Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53DA6663A9711EF883BBCBE762E951A.roa
File: C53DA6663A9711EF883BBCBE762E951A.roa (raw, json)
Hash identifier: DYdfir0B1V535/x6zrMUpqW1RCAhnUWaoPJ8X/5MB7o=
Subject key identifier: 86:D6:DD:B8:8F:03:1E:3F:DA:EA:A9:5D:B6:AB:62:33:77:64:35:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53DA6663A9711EF883BBCBE762E951A.roa
Signing time: Fri 05 Jul 2024 06:28:20 +0000
ROA not before: Fri 05 Jul 2024 06:28:16 +0000
ROA not after: Thu 01 Aug 2024 06:28:16 +0000
asID: 21859
IP address blocks: 45.196.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39097 (0x98b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:28:16 2024 GMT
Not After : Aug 1 06:28:16 2024 GMT
Subject: CN=66879283-7270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:04:80:ab:a6:28:08:8f:f5:16:0e:ea:ee:
24:89:43:48:f4:85:1f:75:fa:11:ec:c2:97:24:a5:
e5:52:f4:eb:04:5c:a6:29:fc:01:93:db:11:76:8c:
16:82:dd:73:de:d6:11:60:74:6d:97:3b:91:4c:67:
fa:fe:e4:9f:ea:fc:dc:b4:1f:89:df:99:69:1b:ce:
a9:87:35:d5:12:c8:d2:82:7b:b2:5a:b7:60:1c:68:
6d:5c:ba:77:b5:ec:01:cf:79:8c:7a:48:70:77:17:
b8:c0:6e:8e:7f:45:33:92:13:7f:60:b1:0c:15:50:
c9:e8:7d:8c:90:96:1d:fb:ad:fd:f9:25:71:ba:17:
24:65:a9:f2:a3:d9:47:d4:78:cb:1f:a0:24:6f:85:
69:a0:98:61:54:f8:a7:1f:03:37:38:7d:4b:db:52:
0d:21:e4:0a:a5:9f:91:82:c7:2e:3a:0d:a3:87:5e:
10:d8:0c:f7:d4:ba:8f:5b:75:70:bb:81:b0:10:cf:
81:5f:da:93:bf:4a:fd:92:b1:a6:e4:c4:09:c1:90:
23:2e:62:fb:19:c3:57:a5:07:5e:1b:2e:df:a5:d4:
ec:76:dc:99:51:08:56:f6:f7:cc:a7:aa:5e:53:84:
2c:3e:8f:a5:b0:1f:b2:4f:a2:22:0c:a2:bd:03:ab:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:DD:B8:8F:03:1E:3F:DA:EA:A9:5D:B6:AB:62:33:77:64:35:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53DA6663A9711EF883BBCBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.138.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b6:4b:b4:ce:60:a3:d4:6c:05:e7:e7:f9:90:7b:fa:62:33:
f8:87:6b:ae:3a:d1:84:42:f0:cd:db:89:46:8b:eb:88:cd:03:
e7:d5:9a:11:79:f8:6a:1b:c3:60:6e:76:b0:f8:6d:41:1e:d6:
bc:4d:c7:8c:0c:27:45:87:20:4d:0b:56:ab:da:25:e3:3f:58:
a6:79:85:4d:86:f7:68:ad:23:94:f1:2e:e8:84:0e:84:9b:1e:
6f:1b:2f:50:a0:01:99:52:af:c1:65:a7:df:91:16:8c:00:23:
22:06:3d:b3:95:64:d2:23:88:2c:90:1b:bb:50:3a:90:9c:c8:
9d:9f:db:08:35:af:a9:61:14:ae:74:ad:3c:ae:cc:c8:80:ca:
4a:c6:9d:4b:c7:94:39:4f:de:5c:49:35:6d:49:f4:8d:3f:99:
b7:b2:0d:4a:56:94:da:2a:f1:b9:3c:f4:6e:4b:1f:3b:25:94:
10:b7:e2:77:44:23:88:86:92:38:f6:a3:84:70:dc:0c:e9:25:
da:4c:b0:d1:d4:5a:48:06:ff:4c:af:f9:2e:40:6c:77:e4:47:
c3:60:b4:c0:e5:77:6b:79:97:c6:f5:24:80:22:7f:32:67:4c:
69:c9:34:d6:93:13:fe:f0:c5:c5:f4:a1:32:b7:e3:13:0d:0c:
cf:79:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:33 2024 by rpki-client on console-fra.rpki-client.org