Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B02C303B9611EFB5507E7D762E951A.roa
File: A8B02C303B9611EFB5507E7D762E951A.roa (raw, json)
Hash identifier: TqpM3KWIfK1Rw9vzYrhByXGBqB6n2HNogI5lj1acSMQ=
Subject key identifier: B5:FF:5A:D3:F3:88:EB:46:92:62:3C:86:AE:FA:CD:76:37:15:2A:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9934
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B02C303B9611EFB5507E7D762E951A.roa
Signing time: Sat 06 Jul 2024 12:52:53 +0000
ROA not before: Sat 06 Jul 2024 12:52:50 +0000
ROA not after: Thu 08 Aug 2024 12:52:50 +0000
asID: 204174
IP address blocks: 45.207.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39220 (0x9934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:52:50 2024 GMT
Not After : Aug 8 12:52:50 2024 GMT
Subject: CN=66893e25-2a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:17:4d:45:9d:d9:34:75:00:6a:fc:7c:b1:
91:f3:69:e4:75:71:ea:85:c9:ec:a4:5c:68:50:9d:
52:ec:7b:7c:28:ab:39:94:1f:a0:31:aa:cd:bd:3d:
7a:42:fa:8a:cb:6a:3b:22:fd:a2:30:00:04:d3:35:
8c:d0:c5:4f:39:20:27:a0:09:f9:2e:cd:d6:e8:08:
db:44:a2:7a:ae:39:27:43:19:de:21:65:42:14:9c:
c0:04:d7:0e:39:53:b2:78:87:ea:c7:97:8c:27:27:
21:3f:cf:94:de:dd:32:67:d9:b8:2d:38:b4:0c:a5:
cc:d1:5e:9f:80:f1:96:1f:d9:46:8f:70:82:9a:0e:
20:71:ef:a6:36:88:ee:91:05:d7:57:f8:53:64:56:
5b:07:1e:87:bf:7e:a6:15:9d:30:40:9e:31:3f:88:
bb:a0:c2:3c:ea:5c:20:fd:69:10:91:e7:33:2f:66:
2e:a6:a1:69:56:e8:a5:44:25:c0:2f:77:ac:5b:ff:
eb:9b:cc:21:d7:b8:c2:31:bb:e9:d7:5d:6a:6e:b1:
84:f0:6a:b9:2d:53:48:e0:5b:83:7b:94:06:69:10:
2c:c8:7a:6a:ce:d1:c0:80:f4:35:c1:d5:a6:1c:19:
d6:a9:93:de:08:21:6b:e4:a0:ab:04:74:ea:ee:78:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:5A:D3:F3:88:EB:46:92:62:3C:86:AE:FA:CD:76:37:15:2A:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B02C303B9611EFB5507E7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.218.0/23
Signature Algorithm: sha256WithRSAEncryption
21:1c:b3:03:50:d1:79:25:dc:f7:f5:0e:9c:7f:6a:d1:65:66:
1b:1f:05:7e:bb:be:5b:0a:b5:02:bd:c0:3d:f8:c7:52:07:98:
bd:21:81:f5:8c:b9:ef:e8:94:5e:c2:dc:6c:09:c6:94:6e:b8:
df:fb:42:14:4d:87:90:db:dd:c9:30:da:79:e7:b8:28:24:54:
2f:8e:45:06:94:27:16:19:24:47:50:85:b6:86:ca:f0:29:17:
87:49:08:55:e2:af:3e:0e:9f:33:07:fe:fd:01:1e:9f:f6:6c:
51:07:bd:00:be:5a:30:a4:a1:d4:7d:5b:ab:2c:51:8e:c9:75:
2b:67:bf:68:5f:14:62:17:86:85:af:b5:f4:3a:97:a8:14:db:
06:e2:fa:c5:3c:d5:63:9a:e8:c8:74:f3:cd:b5:90:09:8d:fb:
63:be:80:2c:b0:6f:27:6a:e5:47:45:39:e2:58:7f:99:5e:74:
09:7c:85:6b:1a:2f:23:96:4e:e3:8e:69:29:91:27:d0:00:db:
3c:e4:6d:9b:cd:56:cd:96:91:f8:8c:ae:9a:35:67:cd:6d:90:
fe:a0:0e:e3:85:f0:76:ec:e7:f4:f6:5e:78:b0:d4:d6:1b:11:
80:07:e6:b2:a8:6f:6d:38:53:50:7f:2a:72:c4:4a:52:8f:d8:
ef:03:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 02:43:40 2024 by rpki-client on console-fra.rpki-client.org