Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD0F3BEFB9E11EE980C3835017001B1.roa
File: BAD0F3BEFB9E11EE980C3835017001B1.roa (raw, json)
Hash identifier: E09a4MU5S8fIP8FTkhMOCSYvq2uVcSVSNMATcvbhYFc=
Subject key identifier: F3:82:88:B6:96:F4:B8:FC:9D:9C:9E:65:B4:90:17:9A:C4:41:07:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD0F3BEFB9E11EE980C3835017001B1.roa
Signing time: Tue 16 Apr 2024 03:09:25 +0000
ROA not before: Tue 16 Apr 2024 03:09:22 +0000
ROA not after: Wed 24 Apr 2024 03:09:22 +0000
asID: 136950
IP address blocks: 45.195.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33483 (0x82cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:09:22 2024 GMT
Not After : Apr 24 03:09:22 2024 GMT
Subject: CN=661debe5-2b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:d1:fa:ce:98:d9:7d:b7:83:bf:bd:34:72:
3e:68:d4:a0:bf:22:8c:63:d9:bc:6b:fa:2c:96:19:
ea:ab:da:78:d4:04:43:ac:92:2f:ba:78:63:a4:a6:
8c:6d:52:23:17:1d:3b:53:ed:80:a5:13:14:71:c0:
b9:c0:b0:6d:95:f5:78:2e:f0:42:5b:48:57:b1:75:
d9:0b:3c:e6:6f:6c:a0:9c:e1:2c:dd:b8:07:ce:61:
e3:99:08:a0:f4:5f:77:dc:23:97:5c:64:62:82:73:
90:4b:2f:03:bc:b3:8b:24:e4:0f:b6:29:b7:64:1f:
f0:82:d2:83:bc:bc:a0:a2:94:b3:b7:73:ac:b0:56:
e6:b0:a9:0b:cc:36:23:bc:1c:f8:35:4d:b2:b6:f1:
ae:aa:f5:cf:75:52:a8:ea:12:6b:46:45:9c:db:3d:
b9:63:9b:fc:71:d2:3f:75:f6:83:60:72:ae:6b:5e:
4f:1c:28:f4:98:14:fc:e9:64:aa:d3:3b:33:0d:f6:
35:68:ae:5c:50:66:a8:da:06:0a:56:e8:7d:59:ae:
d5:a4:8b:07:43:18:6c:a9:89:6c:66:1a:76:32:2a:
61:de:2e:c1:86:71:14:61:94:df:b4:6e:fb:da:09:
fe:66:d8:89:cb:11:dc:9d:8c:c6:c8:70:1d:03:3d:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:88:B6:96:F4:B8:FC:9D:9C:9E:65:B4:90:17:9A:C4:41:07:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAD0F3BEFB9E11EE980C3835017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:22:34:80:53:ef:06:92:fa:36:10:bb:05:ba:4b:c1:24:bc:
3a:62:c5:3d:70:5f:b2:2b:23:4b:6a:65:aa:86:cf:ee:67:fe:
83:41:8e:7c:82:fe:76:66:42:35:ba:56:23:84:18:7a:82:64:
a4:4a:08:57:b1:3f:02:fa:8b:2e:bb:57:75:7d:4c:e7:61:c3:
88:90:e3:2c:b5:17:e7:53:7e:2e:4d:83:f6:1b:7a:5f:68:00:
9b:f8:a9:2f:10:9b:3e:6d:b4:ab:42:53:4a:be:4f:d3:bc:93:
85:4e:77:af:f2:ad:a2:24:07:dc:e6:5a:e2:cf:1d:4e:25:0e:
f3:80:08:92:84:ff:09:aa:cd:f5:9f:f0:77:bb:bd:4a:6e:fd:
33:08:a2:4f:d0:73:c6:23:c1:8c:66:43:3e:ff:a9:3c:80:c8:
92:e8:78:32:fb:6e:43:58:f7:81:41:df:f0:6c:11:da:c3:9e:
9d:c8:3d:e5:aa:fb:97:56:d5:75:62:27:13:5f:b6:c8:d9:1d:
5a:b2:73:3c:f9:37:e4:91:9f:a6:a2:a0:29:db:c5:ea:98:94:
6a:2b:3b:fc:3e:6a:f7:d1:51:bd:85:42:a0:05:0e:d9:bf:fc:
1f:2b:f9:4a:96:5d:2d:a6:2c:de:a9:5e:65:b0:4d:bc:ad:9f:
30:d6:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org