Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CECFE3A845A311EF8C93B95C762E951A.roa
File: CECFE3A845A311EF8C93B95C762E951A.roa (raw, json)
Hash identifier: tCqFGOTDpLngbMwg7BQ9cEXEv4R1PFhHgDfGJqhG6cI=
Subject key identifier: D1:E0:2C:DB:0F:8B:41:41:83:E9:34:0D:2E:73:33:E5:F7:D2:B5:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CECFE3A845A311EF8C93B95C762E951A.roa
Signing time: Fri 19 Jul 2024 07:52:12 +0000
ROA not before: Fri 19 Jul 2024 07:52:09 +0000
ROA not after: Mon 29 Jul 2024 07:52:09 +0000
asID: 142062
IP address blocks: 45.204.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40318 (0x9d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 07:52:09 2024 GMT
Not After : Jul 29 07:52:09 2024 GMT
Subject: CN=669a1b2c-cb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:e9:2c:03:ba:42:66:9e:6a:91:3e:c2:8a:
b6:14:81:d2:e5:d1:81:d7:1a:be:27:3d:b9:d7:37:
1d:6d:2b:08:5c:31:c8:a9:64:98:d6:b1:3c:31:12:
1c:49:8c:a2:1b:0e:b6:42:20:1a:40:61:c7:af:6b:
f4:ca:75:bb:31:e5:75:db:b4:3b:10:80:7a:23:89:
43:d4:f4:0e:7f:36:01:79:fd:f0:13:fa:74:01:7a:
51:aa:28:7d:84:f1:8d:d8:c6:b1:ab:ca:af:ce:14:
ee:72:a6:89:d0:aa:64:d3:ea:4a:2b:44:bc:40:90:
67:bf:96:b9:43:ee:84:0f:cf:e5:1e:2a:25:9c:f4:
c2:1f:67:07:fe:db:bd:3f:b6:16:ab:97:4e:cf:64:
a5:e3:85:38:b8:43:d8:84:97:65:88:01:1b:1b:16:
9d:b6:d9:84:fc:2b:71:a3:04:e8:39:91:09:7a:bb:
d4:dd:2f:04:b2:ef:e8:4b:22:89:4e:0b:f7:88:a3:
16:cb:3b:76:22:97:39:cf:2a:65:32:02:bf:6f:fe:
3c:3d:c6:da:f2:9f:4c:fa:00:95:67:b1:80:07:bd:
9d:e9:6f:43:cb:d2:93:06:38:99:c6:e2:a8:14:04:
6e:e5:7f:e3:1a:d5:0f:9e:ae:da:87:87:cf:4c:6d:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:2C:DB:0F:8B:41:41:83:E9:34:0D:2E:73:33:E5:F7:D2:B5:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CECFE3A845A311EF8C93B95C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dd:78:22:82:cf:c4:cf:24:93:bb:32:a7:21:b1:6e:ab:1e:
ef:52:7c:9e:5e:ca:cc:c4:1e:07:57:9d:3e:93:35:8d:15:b6:
12:3c:32:ec:51:94:1f:d0:eb:30:5c:44:44:12:3a:18:be:f1:
aa:85:f4:4d:0b:9e:0b:c0:82:a8:19:01:76:78:7c:81:08:74:
c7:bf:69:a1:89:86:51:eb:41:60:ca:cc:0a:ec:3e:10:67:ce:
ea:6a:18:c3:d1:79:bb:c4:2a:19:0e:64:87:4e:6f:7e:ed:0f:
b2:ee:83:7b:71:15:08:01:b7:94:0b:06:a6:57:52:0f:fb:93:
65:8d:35:1b:ba:20:19:04:ec:53:51:a3:f1:9a:e8:a6:b5:4b:
96:a2:9b:66:14:06:19:44:43:70:44:a8:06:8c:92:ea:fd:4f:
e1:99:75:92:56:17:10:91:5e:ac:26:82:0a:7b:f7:e0:52:cb:
c3:7b:ce:47:e1:90:db:30:e6:bd:48:85:7f:1f:ba:a1:0e:1d:
6c:a6:dc:68:6d:5e:4a:b8:4c:d0:3a:91:b5:f1:10:96:4d:8a:
9c:d0:c2:bb:be:bb:e4:06:0a:5f:f6:01:6e:4d:31:8d:21:ef:
57:4c:da:cd:7f:5f:23:d3:ce:82:60:73:82:93:7d:14:6a:83:
70:37:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org