Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC57DB6049AD11EF9640124E762E951A.roa
File: AC57DB6049AD11EF9640124E762E951A.roa (raw, json)
Hash identifier: MKF9CJWroxbpCllfpt1amxZcl7sw0e7V2ilVtCgvEeM=
Subject key identifier: 6C:87:DE:41:74:08:CC:A7:62:15:2F:3D:5F:F2:58:28:DD:6C:0C:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC57DB6049AD11EF9640124E762E951A.roa
Signing time: Wed 24 Jul 2024 11:12:54 +0000
ROA not before: Wed 24 Jul 2024 11:12:51 +0000
ROA not after: Fri 02 Aug 2024 11:12:51 +0000
asID: 20473
IP address blocks: 45.194.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40803 (0x9f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:12:51 2024 GMT
Not After : Aug 2 11:12:51 2024 GMT
Subject: CN=66a0e1b6-8318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:87:f7:02:e1:fb:c4:60:14:46:4c:b3:39:
fb:47:fa:f4:7c:d7:07:3c:12:8c:79:59:45:29:e5:
6b:48:3b:3f:7c:07:53:8b:83:9c:62:2a:18:06:74:
18:6a:04:23:b1:7a:22:53:49:fb:bd:ec:41:7b:2f:
5e:13:cb:a3:ac:60:50:7e:f9:ac:f4:19:63:58:7a:
ed:4a:c2:dd:db:b3:cf:6f:12:d3:76:06:02:04:ab:
a9:33:05:5f:94:26:84:cf:80:49:29:19:50:a3:4e:
37:38:29:77:e5:cb:45:d1:57:31:51:a2:c0:85:86:
01:21:fb:a7:64:41:78:bf:e6:18:d4:93:97:09:8e:
f7:5d:7e:1a:c9:69:2c:7d:d0:ba:63:0f:26:8e:51:
8e:86:f3:52:f1:cf:c5:7f:50:db:b4:55:d7:2b:6a:
de:6e:e1:61:ac:c7:88:2e:33:5c:90:a7:90:98:45:
45:e4:18:c8:2a:02:31:37:46:ba:17:ef:66:e6:b6:
8c:1c:82:53:26:a2:ca:9e:8a:1a:51:1b:f2:07:b2:
91:d3:7c:4e:55:a1:82:8e:62:9a:be:37:0e:46:f8:
1f:50:e5:60:6f:ff:b1:5c:65:10:db:a8:a1:49:e8:
0e:a0:3a:5a:ab:12:43:aa:37:ab:2b:13:e9:a1:9a:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:DE:41:74:08:CC:A7:62:15:2F:3D:5F:F2:58:28:DD:6C:0C:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC57DB6049AD11EF9640124E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.116.0/23
Signature Algorithm: sha256WithRSAEncryption
60:d2:f8:e4:3b:1e:9a:15:ea:8b:bb:ed:37:dc:7f:f0:7d:72:
e4:d0:01:d1:d5:06:fb:20:36:7d:e2:2a:ad:7b:6d:5c:01:76:
8f:a7:bd:45:18:7a:49:24:72:bf:c1:58:65:fd:35:a3:62:dd:
34:58:bf:fc:89:a9:1f:7b:6e:17:36:0b:c7:e1:82:f5:84:fa:
d7:64:66:da:a7:b9:07:53:1e:bd:9f:6f:30:ab:d2:6b:52:e2:
a7:ee:87:65:2a:99:3c:7c:7d:e0:85:02:a6:c5:98:27:9f:81:
6d:1d:44:1b:3c:1b:de:ef:62:fe:95:be:98:16:60:6d:04:54:
ca:c7:48:a7:2e:c8:46:b7:de:a3:0a:e9:87:82:60:72:54:c1:
11:64:30:5e:a5:c9:35:2b:01:9e:1a:6f:96:36:19:81:db:83:
0f:41:40:1d:75:52:d4:1b:c8:00:6b:a0:ee:37:73:ef:52:0e:
bc:a2:3c:f8:e3:a6:06:78:48:3e:47:29:75:46:2b:1c:10:90:
ac:79:e2:06:2a:6d:ee:ea:ca:52:97:0d:57:f5:91:2a:6e:ae:
4c:40:1f:c7:66:42:f9:e1:76:e6:62:e1:f6:3a:df:83:19:f1:
f1:3d:1e:5f:51:32:48:65:ef:ae:0c:98:3d:e2:fa:14:c7:1e:
39:88:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:25 2024 by rpki-client on console-ams.rpki-client.org