Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61C5CDE156011EEB6956F554AD9E6FC.roa
File: B61C5CDE156011EEB6956F554AD9E6FC.roa (raw, json)
Hash identifier: a9h6u8HAuqHCn5WL1PwIZfxpWFBOdjaqR4gTT7c6OoQ=
Subject key identifier: E9:C0:CC:05:76:D5:DE:43:3F:C5:2A:73:F8:B2:2C:99:35:B1:35:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61C5CDE156011EEB6956F554AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:06:01 +0000
ROA not before: Wed 28 Jun 2023 03:05:57 +0000
ROA not after: Wed 01 May 2024 03:05:57 +0000
asID: 140227
IP address blocks: 45.207.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11648 (0x2d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:05:57 2023 GMT
Not After : May 1 03:05:57 2024 GMT
Subject: CN=649ba399-ea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:44:ff:34:86:6f:f0:13:43:93:bd:d0:0a:
cc:c2:cb:f9:9b:f7:18:3b:5d:a3:ae:1c:7c:a0:5c:
36:47:49:8c:bd:c3:40:f5:60:ef:8c:1f:13:44:bc:
47:11:8a:07:64:1a:3b:eb:4e:13:52:4c:ae:a3:1d:
f0:35:76:26:14:e3:cd:61:40:bf:b4:e1:51:11:8c:
d8:84:7c:3d:c5:8a:c0:4d:5c:33:6a:a0:87:e9:2e:
81:48:a5:e3:7d:f7:8b:a4:c1:30:8a:29:2c:21:66:
f1:70:3b:81:ed:04:e3:4e:95:64:c8:e5:98:28:6d:
e9:48:93:38:27:7d:e3:0a:d0:86:1c:e4:1a:95:0d:
aa:06:d6:b6:ba:98:c8:62:0d:92:63:e2:69:66:62:
32:99:62:53:f8:28:72:f3:9e:25:18:09:e6:c7:c6:
a8:92:33:aa:0e:93:58:42:3d:19:23:fe:17:25:fa:
38:64:4c:f6:ca:a5:09:f3:e6:44:a8:1e:6e:6a:72:
0d:9b:78:c0:eb:0c:0a:97:a7:57:e2:51:3a:4e:f3:
de:06:17:88:31:af:2d:e2:17:aa:4c:be:15:8b:9e:
b1:ef:e2:d0:13:c1:ea:9e:42:a3:80:a0:fb:18:b7:
26:d6:dc:fd:f3:a4:82:5e:51:3a:ff:ba:67:da:c4:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:CC:05:76:D5:DE:43:3F:C5:2A:73:F8:B2:2C:99:35:B1:35:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61C5CDE156011EEB6956F554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5a:f2:de:63:6a:a2:01:d8:c8:46:a4:40:6b:89:f4:8d:42:
9b:62:8a:ea:bf:99:ab:48:8f:9f:b0:c6:03:a0:c8:2c:4d:a9:
ec:54:d5:21:32:06:eb:8d:6f:13:aa:0d:ba:d6:bb:71:30:10:
9b:5d:d4:9d:c2:ee:9f:97:7f:c0:0a:9c:1e:f2:a7:dd:0d:b5:
7b:17:98:4b:89:ed:08:03:9f:d9:78:0f:ce:62:b8:c2:71:11:
4a:12:ea:16:70:f4:08:70:8a:75:92:7f:33:03:f4:39:b7:35:
29:f8:7d:07:2f:e7:7d:30:b1:f8:2a:80:6b:55:9f:93:d4:a4:
75:f3:d5:ea:c0:38:bb:5e:36:e0:5e:4e:9f:63:69:de:23:a3:
f6:17:f5:b4:01:7b:7b:da:1b:42:23:36:34:3f:1c:d9:63:5c:
80:e4:ce:e5:79:31:2d:d3:a7:88:e8:3a:57:10:74:2f:23:11:
ed:83:a0:f4:06:26:10:2e:6c:6e:32:76:4b:dc:c3:0d:8d:56:
a5:e8:30:60:b2:e7:be:61:a3:22:53:cf:04:6a:40:a8:46:5a:
7c:f4:00:6a:e1:eb:66:52:2c:69:41:e4:d9:b9:24:6a:4b:7c:
94:6e:95:22:09:a7:39:d4:ef:68:90:7a:81:ea:b8:a1:b5:d4:
e4:05:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org