Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D84042F0C511EEBDC7B397775412E6.roa
File: C6D84042F0C511EEBDC7B397775412E6.roa (raw, json)
Hash identifier: cOwPb4bvXHOGaPd62AR0e5T9XCqw1EPM0iTi++8rDSI=
Subject key identifier: D9:FE:84:0A:86:56:34:A8:B0:1D:37:EE:C7:CC:3F:36:D4:EA:B8:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8158
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D84042F0C511EEBDC7B397775412E6.roa
Signing time: Tue 02 Apr 2024 07:51:13 +0000
ROA not before: Tue 02 Apr 2024 07:51:10 +0000
ROA not after: Mon 29 Apr 2024 07:51:10 +0000
asID: 139646
IP address blocks: 45.201.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33112 (0x8158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:51:10 2024 GMT
Not After : Apr 29 07:51:10 2024 GMT
Subject: CN=660bb8f1-0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:3d:3c:db:8e:03:fb:a0:33:c8:7d:ea:f9:
af:f2:29:de:ff:3a:81:6f:fd:0b:ca:c7:18:d3:94:
fe:cf:62:87:33:e7:68:1b:16:bc:0c:db:74:4d:14:
4e:23:40:2d:28:2b:a6:56:1d:b6:f5:53:6f:89:2b:
ec:61:71:e1:bb:1d:45:85:54:74:19:74:18:e2:25:
77:7b:d2:f2:90:fa:85:f3:11:f2:44:31:a6:35:0f:
00:fd:95:e9:85:6b:6b:84:de:2e:cb:e0:09:e1:bb:
3c:39:31:91:c0:b9:d8:fc:ed:11:70:1a:bc:10:0d:
77:74:ac:f1:4a:a5:3a:b0:92:76:e5:cd:9a:92:08:
89:d2:2d:39:e0:80:c1:5f:85:46:17:35:30:a6:2f:
3b:13:24:29:e1:4d:bf:44:18:fa:26:4f:b1:c3:aa:
8a:08:1c:bf:51:5e:e5:9d:55:76:ef:c6:9c:a1:e9:
5a:d7:3d:1e:29:6a:2e:21:34:23:3a:0d:7f:3d:68:
52:2d:3f:08:5a:40:e8:d0:6e:ed:a2:e1:d2:de:d7:
2a:a5:79:b1:ca:96:8d:e7:25:d6:b9:a0:be:b2:9c:
a1:17:6d:cd:75:7d:f5:b6:73:46:18:7d:4c:88:ad:
fb:60:d1:6b:2b:a0:a6:b6:92:31:30:ee:88:b7:04:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FE:84:0A:86:56:34:A8:B0:1D:37:EE:C7:CC:3F:36:D4:EA:B8:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D84042F0C511EEBDC7B397775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.250.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e8:2e:e9:9b:5e:ff:27:99:9d:8c:e7:86:fb:13:f2:84:69:
ff:d7:4f:61:64:4e:9c:25:1c:86:ac:42:3b:08:16:a5:a4:79:
30:ce:f5:a6:db:e9:03:ee:c8:9f:f4:9f:2e:02:a1:46:86:fb:
e0:e6:ba:13:0a:63:93:df:9e:1f:9f:09:b8:d1:ce:9d:e9:d8:
49:1c:fe:9e:0a:bd:14:45:8d:0a:0a:d4:a0:a3:79:b9:c1:12:
74:5f:52:7f:06:1b:53:e1:63:b5:1d:02:3f:2d:dc:ba:8e:2d:
ce:67:22:82:60:62:94:37:05:ba:a5:bc:66:83:8f:04:55:4a:
6e:a2:0e:c7:a4:46:fc:b0:56:eb:58:06:64:07:9e:52:e1:f4:
de:36:20:b1:df:b6:d5:7e:3a:6e:fc:b4:6e:5e:e8:65:37:38:
9c:ba:20:35:06:bd:36:cc:53:83:73:c2:e4:e0:ca:54:a3:fb:
21:5f:6c:e2:b4:e0:7c:46:08:82:44:6c:75:fd:4e:d8:47:0a:
c0:2d:4e:ca:cb:85:c8:21:56:34:23:d8:e3:86:23:0e:86:09:
a4:b8:5a:ec:1e:6b:2f:4e:38:60:dd:d1:f5:e3:f1:a9:d0:c9:
f0:3c:12:5e:8c:ed:01:22:b1:95:67:78:2c:05:04:48:6f:7c:
3f:e5:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:23 2024 by rpki-client on console-ams.rpki-client.org