Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB997B580F3311EF9E5E3345017001B1.roa
File: EB997B580F3311EF9E5E3345017001B1.roa (raw, json)
Hash identifier: LzLMuysIJlXJlYX3rY7ufRJWp2VnQU9DaUjVDqRuEq0=
Subject key identifier: 53:71:F1:93:B5:F9:2C:C3:56:02:1B:89:80:51:2F:9C:58:A1:B7:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 89AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB997B580F3311EF9E5E3345017001B1.roa
Signing time: Sat 11 May 2024 01:15:14 +0000
ROA not before: Sat 11 May 2024 01:15:11 +0000
ROA not after: Thu 23 May 2024 01:15:11 +0000
asID: 44559
IP address blocks: 45.197.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35247 (0x89af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 01:15:11 2024 GMT
Not After : May 23 01:15:11 2024 GMT
Subject: CN=663ec6a2-0fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:e4:ce:88:9c:bd:b2:9c:cc:25:06:32:71:
7d:f8:54:ff:fe:c4:d1:6f:e3:70:93:23:70:99:36:
76:3d:d5:ac:22:d6:56:c1:93:6e:40:6c:71:11:e0:
45:84:dc:7e:b1:e0:19:44:4e:bf:e8:df:90:1b:14:
8d:d6:f4:2d:7e:ec:07:27:1d:9c:36:dd:32:44:03:
5a:e5:c3:5a:63:32:11:e1:27:b4:28:7e:09:8f:0b:
b1:6c:01:65:5b:40:69:41:97:98:b8:46:09:12:8b:
be:9d:0c:67:39:38:e1:7d:5e:7b:da:5e:ee:2d:fc:
63:6f:68:80:cd:72:9d:dd:10:0b:b4:f8:6e:7f:c9:
7e:24:f5:c2:ee:19:11:9a:e4:b9:e0:ea:ce:c5:2d:
a2:cc:97:c3:e4:e8:c1:22:32:85:17:79:01:28:58:
8f:04:35:e2:72:9f:85:ac:f5:ca:aa:ba:1b:21:dc:
f7:f6:53:4c:78:8b:7b:85:76:8d:c7:a7:ed:dd:da:
c9:4e:13:62:cd:ca:f4:bc:d0:32:4a:a3:1d:6c:10:
11:b5:84:91:cf:8d:af:f2:96:2e:64:7c:7f:7c:12:
8b:f7:b3:a5:66:31:75:79:a0:99:4f:ce:52:b9:73:
ba:4c:b4:07:56:31:b7:64:c2:bc:75:30:24:3a:fe:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:F1:93:B5:F9:2C:C3:56:02:1B:89:80:51:2F:9C:58:A1:B7:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB997B580F3311EF9E5E3345017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:21:f3:18:08:98:9f:e1:b9:e1:d9:75:a3:ff:21:f4:13:66:
b7:d1:8f:7d:e6:6e:fa:0e:7d:0d:d5:f5:e9:b4:66:b9:72:f5:
e0:a8:02:c2:3d:49:aa:61:60:3f:21:ac:41:9c:50:82:5b:ba:
19:40:ba:fb:ad:ab:5b:76:00:27:14:63:2e:a7:94:a8:4b:1b:
d8:35:40:3c:02:98:79:00:83:18:90:fa:3a:9c:1f:77:b9:d6:
8c:34:b4:e7:bc:57:86:7e:d4:98:5d:2f:a1:ad:b0:7f:74:bb:
4d:3d:23:22:4b:22:02:c5:af:f1:83:c5:c0:01:9b:3b:28:21:
04:a7:ff:22:1f:01:c7:c3:39:e8:ba:9b:92:e9:3f:11:e3:7b:
0b:6e:45:8a:cc:57:33:ea:32:c2:b5:12:51:ca:c8:b9:cb:5d:
86:0d:0b:22:0f:82:98:50:97:51:99:28:17:c2:08:2e:8f:5f:
3a:e0:96:b6:85:9c:dc:3d:1e:a9:cd:de:c6:58:2e:15:2e:8e:
a2:ac:b1:47:33:ff:e3:03:ec:64:c3:c0:32:1e:3f:8f:b7:72:
55:77:c0:24:d2:9c:fc:85:87:e0:1e:1f:83:74:fa:3b:51:39:
2c:f7:be:37:1c:31:6e:97:31:3b:d8:bf:77:ec:a1:ee:bc:50:
dd:06:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:16 2024 by rpki-client on console-ams.rpki-client.org