Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EE9B4E018B11EF915B8BFA007001B1.roa
File: A4EE9B4E018B11EF915B8BFA007001B1.roa (raw, json)
Hash identifier: 9VDvmeUiqNmmtJM472KBClj55ZxgBdYBlpZK49QQ8ts=
Subject key identifier: D0:D8:07:92:32:75:3E:15:28:81:CD:9A:A1:1F:37:94:DC:19:83:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EE9B4E018B11EF915B8BFA007001B1.roa
Signing time: Tue 23 Apr 2024 16:07:55 +0000
ROA not before: Tue 23 Apr 2024 16:07:51 +0000
ROA not after: Thu 02 May 2024 16:07:51 +0000
asID: 142062
IP address blocks: 45.204.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33967 (0x84af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 16:07:51 2024 GMT
Not After : May 2 16:07:51 2024 GMT
Subject: CN=6627dcdb-f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:13:99:31:0d:86:70:9d:7a:e3:4d:aa:af:
b7:7a:3d:a2:05:59:43:c4:68:d6:be:2c:5f:6a:63:
74:11:67:8e:7f:69:49:b4:33:f7:b1:ea:c2:cc:6b:
ec:ef:5c:bc:03:74:b9:97:c2:ce:02:2a:75:51:34:
25:f5:8f:d1:0e:3b:26:20:80:64:60:79:60:3e:d8:
8d:c0:f1:2c:78:a6:21:c5:8e:2e:12:b7:35:be:05:
fa:17:6a:4a:ee:f0:4b:62:dd:5e:10:1c:b6:5a:76:
59:e4:6a:4a:cb:2d:72:7f:2a:9c:d0:71:f7:c7:11:
5b:d1:0c:6c:51:39:4f:51:6c:83:16:49:70:9e:79:
ae:06:13:b2:ec:87:b2:46:0d:be:e5:af:fd:09:fd:
89:25:92:13:cb:fe:4e:a7:77:c5:ea:8b:64:48:80:
9f:68:48:2e:56:cf:56:d4:21:16:8a:f6:ec:da:4b:
5d:80:21:9b:a6:98:0a:ef:a3:bb:23:65:61:dd:0b:
18:de:9f:1c:64:c1:19:51:ec:cc:75:1c:4c:1b:00:
a8:bc:fb:1e:12:3e:96:84:76:d5:6c:0e:17:13:94:
bb:62:7b:4c:61:34:4a:58:0c:70:b2:cd:7c:ec:d5:
ee:08:70:6d:f2:44:9d:21:bd:b5:46:68:ee:32:87:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:07:92:32:75:3E:15:28:81:CD:9A:A1:1F:37:94:DC:19:83:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EE9B4E018B11EF915B8BFA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.91.0/24
Signature Algorithm: sha256WithRSAEncryption
13:13:89:d7:4f:dc:db:4e:42:e5:4d:6e:0e:75:62:83:24:37:
93:64:26:aa:e0:99:09:0e:2f:b9:2a:f2:c4:df:49:90:55:ba:
80:d1:dd:49:0a:c1:cb:bd:e1:17:5d:5e:9b:f0:08:ef:20:a0:
46:3a:f2:95:c4:e3:82:b0:a1:ce:be:ae:2b:d5:b4:69:a2:95:
dc:01:7a:c1:df:f0:da:e0:e3:b2:cf:78:25:3c:2a:e0:4b:83:
e3:49:20:e2:23:b6:20:9f:71:e6:03:f8:3d:80:d7:39:a0:e9:
34:39:27:cf:1b:5f:4b:c6:24:d6:0f:e4:80:87:3b:68:3e:e2:
a4:f9:97:9b:f7:e6:a6:99:1b:55:c3:95:12:be:2e:01:31:4f:
59:2a:62:92:e8:72:3d:af:b3:cc:73:eb:b1:ea:d1:cc:d3:c8:
22:35:15:c2:f2:05:f1:06:91:07:20:bd:0b:a1:c1:1d:2c:f3:
64:eb:b8:c8:d1:b7:70:e1:dd:ac:22:87:c5:1b:0b:5f:6a:84:
99:39:0d:22:9b:14:7f:7c:4c:1f:02:dd:d2:a5:16:f3:f2:df:
a0:b8:62:2c:05:5e:5b:ce:41:ba:2d:b7:3a:98:ae:1a:71:ca:
a7:12:23:1e:e6:03:0a:a1:6c:ec:39:7a:33:b0:41:12:ae:49:
be:3a:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org