Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E56DC23E9B11EFA95FEC5D762E951A.roa
File: C4E56DC23E9B11EFA95FEC5D762E951A.roa (raw, json)
Hash identifier: 9H11+ZqrhUuEOw61E07kjwIGvjC5H0UprfvggaBAyk0=
Subject key identifier: D3:4C:43:41:BB:02:2E:F6:E8:CE:65:F1:C6:DC:3F:62:66:84:66:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E56DC23E9B11EFA95FEC5D762E951A.roa
Signing time: Wed 10 Jul 2024 09:07:02 +0000
ROA not before: Wed 10 Jul 2024 09:06:58 +0000
ROA not after: Fri 02 Aug 2024 09:06:58 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39579 (0x9a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:06:58 2024 GMT
Not After : Aug 2 09:06:58 2024 GMT
Subject: CN=668e4f35-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:1b:b9:85:ea:73:4c:57:cf:4f:8b:ec:7d:
7f:d9:59:75:cd:07:3e:d7:89:c4:d3:f3:01:0f:66:
48:1f:7a:45:36:e3:65:3e:c7:9d:4a:64:1e:22:c1:
99:87:8c:7e:ff:fe:28:5b:3b:a6:cc:5b:01:6d:bb:
f1:b0:3a:04:7d:0b:2e:58:f4:53:86:1d:0c:18:72:
eb:18:ee:13:4b:28:47:18:78:10:20:bf:0a:52:15:
4e:ff:40:ab:cd:72:43:8b:a7:40:9d:39:59:78:fd:
c2:02:d2:61:dd:19:b1:86:3f:82:e3:af:6a:d6:0c:
2d:5f:9c:2b:85:ce:0b:dd:a5:b5:aa:8d:71:fc:4f:
27:7e:62:c9:40:67:1c:30:c8:f4:a0:39:30:9f:27:
7c:2a:88:0e:44:3e:e9:1e:36:4a:f0:5c:77:2d:4f:
e2:ca:68:f1:0b:1f:ee:32:50:c0:62:62:c5:c7:c7:
fb:10:34:58:38:77:5d:e1:4e:65:2c:63:8e:5d:c4:
8c:96:9c:b6:3d:a5:79:2e:cf:37:94:e8:03:e9:f1:
ef:f2:18:69:61:e4:d3:8b:ec:1d:ab:8e:a9:f0:ec:
30:ea:ee:88:39:47:b2:fc:bb:dd:0d:98:1a:43:ac:
3a:39:78:77:a8:b3:22:4b:9b:6a:58:eb:73:da:d9:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:43:41:BB:02:2E:F6:E8:CE:65:F1:C6:DC:3F:62:66:84:66:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E56DC23E9B11EFA95FEC5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:1b:af:1f:30:c8:c9:cd:91:3e:bd:88:19:fb:19:a8:7a:c7:
ce:3f:a8:95:4e:5b:81:78:50:26:16:d9:17:c3:6e:d9:7d:49:
67:66:e3:b7:20:64:de:ab:9d:48:73:2b:4e:eb:87:ef:6c:a2:
be:a3:e5:5c:3f:94:25:2b:51:32:66:5b:68:10:20:0e:e6:3c:
09:11:77:72:21:cb:d0:51:4f:fe:e7:48:5f:ae:5c:82:11:b9:
71:93:e4:29:40:86:de:07:e1:5b:4e:50:0e:f5:76:c7:59:7f:
d3:0f:34:5d:40:1b:a6:21:43:af:4c:21:b4:9f:ed:31:3a:72:
e3:58:76:2b:88:4d:04:63:63:62:75:ad:92:cf:2f:11:d4:57:
71:0b:28:73:ff:2e:bf:73:2c:9b:2a:94:bd:d7:ec:83:d8:e6:
27:7c:c8:43:a6:8f:cd:38:1f:2a:e6:22:99:87:52:6b:2f:6f:
80:ec:5c:ff:eb:ea:7f:6b:49:87:40:1f:fa:7d:da:b5:13:5f:
b9:4f:54:0e:e4:e2:d4:33:c3:59:73:9f:92:1d:d1:00:70:90:
2a:28:8b:c6:74:e0:d2:b9:57:74:b4:20:81:49:54:1b:cb:46:
65:67:a1:d7:48:77:b4:1f:6c:73:5d:a1:58:c1:75:d4:65:cc:
0d:1e:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org