Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8FDFC2F0C411EEA55D8491775412E6.roa
File: DC8FDFC2F0C411EEA55D8491775412E6.roa (raw, json)
Hash identifier: uligxB25fMZm3vEapRfZAjuVJ1Zrt3VV8CoLwrFjkak=
Subject key identifier: 0C:56:BB:D0:8F:8A:F5:3D:9F:D6:FE:B0:A5:5C:A0:5B:B9:29:A8:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 814A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8FDFC2F0C411EEA55D8491775412E6.roa
Signing time: Tue 02 Apr 2024 07:44:40 +0000
ROA not before: Tue 02 Apr 2024 07:44:37 +0000
ROA not after: Mon 29 Apr 2024 07:44:37 +0000
asID: 139646
IP address blocks: 45.201.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33098 (0x814a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:44:37 2024 GMT
Not After : Apr 29 07:44:37 2024 GMT
Subject: CN=660bb768-b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:6b:0f:75:fb:9f:91:cc:de:9c:a6:74:ed:
0d:0b:5e:f6:14:d7:35:6e:ef:78:0b:ca:da:98:02:
2f:46:26:8f:1c:57:31:47:0f:d0:bb:c0:98:f0:13:
dc:ae:a9:0e:9e:cc:7e:e6:d1:7d:4c:c1:04:c3:45:
81:55:84:98:9e:92:6c:24:c9:86:25:70:3c:5f:d1:
e6:b6:2e:5c:70:39:ec:dd:9a:2d:71:b9:a0:74:9e:
aa:cc:c1:d1:74:e1:21:5c:9c:6e:39:d3:71:92:1c:
2f:bb:0f:55:26:c5:b7:76:50:45:0b:84:4c:9e:63:
c2:af:d2:73:b9:ba:56:08:49:3f:03:f1:84:45:54:
cc:e8:39:0c:82:fe:6d:6a:51:b6:6d:0a:e2:21:4e:
7e:c3:81:f3:8b:d1:f1:51:a4:cc:32:ba:c5:0a:ca:
67:86:a5:bf:e0:ba:5e:22:f3:fb:da:9b:16:d4:f1:
34:a5:cb:17:96:d7:84:9b:56:44:a2:4e:73:0a:d2:
36:98:9a:98:f5:02:33:af:9b:86:1d:bd:b7:5c:b6:
04:e2:49:64:5a:0e:d2:1a:78:32:5a:70:fe:88:be:
19:99:36:a1:10:1c:cd:2a:4b:23:88:6e:33:0c:ec:
c8:b1:a9:5e:3f:c3:8a:b8:65:e4:53:3d:5e:c3:e5:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:BB:D0:8F:8A:F5:3D:9F:D6:FE:B0:A5:5C:A0:5B:B9:29:A8:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8FDFC2F0C411EEA55D8491775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/23
Signature Algorithm: sha256WithRSAEncryption
88:15:b6:11:be:42:5e:af:06:72:7c:86:59:5b:6f:a4:d8:30:
ac:be:99:18:4b:18:c7:b5:7a:fe:f2:cd:b8:a4:c3:65:b5:fe:
fb:52:71:a3:28:f9:fe:13:92:b5:58:3b:0c:b8:85:20:be:a3:
b6:b2:07:cb:c8:9f:c2:19:80:d1:a2:01:1c:81:a7:26:8e:b0:
34:21:c8:fd:86:93:92:d3:2f:5d:0d:63:11:02:e7:a3:c3:2e:
4a:dd:a5:4c:6f:f0:87:8f:20:70:78:15:50:14:00:2c:a7:2a:
78:4e:51:74:a4:7f:ba:54:f6:10:10:40:19:47:ab:a0:aa:72:
fb:dc:21:59:ae:cf:a7:dd:14:8e:30:e7:c6:29:b6:51:56:bb:
2d:ee:5b:88:8b:27:c1:62:ca:0f:a3:9e:ae:88:4e:26:e2:a0:
b1:b0:61:db:5a:7d:08:41:c6:41:2c:70:79:9c:8d:6e:2a:6c:
78:8d:17:11:c2:cf:a3:c7:a3:df:b4:46:13:ac:43:da:8a:3e:
a3:6f:4c:f7:27:fa:f8:c3:3d:15:ec:aa:9a:8e:cc:cf:a2:db:
24:60:17:8c:a5:b5:82:42:50:98:d0:cc:f7:fe:7c:7a:8a:77:
b2:18:84:3d:0c:81:59:4d:fb:ec:81:fe:46:b8:34:85:40:38:
46:91:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:26 2024 by rpki-client on console-ams.rpki-client.org