Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60E1663F5211EF91A3E7BB762E951A.roa
File: ED60E1663F5211EF91A3E7BB762E951A.roa (raw, json)
Hash identifier: txUTptNA9nR6jLStnLt55snMjgdkiOY/PA/Yl1KvzYM=
Subject key identifier: C5:2F:EB:D1:48:77:57:03:7C:F6:94:A1:52:CF:69:5B:DA:AB:87:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60E1663F5211EF91A3E7BB762E951A.roa
Signing time: Thu 11 Jul 2024 06:58:07 +0000
ROA not before: Thu 11 Jul 2024 06:58:04 +0000
ROA not after: Tue 13 Aug 2024 06:58:04 +0000
asID: 23470
IP address blocks: 45.194.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39808 (0x9b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 06:58:04 2024 GMT
Not After : Aug 13 06:58:04 2024 GMT
Subject: CN=668f827f-1be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:25:c1:a0:4c:ef:06:ba:48:2d:1c:d2:70:
10:69:0f:d6:f2:20:9f:f4:95:82:e5:c3:f8:de:dc:
66:f4:84:d0:34:9e:c9:9e:d5:5c:a3:52:6b:9d:63:
25:16:fe:4c:ce:03:f1:0b:02:f1:62:b6:52:30:62:
20:4c:b7:78:d4:f0:56:6a:2d:cc:65:bc:6e:8e:3f:
cb:3c:d4:ce:fe:af:2d:07:4a:5d:3a:d9:dd:9b:b0:
9e:15:8d:74:b0:45:c5:c1:b1:39:17:3d:30:59:56:
d0:8c:2d:7b:f7:47:a6:72:7c:5b:8a:84:07:0b:9f:
fa:ed:26:49:d7:55:c6:ff:b0:80:85:cb:75:60:3f:
97:ed:3f:8f:f3:48:35:08:22:0c:9e:94:44:0f:b5:
c7:7e:ea:d5:af:5e:ad:3e:bf:d0:f3:03:ac:9b:dd:
21:98:62:d4:e2:be:08:85:c5:a1:39:50:f9:c7:26:
1c:92:ca:ce:df:4c:35:59:43:87:8a:71:82:70:12:
41:11:bd:6f:42:c0:7c:a0:1b:1c:b2:53:d5:0c:fd:
43:e4:b4:1f:56:af:70:60:0f:c5:32:7c:f4:eb:5f:
71:ce:58:3e:30:32:f0:5d:90:70:ab:15:25:fa:c7:
e5:41:6c:9b:70:47:c0:2d:63:3d:e3:7a:f7:a4:bc:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:EB:D1:48:77:57:03:7C:F6:94:A1:52:CF:69:5B:DA:AB:87:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60E1663F5211EF91A3E7BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
72:59:b6:d2:04:da:64:0a:bc:9d:81:ed:27:74:b4:20:4c:81:
23:36:83:8a:4c:7d:8a:bb:b3:aa:52:22:f0:8a:e0:8b:dd:f4:
21:04:63:07:1c:70:d1:a1:14:98:42:2d:37:4d:be:ee:c1:54:
91:e1:ab:14:30:28:11:65:42:aa:37:c0:8a:b7:56:f8:f7:e2:
09:04:53:97:36:06:d8:b2:5b:e8:71:57:b2:fe:f5:e0:d0:66:
de:83:c6:fe:74:eb:3e:d4:5b:7a:4d:d7:da:61:fc:7d:fc:9a:
23:ce:85:9a:88:8f:20:9d:53:4c:9a:09:1a:3d:f8:cf:7f:03:
37:8a:cb:42:98:13:58:58:f8:18:87:4b:15:91:18:ce:b1:34:
86:1d:2d:8e:64:7e:0a:bb:ac:c6:93:b7:ba:7b:90:75:7b:fc:
9e:30:da:42:2d:4b:d9:aa:e0:7e:12:10:ac:3f:71:2a:08:f3:
6b:21:6e:e7:14:95:69:3e:1f:07:fc:40:3e:61:be:28:1f:0c:
d7:e2:54:32:01:eb:fb:c9:98:bf:c6:c9:c4:d3:3d:79:c2:05:
d7:bf:49:a9:56:d7:d8:a2:98:22:4a:90:43:7b:92:84:72:73:
de:16:be:7c:ca:36:f2:b1:eb:df:20:21:ac:f3:e9:7e:81:d3:
4d:86:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:22:17 2024 by rpki-client on console-fra.rpki-client.org