Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1BC0EE4A6911EF98AF6450762E951A.roa
File: 9A1BC0EE4A6911EF98AF6450762E951A.roa (raw, json)
Hash identifier: hvf8mP0B7jR9m9zFo+pBnc+inlWj8LJT8fQQRM7aWyc=
Subject key identifier: 77:76:3D:CE:AF:B7:13:9B:B0:67:D3:18:10:4A:A0:B2:88:DA:8D:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A015
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1BC0EE4A6911EF98AF6450762E951A.roa
Signing time: Thu 25 Jul 2024 09:38:09 +0000
ROA not before: Thu 25 Jul 2024 09:38:06 +0000
ROA not after: Sat 03 Aug 2024 09:38:06 +0000
asID: 5065
IP address blocks: 45.199.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40981 (0xa015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:38:06 2024 GMT
Not After : Aug 3 09:38:06 2024 GMT
Subject: CN=66a21d01-01fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:f6:3d:8e:e1:66:52:ed:d3:49:0a:5b:fb:
f6:28:d4:3c:b2:84:18:f4:12:82:97:21:68:20:62:
f1:65:4c:e9:13:67:45:33:21:9d:99:87:1e:0b:98:
76:ab:08:b1:91:42:3f:b0:df:76:d4:2b:3b:6d:f5:
e1:37:6e:0f:a5:b7:58:e2:d1:7f:c8:77:8f:42:83:
cf:c0:c9:6a:81:8d:68:38:85:96:a5:0c:62:3d:2c:
f8:88:dc:18:8a:d9:a0:6c:4c:9d:a9:c3:ae:cc:01:
36:08:1e:00:67:ba:f2:b8:4e:26:d7:a7:cd:72:15:
26:f7:02:f3:c3:a7:27:21:7d:79:9c:a5:4d:0d:1a:
3d:d1:25:71:a7:24:de:72:94:bd:5e:2a:20:52:d5:
db:f3:a0:c6:26:79:8b:98:d7:d9:09:e4:c5:fb:93:
be:b6:77:a9:67:1e:a3:da:35:ca:c4:f5:80:0a:8a:
ef:73:f4:8c:8e:7c:67:60:68:d5:6b:cc:a2:a7:35:
12:51:fc:73:21:16:8a:c4:7b:20:79:68:8e:93:1c:
fc:1e:b1:23:d7:de:15:97:73:2a:11:ab:25:72:7e:
3d:96:68:38:b7:32:84:b9:d5:01:5a:51:2d:6b:7d:
b2:2e:c3:49:56:29:ea:6b:33:ca:77:6f:1d:10:d1:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:3D:CE:AF:B7:13:9B:B0:67:D3:18:10:4A:A0:B2:88:DA:8D:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1BC0EE4A6911EF98AF6450762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.156.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ff:32:6f:b3:94:b2:71:8b:8c:0d:46:71:18:93:d0:3d:03:
22:dc:3d:5a:ac:0e:e0:a2:2c:a0:15:c3:24:74:a4:20:d6:c6:
40:1c:8f:a6:99:2c:ef:42:62:da:4b:92:6d:0e:af:7f:72:94:
6a:11:77:af:a9:40:3e:c1:d4:e4:7c:30:04:05:13:c1:7f:90:
4d:a7:58:37:4a:9f:17:3f:8a:21:03:83:3b:8b:24:a6:f9:c2:
7b:35:81:8b:3f:bf:91:fc:36:27:5b:95:80:ab:67:54:83:15:
d8:98:31:78:cb:1c:2e:ec:c8:10:1d:50:08:a6:ee:2b:d2:6a:
ba:b5:a7:74:77:1b:13:32:5a:94:05:2a:73:c7:bf:e9:a6:e5:
5a:3e:1d:e4:5e:1b:29:fd:ee:d0:66:66:ed:63:38:fb:59:9c:
a8:3c:eb:2b:79:83:13:dd:3b:81:de:0b:ba:28:c7:b0:24:1c:
0d:aa:30:65:ec:14:5f:e1:66:12:6d:f6:38:11:cb:38:88:26:
ba:08:a1:80:06:7d:79:11:66:c5:9c:9e:51:be:33:21:1f:7b:
26:87:40:39:f2:b1:7a:6e:19:40:98:01:9a:f5:18:7d:02:7f:
38:8d:64:9c:85:6f:07:8b:03:2a:35:50:7d:c4:72:4e:eb:79:
80:12:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org