Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75D44B83B9611EF9E2D9281762E951A.roa
File: E75D44B83B9611EF9E2D9281762E951A.roa (raw, json)
Hash identifier: GyNdjeHDiRgyz7/28/8gOt1zWpY8WJPyhsF4sthMiMQ=
Subject key identifier: 89:2B:1C:D7:48:BC:1E:7E:5E:78:7E:A7:25:1D:D2:7D:5F:34:07:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9938
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75D44B83B9611EF9E2D9281762E951A.roa
Signing time: Sat 06 Jul 2024 12:54:39 +0000
ROA not before: Sat 06 Jul 2024 12:54:35 +0000
ROA not after: Thu 08 Aug 2024 12:54:35 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39224 (0x9938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:54:35 2024 GMT
Not After : Aug 8 12:54:35 2024 GMT
Subject: CN=66893e8e-be74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:c1:fd:b4:e0:ff:63:0d:f5:3a:ef:3f:92:
d7:c0:ed:91:47:d0:0e:b8:22:58:f7:fa:09:8e:43:
5b:22:54:28:78:ba:c7:fc:22:36:12:72:ac:da:8e:
dc:75:8a:e5:1a:a0:46:f9:b0:15:94:2c:d6:c9:e4:
0d:5e:5d:55:77:f0:a4:75:97:be:74:c2:e5:d2:4b:
eb:c7:89:75:dd:c8:da:a7:59:52:b4:6a:d4:86:38:
2d:61:1a:e1:6a:f3:25:e7:12:22:57:74:ba:a6:33:
a3:e4:0a:da:09:57:dd:9d:66:ac:fc:52:24:66:0a:
68:48:d0:3e:bd:ae:50:e7:40:4c:f0:0d:14:33:ec:
f6:8e:12:27:2a:f0:f5:bd:0e:0e:6a:2f:7e:e1:5a:
d4:96:ef:cd:ae:24:7f:f8:e6:4e:f8:48:a6:17:c6:
f3:c7:fa:f3:af:ad:19:93:7d:58:ed:b9:40:6f:ff:
91:b0:2a:9d:f5:04:1b:76:e5:86:61:f0:59:d6:c9:
a6:2b:0b:8a:b6:72:6b:bc:57:a9:fe:58:16:03:47:
c1:94:bc:7f:0a:5b:6d:f0:d8:86:25:4e:5f:7e:4a:
90:fe:86:0b:33:3c:81:d3:3f:e9:86:33:58:00:69:
3e:74:9a:83:24:f4:40:62:15:6f:db:e0:97:c5:05:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:1C:D7:48:BC:1E:7E:5E:78:7E:A7:25:1D:D2:7D:5F:34:07:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75D44B83B9611EF9E2D9281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:21:37:df:a6:6c:42:d2:d4:12:7e:f2:12:f7:48:6c:0a:15:
c0:1b:c2:c5:9d:86:8f:e1:fe:80:1c:b2:45:32:18:d7:97:69:
48:8b:d4:54:97:f2:a2:6d:63:97:b3:8f:0c:f9:eb:53:0a:9d:
72:b2:e9:d9:2a:75:74:ef:c5:90:cc:e4:ff:8f:0f:8f:ac:f4:
97:ed:64:f6:4f:de:4d:20:4f:31:d0:af:a4:a7:e3:c8:21:1c:
78:b2:31:b4:08:35:5a:00:be:b8:e5:22:66:91:b8:a3:4f:10:
c0:22:23:6b:a8:23:25:a0:62:66:e5:a8:01:8b:60:54:21:63:
5f:85:6f:8e:62:ae:d2:74:69:58:82:d0:3f:80:e8:98:77:7c:
5b:22:dc:0b:9f:d5:d4:89:9e:64:6a:1d:cc:67:b3:bd:d7:a5:
f7:97:28:57:58:ff:95:e9:d3:f9:1d:0f:c2:22:78:90:aa:d3:
93:1f:d4:32:bb:b4:52:ee:a3:31:d1:e8:e1:62:99:9f:e0:d0:
0a:49:5b:1d:40:0a:b0:e8:f2:77:fc:61:99:2d:45:2a:0f:b5:
1e:f5:c9:b8:77:aa:a5:4d:3c:cf:14:2d:2e:54:b5:bc:ca:90:
a3:5f:fe:38:34:ef:54:ac:b1:48:16:5d:09:74:2a:7b:88:da:
b7:d5:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 02:43:40 2024 by rpki-client on console-fra.rpki-client.org