Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935C247A385C11EFA0FFF7B1762E951A.roa
File: 935C247A385C11EFA0FFF7B1762E951A.roa (raw, json)
Hash identifier: /ExUBfJlvDJuTI7OVznuce1uPyRHXK/5pMfzhCvCgio=
Subject key identifier: CB:B7:54:95:A4:E0:69:42:5D:4A:E1:06:5D:50:24:04:A3:B5:13:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935C247A385C11EFA0FFF7B1762E951A.roa
Signing time: Tue 02 Jul 2024 10:19:33 +0000
ROA not before: Tue 02 Jul 2024 10:19:30 +0000
ROA not after: Fri 09 Aug 2024 10:19:30 +0000
asID: 63139
IP address blocks: 45.197.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38771 (0x9773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:19:30 2024 GMT
Not After : Aug 9 10:19:30 2024 GMT
Subject: CN=6683d435-e2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:b2:ae:8f:21:1e:4a:12:ae:e8:3b:f1:53:
47:16:d3:5a:c1:fe:2c:fa:9a:e6:91:c2:22:97:47:
90:f0:11:aa:c0:f2:22:81:96:c9:df:d8:b7:dc:57:
9c:9f:24:63:d8:b3:3a:2c:85:5c:57:3f:94:1f:77:
77:7d:51:b7:d1:d4:93:3b:55:20:e4:6f:f2:89:e2:
ea:bc:bb:df:37:cf:97:ef:e3:ed:1e:0e:0a:8d:68:
0b:4a:4f:34:c3:14:16:11:dd:dc:a9:da:f1:23:d5:
8d:dd:45:33:34:07:fd:7d:3c:5d:20:03:46:57:50:
f6:d2:dc:bc:26:08:ae:ef:4b:6e:06:77:4a:df:0f:
cd:19:b0:2d:93:f4:d6:9f:02:fd:8a:57:70:18:52:
32:c9:df:a6:58:51:79:3f:b3:df:18:44:7b:96:68:
9c:5f:d9:4e:61:eb:e9:30:c3:00:24:03:51:c3:68:
63:6c:f9:0b:41:7e:2a:5b:3a:dd:e9:03:da:44:fe:
ac:d3:5a:ed:c1:fd:14:a7:e0:06:18:e4:21:5e:9c:
ea:6c:53:6c:98:1f:26:e2:ad:b3:70:26:98:e7:ea:
86:88:2e:ab:a9:fc:88:1a:1b:0b:36:9e:a3:f3:44:
72:c5:c9:4c:73:1b:e7:72:76:5a:1d:04:33:5d:d7:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:54:95:A4:E0:69:42:5D:4A:E1:06:5D:50:24:04:A3:B5:13:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/935C247A385C11EFA0FFF7B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/18
Signature Algorithm: sha256WithRSAEncryption
72:4b:7d:ca:2a:fe:85:b3:41:3b:03:fa:90:3e:bc:ed:40:08:
b5:9b:7b:a3:f6:00:66:ba:31:97:36:57:14:fe:8e:50:e2:76:
2f:6a:39:ce:67:bc:12:75:f0:6f:35:84:a3:0f:a4:36:40:ca:
13:9a:66:35:42:f4:67:aa:4f:8b:c8:f3:5d:83:ec:ab:54:00:
76:26:4e:f0:14:34:e0:dc:e7:d0:1d:e8:1e:29:c7:79:64:e9:
af:88:be:57:a3:d6:1b:9c:3e:61:e5:be:22:82:b3:8c:f0:dc:
c9:25:a1:fd:e8:1d:fc:3b:5b:70:ad:33:f0:87:41:a2:11:13:
6c:16:9a:9b:fa:7a:94:8c:79:59:46:f8:29:ff:69:34:83:79:
ba:7e:9f:1b:28:d4:ff:d5:56:40:57:27:52:2a:51:20:b6:35:
fe:45:47:57:5b:78:3e:44:8a:1a:88:87:54:2d:d7:8e:7c:22:
3b:69:18:f2:44:a0:8c:7f:9e:7e:81:a5:86:02:2d:24:15:53:
c2:a2:d5:b6:32:d4:5f:b0:86:a8:a4:aa:d8:ca:fd:88:3d:d8:
81:bf:52:aa:dd:0d:b1:2e:11:71:f5:3a:d1:72:47:8e:9b:f0:
28:32:3c:9f:55:8e:4a:4e:d5:19:33:83:c1:ad:b4:c6:36:a8:
4b:ec:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 03:51:10 2024 by rpki-client on console-fra.rpki-client.org