Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2841CF647EC11EFB1AED866762E951A.roa
File: A2841CF647EC11EFB1AED866762E951A.roa (raw, json)
Hash identifier: FWWc89NQfflrBPYAgxnwywN+wWBdvT9M2F2/LaEXMdk=
Subject key identifier: 0E:6F:29:A9:DD:BD:4E:F2:97:E3:A2:2D:32:4D:29:34:E4:43:A8:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2841CF647EC11EFB1AED866762E951A.roa
Signing time: Mon 22 Jul 2024 05:38:34 +0000
ROA not before: Mon 22 Jul 2024 05:38:30 +0000
ROA not after: Wed 31 Jul 2024 05:38:30 +0000
asID: 54467
IP address blocks: 45.192.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40493 (0x9e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:38:30 2024 GMT
Not After : Jul 31 05:38:30 2024 GMT
Subject: CN=669df059-c2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:42:9e:e3:85:af:1a:9f:40:97:fc:45:73:
f2:b1:32:ac:8e:b4:75:77:f5:3c:1d:9c:18:35:94:
2a:cf:fb:57:8c:5e:23:35:60:61:3c:62:87:45:05:
b1:29:07:f4:02:af:62:4b:41:ff:a3:99:93:4d:ba:
da:43:2a:27:b9:5d:4a:32:02:9d:19:91:3c:4c:ec:
8b:73:3a:e0:07:e4:c1:af:2a:ae:46:b8:39:ae:f4:
45:d7:eb:f3:48:57:60:4a:bd:ff:21:da:32:5c:a7:
ad:7e:35:9a:d0:bf:91:64:6b:87:90:a5:6d:dd:ba:
dc:76:65:d0:2b:6b:d4:a1:c0:33:9b:60:09:a5:ae:
ad:4c:9b:ad:8b:72:93:63:68:80:da:3c:f0:e4:c1:
b1:d2:aa:ef:1f:ed:f4:60:cc:0c:53:19:33:3d:5f:
ec:a7:fa:e5:18:eb:07:ef:65:a6:f7:29:46:fa:78:
b8:41:41:74:e5:4e:b3:53:42:21:71:42:5d:9a:3a:
04:31:ab:dd:2d:96:b9:17:c3:f7:d4:95:cd:35:3b:
ae:5f:49:d9:87:3c:ec:78:83:f5:70:f9:77:28:f6:
f4:91:c0:4c:71:e1:60:55:18:f3:9a:53:c5:b5:de:
43:1b:de:e4:fb:9a:0a:d5:54:0a:76:b0:60:ab:5b:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:29:A9:DD:BD:4E:F2:97:E3:A2:2D:32:4D:29:34:E4:43:A8:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2841CF647EC11EFB1AED866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
Signature Algorithm: sha256WithRSAEncryption
57:00:65:8b:06:c9:78:bb:81:7d:94:39:a8:02:af:a7:d7:cd:
7a:48:62:a7:b6:49:5d:4d:75:ae:4f:0c:c3:ad:25:d0:f7:88:
e5:ad:c3:9e:78:36:97:a1:b9:a4:62:66:17:bd:a1:ee:86:11:
5b:67:55:e0:2a:66:8a:6c:67:03:1b:e8:36:9d:ab:58:db:6d:
8e:f3:53:d6:50:6a:5f:e5:39:9f:67:cd:fc:18:31:58:20:22:
a2:01:3e:f5:d2:8d:a9:41:bd:e9:98:37:7e:87:29:12:b0:d7:
3e:0c:14:3f:e1:c4:b9:c4:1d:42:44:a9:c1:9c:50:a0:bb:c2:
8f:5f:de:75:9e:a8:5c:51:dc:76:3c:e3:85:a4:be:f6:2a:8b:
67:8b:f9:e0:a4:98:c7:d5:8f:58:7f:65:a2:d6:e3:75:a3:3d:
33:eb:59:37:c3:30:db:82:92:cc:5f:fe:cb:67:29:9c:98:51:
41:1f:36:e1:76:70:e0:d3:cb:ea:c4:11:c4:5a:07:3b:94:d3:
27:4d:e0:67:f0:cb:d0:5d:d8:3b:fa:c5:68:19:2c:28:71:87:
3f:3f:37:55:22:83:55:99:18:52:09:35:71:5a:a9:22:3b:76:
d7:9e:35:c9:bb:22:ec:8c:7c:e3:b3:2f:09:72:61:28:bc:35:
c0:8f:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org