Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA205DAC0F3311EFBDBAB144017001B1.roa
File: CA205DAC0F3311EFBDBAB144017001B1.roa (raw, json)
Hash identifier: 82G2N/g7RHXpo9SzDzfGabbMrzTydqdnFcIYwtddG18=
Subject key identifier: 26:0F:A7:A7:D6:F8:2F:C1:30:CB:3E:CC:82:31:8E:9C:21:E9:8C:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 89AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA205DAC0F3311EFBDBAB144017001B1.roa
Signing time: Sat 11 May 2024 01:14:18 +0000
ROA not before: Sat 11 May 2024 01:14:15 +0000
ROA not after: Thu 23 May 2024 01:14:15 +0000
asID: 44559
IP address blocks: 45.192.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35245 (0x89ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 01:14:15 2024 GMT
Not After : May 23 01:14:15 2024 GMT
Subject: CN=663ec66a-34c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:c5:4a:fa:38:e4:cb:ff:89:97:67:f2:a5:
2f:e3:a4:d2:2c:ce:7d:48:52:97:25:52:d2:d1:ea:
a7:e8:ef:c1:44:1c:ed:10:d9:a1:ac:31:72:45:c2:
67:7e:e8:10:04:41:38:63:11:aa:d7:d4:05:94:46:
88:f2:75:7b:fd:82:15:dc:91:76:20:ee:3f:2a:e0:
7f:c1:10:37:c9:9a:bd:28:40:f2:0f:0b:34:22:6f:
6b:21:e0:b6:1c:8a:63:c0:7b:6f:02:31:f9:79:82:
da:02:a2:3d:b5:64:1b:de:18:f7:b4:a9:04:7c:cc:
5d:74:f9:f3:f0:b9:6c:1e:fd:f8:ca:ab:31:60:fc:
15:d1:8e:61:51:e7:5c:fc:11:a3:d6:a6:09:e3:6e:
13:ee:a5:74:4c:2c:50:41:15:dc:af:82:14:9c:9b:
ae:cb:b3:20:04:8b:78:66:e0:9f:06:2c:72:9c:19:
d4:f1:2b:0c:92:a0:6a:30:6b:56:e3:59:bb:2a:0b:
6f:7a:35:3b:ad:30:25:6c:e2:2f:c3:6c:75:ef:4a:
78:a8:50:71:5a:38:f0:af:7c:04:aa:ea:23:8f:cb:
d6:89:d0:01:ed:4b:5f:37:0a:a3:03:07:9a:dd:fb:
ce:e3:0a:df:0a:9c:83:f8:08:d6:b9:8f:70:57:c4:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:A7:A7:D6:F8:2F:C1:30:CB:3E:CC:82:31:8E:9C:21:E9:8C:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA205DAC0F3311EFBDBAB144017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:b4:2b:d6:b5:e2:9d:92:b9:28:c1:1e:f1:b6:ef:14:2f:55:
61:9c:82:d5:a5:d4:3b:7e:b7:95:cf:a3:1d:a6:7f:38:07:5d:
3b:79:ac:50:5c:6a:e5:bb:69:cf:c8:55:2c:d0:27:c4:86:99:
02:d0:88:25:b5:3a:62:aa:c9:bd:00:16:1f:f4:b1:86:4b:9a:
c6:4e:94:d0:40:66:98:56:4a:53:5d:52:e3:dc:71:db:1e:18:
26:a2:b6:64:f5:3c:43:e8:bb:a0:cd:51:b4:52:66:87:cc:20:
f4:69:07:50:ef:72:92:2c:6c:1a:64:0a:1a:72:4d:9c:8c:24:
c6:a3:52:1b:87:75:d9:80:6f:f0:fb:97:84:de:1e:29:a8:61:
13:b9:3c:7a:82:ab:06:79:d5:3a:d5:47:3e:19:be:bc:df:ea:
cd:23:ca:12:3e:d1:d8:da:1a:7b:4b:f4:2a:eb:d1:05:91:7c:
3f:b7:3a:ce:af:e8:a2:4f:4b:f3:a2:d0:74:40:40:32:7c:48:
33:7a:f2:92:c1:11:30:52:49:18:81:11:36:74:e7:cf:43:55:
b3:4b:0f:4b:56:5d:d5:7c:44:df:1b:c9:c3:64:1c:9b:45:48:
82:8b:ea:00:3f:ed:84:21:9c:d3:69:c7:f7:fe:3e:17:93:e2:
45:e2:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:39 2024 by rpki-client on console-fra.rpki-client.org