Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89997CC3A9611EF8ED591B9762E951A.roa
File: B89997CC3A9611EF8ED591B9762E951A.roa (raw, json)
Hash identifier: 9Ifx9L+M8Ht40esY4IWDsqM+6gQi+jJ0eQdfEwDXTDw=
Subject key identifier: A0:F4:76:BB:13:EB:6B:AD:50:B9:22:CC:8F:A8:80:6A:42:57:BD:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89997CC3A9611EF8ED591B9762E951A.roa
Signing time: Fri 05 Jul 2024 06:20:49 +0000
ROA not before: Fri 05 Jul 2024 06:20:45 +0000
ROA not after: Thu 01 Aug 2024 06:20:45 +0000
asID: 21859
IP address blocks: 45.204.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39079 (0x98a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:20:45 2024 GMT
Not After : Aug 1 06:20:45 2024 GMT
Subject: CN=668790c1-055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:f3:ac:3e:e9:00:de:f0:14:2b:3c:2f:01:
f1:7b:3e:6e:6b:41:54:e5:bc:b3:98:a1:4c:94:1c:
0f:09:74:e7:1e:51:b8:5f:ab:ab:40:a2:1f:eb:51:
a1:ff:09:bd:24:29:01:75:fa:94:2d:bd:a0:3a:fe:
f3:29:4c:83:a9:cf:cb:5c:ef:d3:e8:ac:52:95:36:
86:ee:6d:44:80:f8:70:97:98:75:f4:3a:cb:ce:ef:
92:f2:2a:a8:1a:59:40:98:97:01:a1:45:ce:6c:82:
72:07:5e:50:f7:3a:4c:05:77:33:40:1b:40:68:71:
07:1e:a2:a9:bc:5a:d3:ff:cc:89:d3:23:cb:21:b6:
f5:de:53:17:da:58:92:ea:76:c8:e8:e0:17:fa:7c:
37:58:b8:fc:ea:82:ef:c5:33:5e:e7:43:2d:5d:75:
ec:dd:c3:79:62:13:c1:2d:8c:ee:26:70:e9:1b:e2:
7a:7c:56:29:56:f3:71:9f:84:17:5f:d1:7b:71:fe:
53:3b:75:54:ef:80:4f:c6:95:8f:ee:92:2a:52:30:
5f:ee:2f:7f:72:dd:e9:a0:fd:59:ca:ef:7c:1d:94:
8f:f4:0e:58:a1:5e:ca:fe:97:f0:b3:bf:5b:74:d1:
da:67:c5:07:2a:a4:59:20:3e:70:e9:c8:d6:3a:1f:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:76:BB:13:EB:6B:AD:50:B9:22:CC:8F:A8:80:6A:42:57:BD:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89997CC3A9611EF8ED591B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bc:3a:2c:21:79:b4:60:3f:41:df:ee:ea:7e:bc:44:6d:01:
dd:79:22:d7:b1:2c:53:e4:9e:0d:1f:c3:59:95:ea:2e:25:65:
db:3d:67:2a:2b:c6:2f:8e:fd:99:89:6f:0b:84:1f:87:37:37:
dd:49:ae:9f:4b:6c:5e:54:1a:a7:a8:55:49:ff:7c:ca:50:62:
04:26:9a:ce:cd:52:99:e3:73:1f:09:05:b4:6d:35:61:60:4c:
ea:d0:33:67:eb:4e:7b:da:68:7b:e0:ba:2a:0b:fa:22:a9:f4:
52:6b:cf:96:12:c7:41:e0:7c:2c:45:b4:22:c4:35:c8:ad:db:
bd:01:ee:81:cd:ea:1b:4d:e9:6f:0e:47:c2:23:ed:65:6e:6b:
36:ac:ec:c9:f5:48:7d:1c:d9:e7:cf:f2:c5:2c:32:cf:79:f0:
9f:af:a5:4b:a5:9b:4c:76:76:cb:81:d4:18:8f:53:77:68:60:
22:4e:2e:6e:f3:41:cb:d6:a1:b9:ea:a5:e7:4d:8e:f7:bc:db:
f2:83:4e:91:dc:10:9e:04:5b:72:d7:cf:88:99:1c:d0:29:0b:
ba:60:2e:79:a4:f7:9c:32:06:f0:b4:2b:a0:dd:b2:40:84:e6:
de:4f:b3:0a:28:fa:39:05:20:92:20:85:04:47:3b:9a:56:90:
c9:1a:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:29 2024 by rpki-client on console-ams.rpki-client.org