Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E72901144A6C11EFBE20BD63762E951A.roa
File: E72901144A6C11EFBE20BD63762E951A.roa (raw, json)
Hash identifier: 5b5TttAHHP9QWl0mEA8oyJcTWxHBxNVJ0grzEW0m1qo=
Subject key identifier: BE:8F:1D:7E:37:B2:70:1F:2F:B1:56:19:90:1A:16:1A:65:1F:A2:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A029
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E72901144A6C11EFBE20BD63762E951A.roa
Signing time: Thu 25 Jul 2024 10:01:47 +0000
ROA not before: Thu 25 Jul 2024 10:01:43 +0000
ROA not after: Sat 03 Aug 2024 10:01:43 +0000
asID: 7018
IP address blocks: 45.202.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41001 (0xa029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:01:43 2024 GMT
Not After : Aug 3 10:01:43 2024 GMT
Subject: CN=66a2228b-4e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:34:ce:72:85:e2:82:ab:9f:4f:5e:f1:5a:
1c:4e:78:7b:23:43:c0:da:4a:4a:d5:e6:63:5a:76:
72:7b:a0:5f:bf:48:79:6c:ca:e5:ec:57:3a:ab:0e:
e5:d6:5b:d3:cc:1d:e7:00:f8:fb:a7:d4:4b:39:02:
ec:d9:75:66:e7:48:2a:4f:8f:84:33:b0:51:66:e2:
5c:15:77:51:49:5b:a4:00:2b:51:5d:73:29:49:a4:
37:f4:c3:f5:b8:7e:34:20:63:88:27:9e:3f:ec:51:
8b:2b:f3:04:af:bd:9f:33:64:36:3f:87:21:b5:a4:
9f:52:17:e9:3b:93:c0:de:64:52:0c:76:0b:ad:a0:
9e:89:f0:aa:cd:7c:5a:65:48:7c:2c:39:22:30:f8:
d9:60:77:43:5d:3d:40:5c:73:89:76:66:28:cf:bf:
cf:71:55:cc:27:43:64:35:a7:7d:f5:a9:1a:75:26:
33:9f:eb:e7:c5:54:df:50:89:a9:d8:e8:f4:51:ac:
3a:f1:7d:36:4f:45:43:04:9c:ec:e4:5c:80:2c:45:
97:af:3d:be:a3:c0:82:3e:d5:62:c2:b3:8c:35:b3:
8e:2c:09:9f:58:d2:d5:a9:8f:95:36:d2:8e:43:c5:
30:b3:69:09:8e:ac:78:f0:52:c5:de:3f:77:7c:8c:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:1D:7E:37:B2:70:1F:2F:B1:56:19:90:1A:16:1A:65:1F:A2:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E72901144A6C11EFBE20BD63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
60:67:c4:cd:de:f9:6d:f8:af:03:36:dd:ec:79:d3:52:b6:8d:
e5:87:7a:39:52:92:09:cd:a2:0e:aa:2a:f9:fc:dc:0e:96:82:
6a:90:f7:4e:d8:b5:7a:b3:8a:12:5b:c8:81:eb:a1:00:49:b8:
3b:c6:13:f3:03:40:cf:cf:97:e5:2b:66:fa:9d:d9:57:ed:c7:
c6:91:3a:ea:0b:6a:e7:4f:3f:51:54:b6:f1:f7:4f:b6:70:5f:
48:9a:90:0a:fe:2b:77:bf:72:d6:39:61:f8:83:f5:67:3f:4f:
5b:44:5f:f5:00:3e:f2:31:7a:7f:25:c8:fe:cb:f4:f7:26:21:
ff:4b:70:17:91:e0:24:d9:6f:70:f5:9d:1a:1a:68:9b:19:8b:
00:f5:31:02:d8:b3:b9:61:e7:e6:4c:07:b2:b2:5b:ad:23:bc:
e3:47:35:b9:57:80:9e:97:49:14:7e:39:1e:29:be:cf:85:c7:
77:66:d8:b5:11:0f:a5:8e:2e:73:e9:89:84:4a:80:cc:ba:4a:
07:c2:e9:0f:f4:67:0f:25:17:20:e0:09:68:19:30:34:a9:a5:
7d:49:31:07:b3:93:b5:76:fa:01:c5:54:09:49:1c:01:a2:04:
a5:aa:64:27:43:24:c3:ac:26:d2:2e:58:97:f4:e8:44:1a:87:
4d:20:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org