Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C6B9A447DC11EFA809DE79762E951A.roa
File: A7C6B9A447DC11EFA809DE79762E951A.roa (raw, json)
Hash identifier: eGqlGrfD2w5gwHc+5Dq3Ym2mCQbNupSylGTO1H0UOyo=
Subject key identifier: 92:72:09:D3:86:63:E7:7C:57:29:02:80:29:2F:33:5F:C9:01:68:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C6B9A447DC11EFA809DE79762E951A.roa
Signing time: Mon 22 Jul 2024 03:44:10 +0000
ROA not before: Mon 22 Jul 2024 03:44:07 +0000
ROA not after: Fri 23 Aug 2024 03:44:07 +0000
asID: 48031
IP address blocks: 45.200.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40451 (0x9e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:44:07 2024 GMT
Not After : Aug 23 03:44:07 2024 GMT
Subject: CN=669dd58a-7bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:a9:df:b1:c4:c0:5b:ba:e0:a8:a7:c4:57:
c8:e3:9e:2b:66:fc:21:40:de:8b:01:57:3f:cf:44:
e8:f3:25:b8:05:6e:68:66:2e:1e:7e:4e:36:67:47:
67:0d:a2:67:40:07:d6:dc:fc:9f:67:8e:70:15:c9:
c0:a2:32:8a:5e:35:7c:e3:eb:5d:45:e8:8c:f7:bc:
27:91:bc:2d:2c:5b:2c:13:81:44:c4:a9:fd:13:3d:
15:70:78:b4:e3:00:ec:4f:ba:53:25:1e:e3:ae:31:
4f:b4:89:04:a9:d2:dd:95:e3:cf:98:8e:51:86:5f:
9f:4d:d5:7d:77:d9:bb:81:df:f9:38:67:af:16:6f:
bc:78:58:a8:8e:85:d3:c9:d9:0c:d4:41:63:08:3c:
f3:0f:50:5d:b9:87:6e:8e:45:24:4c:f1:12:37:8f:
93:f6:fc:6c:95:f3:d3:de:85:86:f3:5b:31:2d:06:
e0:9e:3c:d3:4b:00:43:2e:95:f0:a1:2f:b0:f3:5a:
98:a4:8b:58:52:2f:c1:cf:28:ab:09:74:c0:aa:72:
a6:77:0b:41:8b:9c:e6:4e:c5:12:34:f2:48:d1:80:
78:c2:df:18:b8:80:46:1d:7c:9e:8f:c8:58:85:03:
b4:9b:98:a5:15:45:ef:d7:31:5b:25:53:ad:1b:7e:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:09:D3:86:63:E7:7C:57:29:02:80:29:2F:33:5F:C9:01:68:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7C6B9A447DC11EFA809DE79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.182.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5b:72:5b:2b:3e:af:55:98:31:e7:1e:4d:9d:5d:fd:d4:9e:
51:55:39:c2:1b:5f:f7:ea:de:8e:51:79:99:3d:6a:e7:66:64:
1d:20:e4:60:57:86:4f:86:1a:30:54:36:8e:34:21:b6:7c:16:
3e:09:b1:c5:96:a9:d7:46:c6:aa:78:eb:ca:1f:70:80:b1:9d:
97:92:fe:16:05:ab:89:0f:ec:51:55:f7:ba:23:3e:7f:84:37:
52:a5:17:67:76:5c:dc:60:e3:bf:09:bf:2e:ec:d6:e7:1c:c7:
b1:92:be:28:d1:49:52:78:ff:cf:99:42:36:e1:50:26:87:b4:
29:9e:b4:7a:4e:e9:ca:2b:bf:5d:98:50:d4:89:c1:7e:93:08:
d5:77:4a:52:8c:2e:ad:2c:dd:70:dc:7c:b1:e4:52:c4:87:ac:
18:22:20:55:43:54:cb:42:3d:5c:b0:6d:be:f9:2f:4a:71:4a:
95:95:3b:14:f9:18:79:62:a5:4a:ab:7e:61:dc:1b:4a:07:5f:
82:46:60:40:86:a5:53:7c:86:09:26:b9:02:37:78:b5:ea:d5:
72:78:22:9b:b2:da:48:4f:5c:ce:6e:c3:86:18:e9:b4:a2:79:
54:24:e6:7c:a8:9c:6d:a6:b3:20:1c:6a:a1:75:3d:6d:a6:94:
6f:11:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org