Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DC15F84A5B11EF8C729171762E951A.roa
File: E2DC15F84A5B11EF8C729171762E951A.roa (raw, json)
Hash identifier: ayPRTKQy5d9G45H5V2RuTd0CxX4IWM6Haj8Hm4in7Zc=
Subject key identifier: 97:89:FA:B1:E0:D2:F7:3A:2A:A5:80:0A:F5:01:3D:5C:E6:20:95:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DC15F84A5B11EF8C729171762E951A.roa
Signing time: Thu 25 Jul 2024 07:59:58 +0000
ROA not before: Thu 25 Jul 2024 07:59:55 +0000
ROA not after: Sat 03 Aug 2024 07:59:55 +0000
asID: 174
IP address blocks: 45.195.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40905 (0x9fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:59:55 2024 GMT
Not After : Aug 3 07:59:55 2024 GMT
Subject: CN=66a205fe-55a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:67:57:60:3e:01:b9:39:0d:b6:cf:b9:1c:
3e:2a:d9:6b:57:65:e5:07:57:8f:4b:3c:d4:e7:51:
e3:e1:55:7f:2f:19:a7:2b:9d:e6:2c:82:23:fd:9a:
c0:4f:45:14:2d:43:df:df:c2:d1:74:5f:5e:4b:ed:
94:01:67:d4:9f:e5:ed:84:30:7e:2f:c7:ac:16:bd:
24:e1:34:4d:73:0e:3c:51:c2:8e:d3:96:65:9e:b1:
df:59:b2:7b:54:30:46:71:4d:99:a3:8f:29:eb:e0:
68:94:8d:a3:fd:09:50:ea:07:6c:51:9a:f1:6e:76:
3b:79:95:fc:fe:ba:5d:d0:73:68:15:f8:d3:d1:8b:
64:fd:51:e4:4a:9a:5a:a6:84:64:f5:19:97:67:2d:
c4:a3:e4:0c:c8:71:2e:d4:89:ce:72:d6:72:66:b7:
44:61:0e:d0:b8:0a:13:a1:1c:9d:ac:e2:b7:50:b6:
af:b0:4d:54:dd:c2:93:9a:de:b4:64:fe:f8:f5:fd:
c0:8d:44:36:a9:a6:0f:07:e9:73:18:21:93:41:35:
b1:09:e1:32:75:10:42:93:53:a9:ca:e4:b7:bc:25:
4a:72:95:f7:00:c0:9e:96:91:85:d1:d5:d0:c2:56:
3d:c8:18:5d:5d:ae:ea:67:44:67:a3:a9:32:f4:78:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:FA:B1:E0:D2:F7:3A:2A:A5:80:0A:F5:01:3D:5C:E6:20:95:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DC15F84A5B11EF8C729171762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.64.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4a:50:05:32:20:83:02:45:40:6d:5c:25:a7:74:60:7a:34:
f4:ee:69:76:81:13:1a:26:42:c4:5c:f0:b3:12:d8:17:fb:a5:
01:f4:fb:67:05:4a:0f:a1:75:46:2d:66:4f:90:62:f0:a5:8e:
fb:85:b8:76:6a:a7:16:64:bc:a3:a1:49:76:63:c1:72:fe:9b:
2e:f0:d9:a0:31:8e:e2:1f:90:e3:08:83:9e:7e:11:8b:d0:5b:
d1:91:93:a6:af:3a:58:e2:c8:49:48:35:36:e3:2a:03:5d:72:
62:62:59:31:7a:fd:83:e6:c9:ad:e4:05:35:a8:f5:cc:cd:57:
6c:81:e1:b4:bc:3e:2b:7e:f4:67:7d:34:ee:cc:9f:ee:8f:f0:
3c:73:96:08:3e:0b:bc:29:5e:a7:39:39:24:da:f9:a1:c2:2d:
9c:77:d0:76:4d:ae:ed:47:ff:4f:e4:5a:a5:a0:cd:a6:39:c4:
18:66:07:50:3f:a6:13:49:67:f0:f6:d6:c0:97:26:9b:ce:31:
f5:38:2f:5a:ac:53:08:0f:5a:66:e1:3b:f2:44:6b:0c:2d:22:
c1:c0:10:0b:04:48:e5:3b:91:59:85:d9:0a:5b:e6:93:f0:09:
79:65:e9:4f:e9:48:c4:b4:45:5f:db:fc:b7:10:89:a7:f2:c9:
5a:46:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org