Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98FA8EC49AC11EFB1C36349762E951A.roa
File: E98FA8EC49AC11EFB1C36349762E951A.roa (raw, json)
Hash identifier: JNfttsEteGj4J5XdjL9fY9jWtqlKaxODBAvaij/XfoI=
Subject key identifier: AB:41:49:56:CA:31:50:2D:C8:D8:AF:BA:70:23:8B:D9:05:2F:9B:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98FA8EC49AC11EFB1C36349762E951A.roa
Signing time: Wed 24 Jul 2024 11:07:27 +0000
ROA not before: Wed 24 Jul 2024 11:07:24 +0000
ROA not after: Sat 03 Aug 2024 11:07:24 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40793 (0x9f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:07:24 2024 GMT
Not After : Aug 3 11:07:24 2024 GMT
Subject: CN=66a0e06f-aa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:af:3f:c6:11:0a:8e:9a:ab:2c:80:9b:ef:
10:02:32:e1:e5:ca:0d:3a:17:9b:02:29:00:6f:47:
7a:89:38:61:82:23:b0:39:fa:5a:00:35:fe:85:06:
f3:9c:97:8b:10:b9:77:1b:1b:9c:1b:41:51:5c:06:
39:1f:6f:48:ae:e3:af:a8:b4:61:3b:ac:60:c9:28:
c4:ed:bf:aa:af:cd:93:d5:a6:0b:35:4b:8f:ce:c3:
22:82:cd:75:bc:da:44:c9:d8:2f:c0:cf:a8:a8:0d:
9d:41:05:ca:4c:e7:c5:4d:ae:54:d6:3a:41:03:aa:
97:f5:a0:ec:6e:f6:13:34:bd:20:e4:c7:70:25:0d:
d2:f8:40:22:ca:f9:4f:7e:28:74:6c:94:27:8c:8d:
43:b6:5c:e0:17:22:dc:06:0f:5e:9b:22:db:e0:dd:
56:7b:2e:72:81:2e:e6:04:bb:97:26:7c:2b:ee:fc:
a3:8b:a6:91:23:19:c0:31:e2:2f:60:22:e6:d7:37:
92:b0:fe:f0:ad:cf:62:9d:d8:b8:bc:07:d7:0e:c8:
07:ad:e9:da:0e:95:e0:ac:06:59:1b:11:74:64:c2:
d9:0c:ff:44:37:d2:71:a5:de:98:27:c0:10:1d:ab:
72:26:15:68:85:8b:88:4c:40:8c:ab:8c:64:83:fd:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:49:56:CA:31:50:2D:C8:D8:AF:BA:70:23:8B:D9:05:2F:9B:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98FA8EC49AC11EFB1C36349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
26:39:7c:57:e8:28:45:e8:21:b1:32:31:a9:bb:43:3d:1c:13:
c3:20:ed:7c:e1:94:73:52:a0:5e:07:f0:cd:8b:d7:b2:d4:a1:
6e:c3:6d:6e:55:0b:94:d1:0f:83:51:f2:f6:ed:9b:d0:0b:0a:
6d:c8:f3:0b:2d:65:d5:e4:3e:15:ff:af:a8:d3:45:df:0d:23:
b2:75:2d:c0:cb:ba:50:65:d3:27:1a:1e:e5:eb:3e:3a:57:bc:
04:25:25:4a:58:aa:e5:8e:38:40:9f:06:88:e3:78:59:da:7d:
ec:bb:9d:f9:40:0e:f9:e8:48:f6:d4:12:40:59:54:61:62:0a:
1d:a8:54:2f:b0:d4:4d:f7:09:fd:3e:1c:e8:6c:ab:8f:90:61:
3f:57:22:4d:b6:93:da:c9:ac:d7:70:93:35:77:e0:7a:49:ab:
7d:39:c0:e6:17:8e:a4:3d:ef:df:45:9e:05:42:35:08:e5:7d:
57:3d:bd:0b:86:48:ac:f2:de:5f:e3:51:df:6b:bd:f4:e3:05:
7d:8b:81:e9:7d:88:bb:72:02:16:d4:b8:68:27:3c:1f:91:08:
03:b1:30:4d:d0:06:85:f7:1e:d2:2d:f3:6b:9a:d5:f7:6b:2f:
66:67:8b:46:ae:59:e0:ce:b8:10:19:cd:96:aa:80:bc:b1:18:
58:63:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org