Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46E94E23E9B11EF97A9E25D762E951A.roa
File: A46E94E23E9B11EF97A9E25D762E951A.roa (raw, json)
Hash identifier: +huwIK1fhuePwqP6MuF1j083Ej021Di6HFmqOm+tp4Q=
Subject key identifier: 3F:17:A2:B2:95:F6:63:55:74:DE:5D:59:40:F4:9F:51:81:29:25:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46E94E23E9B11EF97A9E25D762E951A.roa
Signing time: Wed 10 Jul 2024 09:06:07 +0000
ROA not before: Wed 10 Jul 2024 09:06:04 +0000
ROA not after: Fri 02 Aug 2024 09:06:04 +0000
asID: 141883
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39575 (0x9a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:06:04 2024 GMT
Not After : Aug 2 09:06:04 2024 GMT
Subject: CN=668e4eff-1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:70:15:a1:28:7c:b8:ae:f2:f1:6c:bc:a0:
a9:d2:10:cb:1d:eb:74:82:96:0c:0c:59:d9:9c:a5:
f3:9b:1d:ca:a7:78:99:02:e9:b7:44:0f:10:5f:bb:
18:08:2f:e8:73:c1:3e:32:d5:81:c6:7c:fe:11:b3:
44:ea:de:37:e7:de:9d:62:00:d4:ba:aa:79:46:66:
8e:04:e3:93:f2:c2:7c:23:77:e6:c3:19:88:3b:cf:
38:c8:6b:ab:f5:24:32:24:31:31:e1:34:42:27:63:
34:71:d1:d9:23:15:74:60:1c:0e:f3:d7:a1:f4:43:
18:87:ae:f2:ba:e2:bc:5d:ef:e5:c3:f1:f7:4b:25:
2e:72:a8:11:c0:0c:e0:c6:79:02:3c:74:a5:08:b8:
e3:af:04:0c:98:af:2c:6d:50:49:61:04:94:56:d3:
49:cf:5f:43:36:0b:5b:25:76:7c:3e:01:38:15:e0:
e6:09:35:bb:28:c2:bf:5e:8e:11:bf:20:a8:9a:40:
38:63:8f:1f:9d:84:b3:20:0c:7b:d2:0f:a5:1d:a5:
d1:e3:d2:f3:21:9a:79:a0:50:e5:d7:ac:3c:3d:ae:
4a:ce:48:39:ff:1c:56:2a:8c:c8:3c:92:ca:2e:43:
cd:06:bc:2f:d0:06:ed:e2:2b:dd:77:00:73:27:30:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:A2:B2:95:F6:63:55:74:DE:5D:59:40:F4:9F:51:81:29:25:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A46E94E23E9B11EF97A9E25D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:0b:be:31:f1:18:51:c2:9f:8e:16:e8:32:f5:0a:00:23:5c:
df:1d:65:03:57:ef:09:d1:9f:e0:31:1b:e9:9b:d9:bf:d7:ad:
63:ba:26:49:35:65:44:ce:5f:1c:23:69:52:4f:1a:1b:1b:98:
03:86:54:18:52:77:e9:b8:cf:d0:0f:91:98:54:b8:f0:9f:d0:
09:c9:e9:09:62:0c:1e:28:1d:8b:a4:4b:29:eb:ca:88:4a:ed:
79:35:4a:8b:2b:79:9b:44:b2:92:2e:87:e2:6e:17:5e:bd:0e:
c4:3f:e5:1d:2d:9b:cb:69:0d:48:bc:09:ff:74:ae:83:6f:08:
89:d2:75:a3:08:76:db:30:9b:10:ea:41:5c:be:9e:ad:82:76:
5a:4c:4e:44:94:a0:83:65:22:c2:d1:99:9b:6f:45:4e:b4:de:
72:4f:6e:df:dc:d2:15:cd:2b:c9:7f:83:72:97:f5:c8:c4:df:
19:1d:78:79:59:ab:36:60:25:a3:66:ac:69:34:9e:12:78:05:
7d:cb:77:7a:38:80:f5:b8:80:f1:9a:d6:d9:19:09:bd:de:2b:
69:8f:f5:f8:36:38:44:fc:50:59:87:72:3b:33:b1:af:15:1e:
42:e3:ec:65:12:ae:05:0f:c5:1f:df:2b:4d:e4:eb:1b:9e:87:
5c:50:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org