Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7497B90FB9711EEA9D7B4F7007001B1.roa
File: C7497B90FB9711EEA9D7B4F7007001B1.roa (raw, json)
Hash identifier: soiwAhBo+3EgOebqKonORBJ5H2GmmBPHqDp5LhzHHlE=
Subject key identifier: 87:25:6A:72:2B:5C:11:10:4D:93:13:6A:6F:6C:65:F2:41:AF:6C:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 829B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7497B90FB9711EEA9D7B4F7007001B1.roa
Signing time: Tue 16 Apr 2024 02:19:40 +0000
ROA not before: Tue 16 Apr 2024 02:19:36 +0000
ROA not after: Thu 25 Apr 2024 02:19:36 +0000
asID: 136950
IP address blocks: 45.204.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33435 (0x829b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:19:36 2024 GMT
Not After : Apr 25 02:19:36 2024 GMT
Subject: CN=661de03c-27ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:03:81:6c:d0:1e:b8:8f:fd:66:5e:c7:f4:
8f:89:71:3f:89:ec:78:29:d7:e7:c9:07:da:70:ab:
22:96:fe:ec:6f:06:72:42:a9:69:7f:54:f6:44:e1:
27:72:db:3c:20:3a:6e:58:fb:31:80:73:84:49:74:
9d:b0:44:87:da:65:20:b0:0d:2f:23:39:07:3d:bc:
f0:9d:89:6a:a3:e0:66:bf:2f:f7:bd:fa:db:27:12:
1a:05:28:6d:98:b1:c5:11:fc:05:d3:b4:65:d5:ed:
43:2c:43:b3:3d:f7:2c:e6:be:06:8a:21:d1:c6:cb:
24:d4:51:2a:02:0e:9a:28:31:06:d5:26:96:d5:14:
8b:78:22:42:ae:7e:73:e9:0c:ea:c1:58:58:d5:62:
ad:be:56:27:ea:14:52:f0:93:d9:86:cf:0e:ac:0e:
5d:60:b0:9c:11:5e:4f:09:91:bb:6b:a5:3b:82:24:
94:4d:18:96:32:9e:72:94:15:0e:6e:93:30:9a:09:
5e:d0:f7:59:99:7d:0c:4b:1b:56:e9:4c:ef:e0:7b:
d8:74:e8:52:0b:fc:74:93:92:e3:07:f4:d3:fe:2d:
e9:87:f9:ce:db:dc:de:52:fc:fb:2a:95:32:c2:31:
76:3d:b1:54:24:a0:39:87:62:1b:72:88:d3:58:ad:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:6A:72:2B:5C:11:10:4D:93:13:6A:6F:6C:65:F2:41:AF:6C:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7497B90FB9711EEA9D7B4F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ff:9d:f4:e4:11:99:45:65:b0:cd:f2:ed:f9:b5:f6:09:d0:
1e:2d:f1:4f:ed:99:a7:a7:ca:d1:2e:84:36:91:eb:88:67:71:
37:38:9a:18:55:e0:4f:01:96:cf:60:8c:54:14:df:1b:db:96:
fc:29:5f:22:60:f5:bb:3a:78:00:1a:09:ad:f5:35:47:40:09:
66:a2:76:64:71:3f:7f:53:86:f6:45:c6:21:f2:34:a4:e3:23:
d6:5e:ed:4d:e5:61:53:7f:6b:92:ff:dd:e9:fb:54:4c:4d:5f:
8f:97:13:60:db:50:32:44:57:3b:82:f5:4f:31:b6:49:7c:82:
10:d6:98:43:b8:5f:82:78:df:54:b8:eb:e4:a0:c6:39:f7:82:
9a:d4:3b:10:11:3d:ad:1b:de:70:4d:8d:c0:27:91:d0:99:8c:
c6:21:a0:2d:cb:a2:04:e4:1e:d7:11:c2:cf:b5:a4:2b:6a:de:
d6:00:03:4f:7d:fe:5c:ad:2f:ae:3f:50:28:46:79:83:ba:2a:
d9:5e:46:74:6a:e3:03:ae:13:27:67:5d:27:fe:8f:10:e9:2d:
ff:33:46:60:ef:64:20:db:f3:2c:05:e4:62:a8:21:a6:83:6f:
29:58:41:23:7f:b2:9d:94:4d:a9:36:a8:c2:56:81:fd:82:0e:
b5:35:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:19 2024 by rpki-client on console-fra.rpki-client.org