Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C307416499611EF96E48FAF762E951A.roa
File: 9C307416499611EF96E48FAF762E951A.roa (raw, json)
Hash identifier: 3eaxiIWQ5rkBFodp36NGTy1vIolbc8bZxesGCZa34Uc=
Subject key identifier: A7:3E:EA:2A:76:E4:23:E3:39:9B:12:5E:F0:F8:CB:4D:A9:AF:ED:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C307416499611EF96E48FAF762E951A.roa
Signing time: Wed 24 Jul 2024 08:27:49 +0000
ROA not before: Wed 24 Jul 2024 08:27:45 +0000
ROA not after: Fri 23 Aug 2024 08:27:45 +0000
asID: 202656
IP address blocks: 45.199.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40729 (0x9f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:27:45 2024 GMT
Not After : Aug 23 08:27:45 2024 GMT
Subject: CN=66a0bb04-cf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:99:31:96:66:ea:28:56:a1:d3:00:4c:aa:
f8:e2:14:d5:51:b4:79:a7:de:4f:cb:ce:cd:48:3b:
ee:d8:16:f4:64:30:34:35:ef:59:c6:8d:a1:24:03:
49:b3:6e:8e:6c:71:3f:3a:e0:03:38:29:80:1e:06:
2c:00:f2:ca:3a:e3:30:40:af:a8:fb:24:3c:55:a2:
b6:1c:87:c5:6d:f5:ee:47:88:59:1c:5f:06:92:c3:
32:cc:ec:61:f5:80:38:98:76:9b:01:df:a6:18:da:
a3:0e:cd:ca:5e:fa:b6:c1:0c:f9:ee:2a:26:a6:f8:
87:31:73:4c:5b:f7:71:4a:ce:5b:aa:26:af:8e:6c:
2d:17:e8:84:b5:a0:ce:9f:b9:52:36:de:4a:48:0a:
7f:dc:6c:64:7b:4e:59:88:d6:0c:5d:fa:2e:13:e9:
77:d5:22:17:8b:e0:65:80:99:59:e6:be:3e:bd:e1:
03:4f:00:4c:6b:ef:69:c1:92:7f:bb:a7:0f:21:f8:
ea:71:22:02:d0:5b:10:e5:b0:75:75:d4:13:f6:5b:
d4:ae:82:ee:6f:bd:04:24:f8:10:cc:f3:48:2f:60:
ea:49:53:72:1d:c4:cc:a4:e4:f0:aa:d4:b7:f0:f0:
76:b0:0e:db:41:2d:d2:81:60:84:c6:68:b8:b9:91:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:EA:2A:76:E4:23:E3:39:9B:12:5E:F0:F8:CB:4D:A9:AF:ED:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C307416499611EF96E48FAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:a9:8f:c4:5d:62:db:37:77:cd:2e:b4:05:6d:4a:20:5c:b2:
00:06:21:1b:45:e0:c0:01:18:59:84:68:54:8e:a8:7d:2c:bc:
b5:cc:c0:d7:da:5f:52:e8:6a:44:10:b6:e6:50:11:5f:9a:21:
ec:90:b1:44:7e:ed:eb:dc:32:18:34:9d:89:ce:4d:ca:e3:e5:
ef:2a:65:38:fd:77:98:d5:9d:9c:e4:7d:39:95:c8:a1:b7:5a:
02:6f:95:fc:8a:b9:79:f5:29:a6:64:68:94:35:d5:a6:da:87:
72:e0:b1:84:96:f5:c8:6e:27:fd:75:0f:7f:ad:f9:e6:e1:96:
a7:fa:09:49:b5:1e:d1:ca:18:b7:1d:40:d3:a6:4e:ed:87:16:
9e:e8:6f:bd:e3:45:ed:e2:c3:7a:6e:2f:9f:0d:e0:49:7e:3d:
f7:21:12:d5:db:3f:cb:38:38:84:3f:72:90:41:21:3e:2c:b8:
c7:96:ed:ac:6e:23:d9:64:86:71:d6:fa:64:bd:39:bf:05:ed:
99:6b:dd:fe:fe:63:94:a6:88:b2:e0:01:e1:12:f8:e2:4b:7e:
06:da:c4:fd:86:fb:45:c8:b0:62:35:1c:3c:28:25:47:bf:ed:
26:30:59:ce:fe:f5:47:52:3b:cc:97:4a:5b:8b:ec:4c:8b:ca:
68:0e:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org