Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16001FC128111EFA0CA2240017001B1.roa
File: D16001FC128111EFA0CA2240017001B1.roa (raw, json)
Hash identifier: SlE0ENOuhsSzPUF2Q7tfWhIeExHWe+p2EjEKDQnx/Yg=
Subject key identifier: BC:81:7D:45:E0:1C:2A:89:FC:12:19:13:2B:5C:C0:AE:9F:D3:BA:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16001FC128111EFA0CA2240017001B1.roa
Signing time: Wed 15 May 2024 06:10:25 +0000
ROA not before: Wed 15 May 2024 06:10:21 +0000
ROA not after: Sun 26 May 2024 06:10:21 +0000
asID: 142062
IP address blocks: 45.204.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35383 (0x8a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:10:21 2024 GMT
Not After : May 26 06:10:21 2024 GMT
Subject: CN=664451d0-0f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:ff:6e:96:89:a6:18:05:1d:ec:dd:c4:7e:
7f:75:9d:2c:12:dd:44:25:57:e4:fd:80:29:4c:c7:
7f:06:8e:72:a4:2b:1c:64:a2:65:09:3a:01:45:54:
79:51:10:b0:9b:a4:4f:ab:ad:1d:e7:23:9d:1b:33:
a8:f2:b2:39:9b:29:76:30:79:28:63:11:ee:ea:19:
88:d4:d6:23:85:94:09:1e:72:2a:34:08:61:d4:98:
3a:82:b1:36:86:92:1a:2d:03:6a:81:d0:dd:6c:ef:
9d:07:43:31:ce:58:31:3b:48:03:06:9a:ff:15:0b:
ce:57:dc:ea:55:49:99:8b:48:59:af:43:64:af:33:
24:ea:29:ca:98:3b:d9:33:81:06:e3:e1:5e:58:63:
af:30:c6:ff:4d:6b:b1:d0:4a:98:ef:9b:8d:4b:d7:
2c:b7:08:b4:97:10:32:c2:81:95:6b:c3:b1:e0:72:
74:32:48:a1:0f:d3:89:7e:19:9a:b0:bc:42:dd:f2:
f2:14:87:7c:1f:66:49:db:a9:8a:0f:f0:7e:77:70:
c7:f4:64:04:f3:54:9d:b9:ec:39:4e:9a:69:fc:00:
a1:b3:0f:66:a5:41:3e:4c:d1:0c:16:e1:90:f0:3c:
e7:60:1b:45:e2:9d:15:bb:da:b6:41:24:8b:19:7e:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:7D:45:E0:1C:2A:89:FC:12:19:13:2B:5C:C0:AE:9F:D3:BA:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16001FC128111EFA0CA2240017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a1:ee:51:ae:c5:fd:af:a1:a8:0a:7a:cc:ca:b4:58:ac:1e:
6b:ea:97:aa:4a:58:59:3d:66:ec:b1:48:f9:8f:5c:82:f6:71:
2d:17:02:be:31:a3:5c:5a:6b:b9:60:7a:39:c6:5e:28:bd:e0:
c2:ea:dc:7a:1b:98:33:5c:2b:c9:2d:43:73:73:58:40:ef:5f:
80:18:a5:2a:4f:0d:5b:dd:93:91:ab:fd:1e:60:9c:9c:24:cc:
11:e4:83:5b:e4:53:ff:ec:fe:c1:e0:b4:70:24:9e:4e:28:68:
5f:0c:36:00:f1:b6:85:3d:2e:b9:a6:24:27:05:0c:3e:ec:19:
aa:1b:b6:f7:e4:f5:65:f5:83:ba:b9:21:69:b1:11:0b:bd:b9:
4a:d0:ba:4b:66:11:94:e4:0a:f5:f6:cc:cf:43:b6:cb:d3:77:
86:9f:82:92:ec:ec:d5:26:35:01:f4:72:53:47:78:b5:6f:c7:
a2:0a:f6:ec:39:38:8e:6d:ff:e2:2c:89:c1:5e:28:3f:26:57:
d0:15:81:2d:f3:e3:39:80:16:76:a3:5a:26:fc:c8:38:62:ef:
f0:fa:94:1b:53:b2:2f:d1:aa:60:64:14:04:e2:64:e3:4e:27:
7c:1c:5d:60:6d:5f:a9:f8:a2:6a:d0:b0:99:f3:92:03:d1:e1:
9e:f5:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:40 2024 by rpki-client on console-fra.rpki-client.org