Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEEBCE05F111EF92375F5A017001B1.roa
File: 05EEEBCE05F111EF92375F5A017001B1.roa (raw, json)
Hash identifier: gujxTzVbqlmGWknxfeq8pkQrujAn+xFzYzEY/b9N0Ug=
Subject key identifier: DE:D3:EE:A4:08:B3:AF:21:2C:C1:F5:4E:52:D7:4C:09:D8:78:0A:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 868E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEEBCE05F111EF92375F5A017001B1.roa
Signing time: Mon 29 Apr 2024 06:23:42 +0000
ROA not before: Mon 29 Apr 2024 06:23:38 +0000
ROA not after: Wed 08 May 2024 06:23:38 +0000
asID: 140224
IP address blocks: 45.194.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34446 (0x868e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:23:38 2024 GMT
Not After : May 8 06:23:38 2024 GMT
Subject: CN=662f3cee-abb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:c4:d8:22:38:bb:99:01:19:2c:88:40:ea:
29:ad:c6:62:f7:69:21:93:1b:7c:0b:28:d5:9d:b2:
51:58:2d:28:9c:e3:bc:61:7d:86:26:3b:68:e8:d3:
9e:ce:5c:70:32:11:73:f9:ab:4b:57:c7:93:8b:79:
11:20:7d:e2:b1:c6:05:fc:67:9b:6d:83:9e:7c:13:
4a:81:a4:e6:e2:09:b6:72:da:98:9e:6d:4f:c5:66:
69:de:e4:1e:e7:3c:2d:d2:44:30:bf:ff:3d:52:5e:
4d:2c:54:da:5a:bc:bc:1c:d2:1e:36:d1:13:52:99:
4e:68:f8:0b:3f:02:93:21:04:1d:b3:da:64:b1:cc:
15:94:51:d5:f8:5a:47:ec:60:0f:8f:f8:49:bd:51:
1a:58:3f:13:64:4d:7f:ff:48:2f:5f:8f:d1:bd:46:
17:76:88:db:08:68:5a:88:b7:d9:36:26:09:4e:3b:
cf:eb:2e:97:c6:f3:cb:1a:87:ed:6b:4a:a2:dd:19:
4e:6b:1d:06:19:b0:c8:3b:2c:21:e9:ec:c4:5f:db:
89:98:38:0b:2d:a8:39:35:e9:c0:b0:98:70:fe:c4:
12:48:72:8b:af:6e:5d:13:8d:b1:86:d4:3f:0e:44:
5c:08:2b:6e:b6:d1:c6:4e:7f:f0:79:0c:46:2d:c2:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:EE:A4:08:B3:AF:21:2C:C1:F5:4E:52:D7:4C:09:D8:78:0A:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEEBCE05F111EF92375F5A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:59:00:eb:04:4c:4b:aa:0d:4c:61:58:55:2e:ed:13:bd:1c:
69:75:ec:cc:56:74:ab:7c:3d:88:f6:29:41:9a:09:91:b9:7f:
be:3b:86:36:29:41:11:50:d5:fa:c2:da:e1:8a:ff:28:c7:45:
b8:77:f2:0b:00:c8:08:ba:da:09:f5:91:f4:58:a2:02:bd:7f:
b1:31:e8:7d:e7:75:39:45:04:80:e9:26:58:f9:ee:9e:4f:c4:
ff:5e:f1:a1:d1:32:32:23:7f:b5:59:64:6f:a7:11:47:e2:4a:
b9:22:5b:24:0a:a8:e7:24:b3:b4:9e:97:a9:91:27:40:65:36:
3a:eb:31:46:2c:44:e0:21:bc:07:f1:59:89:5c:87:02:17:6f:
e4:03:88:83:38:2b:10:c4:2e:67:53:cb:4c:ef:8f:0e:9a:68:
2b:44:8b:da:69:b9:fd:8c:60:c4:25:df:24:03:ca:b2:1e:71:
95:92:4e:23:26:bb:85:de:b0:bf:9d:2c:dd:07:49:1e:03:fd:
af:d9:88:37:44:e4:c4:c6:4e:a4:86:fb:07:31:d8:a3:f3:70:
7a:4a:96:8f:8f:2b:d0:75:b7:c6:ae:1c:9a:e8:9e:a0:27:51:
c6:0a:f9:f0:52:03:cd:37:08:bd:a9:dd:cc:dd:47:59:20:72:
1e:8b:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:55:01 2024 by rpki-client on console-ams.rpki-client.org