7b:12:f2:54:99:28:
77:22:86:db:cd:77:c8:9c:8a:13:e8:74:87:c3:81:
c5:f6:39:41:ec:ef:d3:e5:66:49:68:90:57:fd:7f:
6a:be:34:5d:29:e9:19:20:b3:d3:b2:dd:21:85:6c:
e1:69:71:9f:3e:6d:9e:7a:22:aa:6a:95:ee:13:b5:
6d:cb:6e:95:f2:d2:2d:f7:6b:73:5d:31:3f:e0:2f:
50:92:70:50:96:6d:bb:9d:bd:53:f3:4e:8b:68:87:
f8:b2:6c:9f:09:ba:9c:7e:3e:f3:58:df:83:a3:26:
3d:a3:1c:77:1d:b5:e2:b8:12:7c:28:0b:a3:70:db:
9d:22:69:5c:e4:75:7e:75:2a:2b:34:be:54:36:b8:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:D3:7A:62:36:7A:57:58:E6:54:EB:0A:3F:03:72:4C:4A:C3:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906A3CCAFB9E11EE9C65C534017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ac:01:62:82:58:52:ce:0b:0c:88:fb:3b:75:b1:d4:b1:0e:
e9:3f:ed:f4:85:8f:32:dd:78:2b:e4:0f:8c:d3:b4:e2:ce:f9:
d0:93:23:96:13:09:87:ba:ea:fe:c9:27:30:b6:71:07:f5:ed:
77:ba:16:79:2e:6d:3e:aa:f0:0e:51:6e:fb:36:67:05:9f:fe:
f2:c3:9c:d0:9d:1a:59:55:90:83:3b:95:11:b3:d5:7f:2c:30:
a8:19:14:78:a3:36:41:e0:bd:f3:a8:71:3e:ff:48:a0:12:3a:
d1:00:cb:3d:d1:66:ec:0e:95:6f:1e:ac:47:e3:19:fe:47:c8:
52:c4:43:7a:04:22:f8:8a:d3:1a:43:a8:be:c0:a4:d9:cb:13:
01:ef:77:89:53:31:91:8a:95:89:d9:5f:b9:3b:8d:c6:25:20:
90:e0:52:95:ab:b7:c1:3e:e5:e8:6a:77:35:b0:c2:23:9c:b9:
fb:81:10:fe:c4:e8:cf:55:cc:ae:24:37:f2:84:ff:90:64:5f:
10:71:94:83:d9:4c:05:a9:b6:8a:dd:c3:5e:59:05:93:8c:ea:
76:f4:49:58:8a:9a:7a:65:11:9a:67:14:41:5d:2c:a7:2d:e4:
bb:6a:a1:36:af:37:54:f0:b8:39:57:28:de:86:60:fb:6b:34:
6a:86:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org