Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3049084A5611EFB225BA50762E951A.roa
File: BF3049084A5611EFB225BA50762E951A.roa (raw, json)
Hash identifier: C8YNi5awIBSB7t9US03KCq0HDrC1ZnkjsTu4SDunHBs=
Subject key identifier: 11:C1:69:77:77:21:E7:FA:46:FB:6C:0A:0D:68:9E:59:4C:CB:0A:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3049084A5611EFB225BA50762E951A.roa
Signing time: Thu 25 Jul 2024 07:23:11 +0000
ROA not before: Thu 25 Jul 2024 07:23:07 +0000
ROA not after: Fri 16 Aug 2024 07:23:07 +0000
asID: 142062
IP address blocks: 45.204.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40859 (0x9f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:23:07 2024 GMT
Not After : Aug 16 07:23:07 2024 GMT
Subject: CN=66a1fd5f-d0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:80:07:e1:d4:ab:db:aa:7d:7a:e9:8b:d7:
4e:5a:ff:4d:29:73:de:d2:0f:03:6d:e9:38:11:c5:
a8:af:f3:bb:6d:58:ca:98:93:cb:de:97:a8:57:bb:
31:18:e8:84:9d:8d:8b:57:5a:9b:61:7c:c0:08:7b:
0e:9c:af:e4:1f:1e:9c:0c:fe:5b:82:80:47:98:8d:
8a:d5:f3:f7:73:4b:18:2f:9f:0e:78:2e:27:06:ac:
c7:d2:3e:15:4e:92:de:73:05:69:07:e7:27:b5:a4:
2c:13:85:01:04:61:b6:7a:1b:62:19:5f:e9:e4:b2:
31:ca:df:78:6f:86:c4:02:e2:bb:bf:91:9a:96:d7:
41:a6:a1:8b:8d:37:a8:16:e0:9e:45:72:61:6f:d3:
64:f6:58:0f:92:6c:21:7f:ec:08:0b:6d:72:e8:d5:
60:3e:a9:cd:9b:90:1a:52:ad:1f:f4:95:c9:4f:6e:
40:fe:43:1b:8b:0d:a9:79:14:dc:9a:82:29:c4:cf:
f8:47:90:1e:2f:53:06:68:c3:5e:24:19:c7:b8:cb:
d3:3f:a3:e8:f0:3e:cf:65:17:dd:49:b1:2b:62:98:
a4:47:4b:1f:74:fe:2a:97:90:86:d5:82:38:3a:9c:
95:c4:e3:9a:ce:9b:af:cf:9d:10:1d:b3:89:cd:85:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:69:77:77:21:E7:FA:46:FB:6C:0A:0D:68:9E:59:4C:CB:0A:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3049084A5611EFB225BA50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:47:cc:3d:a1:93:14:f2:ea:f2:ae:7a:4d:39:60:cd:d3:8f:
38:67:ad:7b:57:8d:18:ef:ed:c7:79:7c:9c:26:df:20:cc:57:
ec:07:99:78:92:8b:b7:fc:ab:78:36:ee:0b:5c:71:f6:28:e6:
ca:57:7f:67:78:02:2a:0f:53:69:a3:e0:76:a2:9c:25:ec:f7:
1a:85:16:17:9a:ef:32:9e:5f:ce:0f:3f:d3:45:76:af:48:ae:
af:d3:26:5f:df:00:08:64:a9:09:8d:b1:e0:38:ae:8c:07:37:
1f:34:7d:c4:b5:3c:03:9f:bd:e9:18:b3:3f:a4:1e:bd:b4:25:
5a:22:f1:dd:78:f3:7d:6e:16:8d:7a:01:dd:13:59:2f:19:88:
22:d8:ec:00:71:01:e4:1f:05:02:97:8b:49:d7:e9:49:eb:75:
63:7d:e1:e7:57:32:30:e2:5c:f7:b8:6e:7d:eb:05:66:99:7f:
ff:87:78:89:c1:e5:cd:68:6c:ed:68:68:17:c4:c0:4e:7e:a8:
4d:9e:30:54:f0:70:90:f3:5e:e9:1b:c8:7d:a1:d9:94:f9:c1:
39:32:1a:46:98:14:f3:c2:14:8c:c2:1d:18:e6:84:0c:4d:fd:
ee:03:c1:43:e1:13:f9:46:bb:8a:88:a3:41:3d:b6:3f:ab:eb:
73:24:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 10:13:43 2024 by rpki-client on console-fra.rpki-client.org