Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69EC8963A9611EF8726B7B9762E951A.roa
File: D69EC8963A9611EF8726B7B9762E951A.roa (raw, json)
Hash identifier: Axp22+YzYGurQaQXL7epqomGLm7x1tJAjLa5gKGNtVo=
Subject key identifier: F4:BB:25:BB:58:7A:F8:6B:5D:19:73:8A:F1:9D:73:1E:DC:B9:35:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69EC8963A9611EF8726B7B9762E951A.roa
Signing time: Fri 05 Jul 2024 06:21:39 +0000
ROA not before: Fri 05 Jul 2024 06:21:36 +0000
ROA not after: Thu 01 Aug 2024 06:21:36 +0000
asID: 21859
IP address blocks: 45.204.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39081 (0x98a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:21:36 2024 GMT
Not After : Aug 1 06:21:36 2024 GMT
Subject: CN=668790f3-2cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:1c:1a:74:de:4a:98:5e:10:ec:93:1d:2d:
2c:a8:1c:84:c9:f7:8f:69:95:d1:cf:aa:6c:00:ae:
d3:73:e5:2f:cf:0d:4e:b7:33:3d:41:42:f9:cc:e3:
fd:95:38:e3:9b:09:15:a4:b6:fd:6d:23:d1:29:ad:
78:e6:0a:bf:9d:0a:ab:ec:4e:47:9a:00:60:a8:3c:
6d:9e:51:22:5a:80:1b:a3:63:95:1e:d2:e3:d6:e8:
bf:a0:88:5e:7f:64:e3:3b:2e:b0:83:78:ad:4f:8d:
57:e0:b7:6b:3d:8e:bf:4f:85:ae:2e:1b:3c:85:47:
93:20:c9:e0:9b:be:ff:fd:1e:90:04:54:1a:bd:94:
a0:eb:b2:89:fc:b6:9d:a7:ca:a1:2a:77:84:a8:8c:
28:be:f8:6f:96:de:36:38:c3:40:2f:55:4e:1b:b8:
84:3c:fc:28:0b:b9:f0:f2:b9:15:db:5e:35:70:53:
96:b9:a4:4e:37:91:9a:ce:21:6c:b9:0a:e3:09:34:
66:a1:53:93:b6:ed:a1:2f:11:4e:5c:42:66:c0:87:
dc:82:00:bf:98:e2:ef:04:46:1e:95:17:76:8c:07:
9b:8e:3c:f3:81:f1:1b:fb:5c:ff:13:c5:4a:d7:0f:
de:98:76:7a:e8:f5:93:8b:84:12:d4:48:18:ba:bc:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:25:BB:58:7A:F8:6B:5D:19:73:8A:F1:9D:73:1E:DC:B9:35:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69EC8963A9611EF8726B7B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4c:e7:b6:b2:fc:b6:04:64:34:6c:cf:b4:c9:91:5b:42:2e:
b8:1a:19:df:1e:5c:d0:7a:42:99:3e:78:aa:b2:ab:4a:8d:a7:
49:26:ad:91:cd:fe:29:fd:09:43:37:1b:a4:53:14:00:9e:4a:
b3:4a:16:a5:3c:b5:c6:5d:3d:96:65:80:59:60:4a:e3:83:51:
68:b4:a3:3c:06:b2:1f:76:af:9f:fc:e6:8b:1c:4e:f3:ee:c2:
9f:44:8b:8f:a1:bd:3d:43:b3:a4:01:9d:82:4f:de:9d:0a:0f:
79:17:0f:c4:17:4d:c4:48:02:93:7b:c5:b7:11:4b:df:a5:35:
8f:23:df:f7:73:3e:39:d1:1c:68:99:20:c9:48:07:10:7b:ee:
87:96:33:9a:eb:f7:0b:ea:9d:05:10:29:db:25:27:63:a1:7e:
10:ef:05:9f:ef:26:b2:2b:85:4c:8e:ad:cd:ec:b2:fa:6f:47:
b0:0f:61:b6:e7:dd:94:00:40:01:0c:6d:7d:a6:45:bd:af:eb:
19:fe:d7:f3:5d:b5:ad:7f:48:3e:8a:a8:44:47:38:cc:89:b8:
54:be:cc:cf:6e:a2:b7:06:f6:5b:b0:7c:60:c7:04:d9:52:90:
69:8a:72:7c:30:0f:e3:eb:b4:a3:3f:ea:8e:17:8f:29:b6:62:
a0:d9:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:29 2024 by rpki-client on console-ams.rpki-client.org