Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5F374C647EF11EF8ED2577A762E951A.roa
File: D5F374C647EF11EF8ED2577A762E951A.roa (raw, json)
Hash identifier: LzpFUvP+zOd3mzH18cBE2RCjBSNuIb9cBCrKU+hmKwk=
Subject key identifier: C6:3F:AE:58:59:E6:78:16:D4:1F:EF:30:36:40:A1:47:89:97:C1:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5F374C647EF11EF8ED2577A762E951A.roa
Signing time: Mon 22 Jul 2024 06:01:28 +0000
ROA not before: Mon 22 Jul 2024 06:01:25 +0000
ROA not after: Mon 29 Jul 2024 06:01:25 +0000
asID: 44559
IP address blocks: 45.207.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40531 (0x9e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:01:25 2024 GMT
Not After : Jul 29 06:01:25 2024 GMT
Subject: CN=669df5b8-44af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:fc:e3:ee:2e:5c:09:c1:21:48:ce:47:cb:
8d:a2:4d:7f:c8:fa:3a:de:ea:dd:0a:a9:0c:23:fd:
07:a5:5b:06:fa:18:d4:49:bf:a6:50:e5:71:2f:45:
32:34:9f:4b:6f:81:39:9f:cd:3a:56:6c:a3:35:ef:
66:75:e6:43:58:58:83:ed:c9:cf:71:50:3c:b6:5c:
2d:14:42:36:1e:7e:6a:8b:fa:92:ac:4a:64:f3:38:
31:00:47:47:75:ba:58:fe:f7:19:0b:25:b1:e5:1c:
f0:b1:04:73:27:da:e4:a0:3b:dd:d0:31:d3:c3:b7:
55:85:f5:54:ad:02:43:54:83:d6:31:04:1e:9c:90:
82:37:d5:b4:c2:36:d5:24:4d:43:60:f5:d1:16:e6:
a9:51:8e:ec:17:68:c1:31:f9:f1:f5:ca:5b:3f:8d:
7a:86:0b:ec:84:7b:86:48:8c:c3:de:3d:ef:df:79:
64:3c:cf:78:9b:89:54:e6:18:4c:37:74:cd:60:02:
bb:7d:78:b7:2d:c5:61:dc:39:f9:8c:2f:b6:43:7b:
76:de:01:26:06:50:d0:58:54:8b:4c:1c:36:83:1e:
54:40:8b:bc:b9:67:ad:6d:e6:63:3a:fe:31:07:c3:
73:c6:64:07:0d:e4:70:87:56:d2:79:b0:74:55:f1:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:AE:58:59:E6:78:16:D4:1F:EF:30:36:40:A1:47:89:97:C1:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5F374C647EF11EF8ED2577A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:cd:7e:a4:8c:9c:e9:e3:40:48:5c:cd:8f:a5:f8:bb:31:1a:
ff:02:24:36:71:a7:c4:2c:79:1f:e8:69:b7:a4:5f:ea:f7:eb:
4d:c0:47:37:e4:66:6e:21:c9:eb:43:b0:1f:b7:1f:96:ee:83:
80:88:b7:55:7b:4c:39:7d:83:69:72:f0:9d:0d:6d:87:33:53:
d7:4c:bc:4f:0e:80:6f:3a:64:d9:42:50:fc:65:db:ec:32:05:
b1:0a:df:5d:80:52:34:fd:56:a9:58:b2:3b:aa:4a:8e:36:ed:
e0:ce:e4:35:cd:8b:57:40:fe:ca:68:43:bc:fd:3a:6b:a3:b2:
72:8b:db:30:24:d2:c4:3c:62:bf:4b:1e:10:a6:83:2a:71:53:
23:a2:aa:a1:b3:0d:27:83:07:51:3f:f0:6d:66:e4:78:ee:45:
40:48:69:0f:e5:43:9d:4a:3d:60:ec:f1:e7:71:e8:23:16:2d:
a5:fc:f3:df:e0:8d:1e:30:e6:0f:a3:2b:27:16:cd:0d:44:08:
03:1d:0e:e5:9e:f3:fd:b9:04:1d:9f:cb:1a:59:46:cb:14:b7:
e9:26:04:1a:5a:e4:4e:16:05:23:13:87:4b:8e:63:ca:2f:37:
4a:7e:44:a8:1f:4b:c6:ba:32:c9:64:34:68:d4:25:fd:41:05:
86:d2:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org