Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1DF531647EF11EFA9E91E7A762E951A.roa
File: B1DF531647EF11EFA9E91E7A762E951A.roa (raw, json)
Hash identifier: SH6kXsSK/k7lxhG83qQ1sOQ0k9rNlvXsF7y3Rfu55FY=
Subject key identifier: 8E:3A:5A:1E:74:C9:36:82:52:A6:B1:D0:8D:8C:B3:65:6E:2F:C3:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1DF531647EF11EFA9E91E7A762E951A.roa
Signing time: Mon 22 Jul 2024 06:00:28 +0000
ROA not before: Mon 22 Jul 2024 06:00:24 +0000
ROA not after: Mon 29 Jul 2024 06:00:24 +0000
asID: 44559
IP address blocks: 45.197.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40529 (0x9e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:00:24 2024 GMT
Not After : Jul 29 06:00:24 2024 GMT
Subject: CN=669df57c-3e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:19:dc:9d:18:b8:38:63:0c:4c:eb:2f:27:
62:3d:5b:8d:ac:8f:f4:65:c6:06:6c:23:7b:1c:9e:
34:36:32:68:28:be:73:53:ca:fb:92:1c:ab:0a:13:
73:c2:b5:9a:53:b2:87:42:30:2b:e5:76:b2:90:ea:
01:40:6f:30:48:49:95:63:65:96:7a:f7:04:9e:22:
9a:af:5d:00:be:50:91:3b:bf:45:1a:67:af:93:f0:
4a:03:11:60:02:0e:1b:0f:95:50:59:e2:ce:21:13:
4d:b1:85:31:b8:fb:cb:e1:59:ee:fa:9b:e9:2d:b7:
f4:93:30:0e:14:61:3f:00:8f:95:b9:bc:0a:69:a8:
4d:a9:c8:6d:16:60:dc:f2:37:9b:ae:13:77:d9:5b:
fd:55:1d:ec:e0:6f:ec:84:2d:c9:e7:0d:36:ae:0c:
f1:3c:03:71:c4:3a:6c:2b:33:84:23:88:86:00:c9:
ed:7b:d2:26:d3:88:12:de:3b:9c:b1:a7:6e:fb:7b:
10:27:2b:db:83:fe:17:4f:fb:65:50:a4:8b:67:e6:
7c:04:6e:30:5c:64:34:92:36:99:39:43:31:d8:52:
e5:d6:26:c1:4d:d9:08:fc:87:c0:cf:2d:69:b2:dc:
29:1c:4a:99:49:19:2a:5c:32:00:bc:dc:ab:ad:2c:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:5A:1E:74:C9:36:82:52:A6:B1:D0:8D:8C:B3:65:6E:2F:C3:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1DF531647EF11EFA9E91E7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:81:cc:a8:75:cb:56:a8:06:77:22:b7:42:b1:9c:8f:f5:15:
e4:27:aa:fc:64:24:0e:83:64:65:30:21:af:22:8b:02:f8:24:
d9:07:d6:fb:f0:a7:a6:97:bf:10:b0:04:17:ab:65:d8:69:b6:
6a:28:f8:b9:d9:bd:d3:31:cf:9e:4f:37:e5:0a:08:3f:62:3a:
a7:74:b9:71:dd:34:45:a3:fb:d9:ea:fc:f1:be:b2:4d:55:e4:
14:75:7b:50:4b:9c:a6:8b:17:65:18:8e:51:16:22:66:28:93:
ce:77:75:35:c6:fb:ca:95:93:32:6f:bb:25:bb:c7:a6:0c:9a:
8b:f1:c5:a9:aa:68:1f:24:1e:3a:9c:87:7d:c0:e5:6f:76:80:
a2:e6:a4:fe:b1:c9:24:14:03:63:8b:5f:2a:9d:5d:7d:c5:af:
aa:5a:bb:d5:f2:05:2a:73:ce:5f:88:c0:0e:a8:51:e3:52:ca:
9b:15:47:1c:9b:79:1a:31:41:80:e0:c3:7e:5c:df:25:9e:bc:
d8:c8:51:0c:89:d2:db:94:27:b4:ae:99:10:b5:fb:7f:af:8b:
2d:a2:e8:ac:bb:cf:f4:8b:35:30:5d:52:88:46:c8:fe:b1:4a:
87:b1:9d:16:1c:46:3f:a3:3a:5a:7a:1e:9a:13:2a:79:50:e7:
a9:fd:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org