Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DE376E47DC11EF8F424B7A762E951A.roa
File: E3DE376E47DC11EF8F424B7A762E951A.roa (raw, json)
Hash identifier: IK+I04LYQNkLUjKvTuNbFA4P6kyBtS+rG7OpjpkgRsU=
Subject key identifier: D5:5C:7F:23:65:2D:C4:DB:50:10:52:71:39:72:D9:51:83:D8:A8:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DE376E47DC11EF8F424B7A762E951A.roa
Signing time: Mon 22 Jul 2024 03:45:51 +0000
ROA not before: Mon 22 Jul 2024 03:45:48 +0000
ROA not after: Fri 23 Aug 2024 03:45:48 +0000
asID: 62240
IP address blocks: 45.200.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40455 (0x9e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:45:48 2024 GMT
Not After : Aug 23 03:45:48 2024 GMT
Subject: CN=669dd5ef-f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:9b:b7:e9:64:1c:9c:78:13:bf:fe:a2:4e:
b7:a8:3a:75:89:63:52:3c:1e:67:7d:22:ed:f1:f2:
37:a3:05:98:33:ce:55:58:cb:99:8a:29:5a:19:ed:
1b:fb:64:67:00:12:bb:92:15:49:35:04:81:d1:b1:
ae:16:ad:5c:4a:ed:92:ce:17:13:fc:91:e5:dd:ae:
78:a7:30:28:f0:95:6f:17:62:2d:32:06:a6:4e:15:
35:8f:b3:da:a5:14:ec:a9:69:82:1f:0d:3b:39:95:
9c:3f:a4:46:9b:cc:73:dc:04:0d:a0:2a:b2:2f:76:
9e:a0:af:63:3a:37:41:56:eb:42:96:ac:b1:3c:aa:
d4:f5:0b:80:8b:5e:31:8f:e1:73:14:f0:f6:55:89:
0f:c2:76:5e:a5:8e:be:d7:e0:93:72:89:fb:27:37:
4b:fd:f5:04:88:8e:27:6f:1f:61:0b:7c:0f:78:87:
1f:24:23:54:d1:0a:26:d3:1f:6e:db:95:24:8c:68:
6a:89:82:8c:3d:80:f3:38:9c:0d:fa:db:c0:71:29:
49:1a:aa:36:11:a0:d7:6e:73:98:56:1f:da:dd:9e:
7b:89:b3:96:e3:5a:29:79:09:d2:2e:48:96:ee:d1:
85:7e:1a:83:11:07:e2:05:50:79:5e:96:2f:4b:b4:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:7F:23:65:2D:C4:DB:50:10:52:71:39:72:D9:51:83:D8:A8:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3DE376E47DC11EF8F424B7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a6:35:a6:ef:d0:61:6b:c3:6a:5b:ba:e5:ad:2e:16:ad:ca:
0f:2d:80:8a:58:7e:4e:01:0d:55:b9:d7:27:a6:b2:e2:bd:4a:
00:fb:b9:84:8c:0e:8b:a9:41:78:c5:dd:01:14:2f:c7:da:ad:
e0:96:a8:53:7d:da:25:93:59:8d:07:cc:40:15:1d:e9:3b:10:
1c:1e:f8:4e:17:60:44:6e:eb:77:19:39:b3:1c:38:9d:a0:8d:
7c:c3:a0:c6:3e:2e:bd:da:e0:d1:0a:f6:ef:68:b6:b6:4c:cd:
24:25:d7:e2:b7:51:0e:c0:20:fe:97:cc:1a:2f:88:0e:d0:17:
c3:c3:36:aa:10:f0:2d:7c:87:a5:51:7a:c1:59:a9:1b:60:81:
1b:92:77:7c:98:b8:f2:ad:c8:7f:02:97:b3:0a:e1:5f:3e:44:
23:de:26:ed:09:88:cd:e1:c8:3d:f3:4f:9a:f5:49:3d:b2:5e:
45:60:73:b7:54:59:19:3f:57:e0:77:5d:e4:be:58:75:e8:ec:
88:90:ee:c7:57:2f:3b:5d:05:cf:f0:6f:59:62:61:19:e6:e9:
8a:8c:03:24:c6:63:97:1d:09:a7:72:b3:51:c1:0c:89:ac:91:
16:26:00:90:4e:ee:75:8b:50:81:35:0c:09:0e:77:eb:cc:a0:
e2:a9:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:49 2024 by rpki-client on console-fra.rpki-client.org