Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4F2C9047DB11EFA18F0575762E951A.roa
File: EE4F2C9047DB11EFA18F0575762E951A.roa (raw, json)
Hash identifier: hZls3aWLnJlu/PlyDwKPPKV8CN63RWrUs0bULI+Opd0=
Subject key identifier: A9:17:3D:2A:FC:78:22:AC:5A:76:E9:CC:8D:28:5D:C9:70:1F:09:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4F2C9047DB11EFA18F0575762E951A.roa
Signing time: Mon 22 Jul 2024 03:38:59 +0000
ROA not before: Mon 22 Jul 2024 03:38:56 +0000
ROA not after: Fri 23 Aug 2024 03:38:56 +0000
asID: 48031
IP address blocks: 45.200.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40439 (0x9df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:38:56 2024 GMT
Not After : Aug 23 03:38:56 2024 GMT
Subject: CN=669dd453-421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:c3:a8:53:91:2f:ea:09:43:55:36:54:4e:
d8:8c:d4:36:72:2f:e8:53:7d:f5:24:23:1a:86:73:
bf:1a:0c:1d:49:36:10:3a:c4:71:95:b8:a3:3e:f7:
d5:56:3c:1b:88:f0:e2:84:60:0d:f2:9f:79:de:4f:
fd:d4:e3:5d:a2:96:84:cc:4c:bc:15:3e:f4:f8:12:
d3:46:4d:4c:4c:c9:56:90:b1:53:bc:67:d7:b2:9a:
fb:09:10:1e:81:57:dc:7d:92:e1:4c:5c:20:e4:e8:
27:a1:a2:f0:f1:c5:57:1c:60:76:d7:b6:69:ac:0d:
bc:b8:49:bd:df:f1:d5:a4:33:33:f2:2f:58:93:f5:
65:f3:82:75:36:c8:4a:8a:ff:e6:cd:80:58:02:44:
9e:2b:b3:2d:9f:fd:88:ee:2c:48:0c:53:fe:aa:c8:
f6:68:b2:e1:55:a1:9e:a4:52:f9:e3:a8:41:92:a8:
23:67:c3:3a:cb:58:87:df:94:55:73:8d:87:c8:3a:
f4:c1:c4:39:09:ef:eb:3a:51:39:58:d3:2f:fa:06:
60:19:af:b7:88:2b:c8:88:37:ef:2e:d2:24:d8:e4:
3c:bf:c2:d3:be:8d:0b:7b:f3:f4:f3:dd:b0:7f:90:
f3:ab:7e:03:74:c8:9a:e7:ac:b2:49:8c:4b:a6:60:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:3D:2A:FC:78:22:AC:5A:76:E9:CC:8D:28:5D:C9:70:1F:09:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE4F2C9047DB11EFA18F0575762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2b:9c:ee:bd:e8:86:9e:2c:06:88:8b:74:24:4c:e5:2d:40:
bb:3f:ff:7b:41:2f:3c:d0:f5:f9:03:d3:ef:db:52:94:9f:93:
78:7b:18:9b:47:d7:e2:c4:e0:f8:e4:6c:2c:b1:8c:5d:3c:1e:
92:f3:c9:0e:6b:87:02:f3:1d:dd:44:aa:7d:96:59:50:65:47:
29:c2:64:09:77:3b:cc:0e:61:87:ed:79:d9:68:54:f4:01:d3:
c9:ed:3e:fd:26:c3:f8:45:83:bd:b3:df:8d:b1:ce:0f:4f:8e:
20:fe:45:2e:84:4b:fb:0f:40:46:72:a9:82:f9:9d:4b:00:7e:
ef:39:d8:74:e7:53:19:51:38:d6:f5:d4:65:16:4d:f2:45:7e:
25:13:f9:90:95:b2:b4:20:be:5d:1f:57:89:cf:c7:10:eb:c4:
77:89:d0:e8:0b:4d:ba:59:cb:96:eb:d5:63:26:db:f9:22:6d:
fe:d0:0b:5e:7d:4c:a6:a9:de:17:5d:b4:87:b6:73:c2:81:fd:
e3:1d:ba:14:21:7b:78:e7:09:cf:d5:b7:70:89:fb:38:6e:fb:
de:f9:60:c1:a8:bf:65:e7:ce:2c:f6:7a:69:b5:e0:e0:1c:4d:
07:09:ea:1d:e9:ea:09:fb:85:ee:52:21:65:28:ae:81:83:7f:
21:8b:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:49 2024 by rpki-client on console-fra.rpki-client.org