Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22409ADC039111EFAC2246F8007001B1.roa
File: 22409ADC039111EFAC2246F8007001B1.roa (raw, json)
Hash identifier: JACmDoqMuhcRyLBQXztRnz9at/a0KvApcQBkW50tm1M=
Subject key identifier: 61:43:5A:9F:8F:85:9F:92:B6:E6:FF:54:8D:A2:5A:E6:E7:A8:21:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8617
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22409ADC039111EFAC2246F8007001B1.roa
Signing time: Fri 26 Apr 2024 05:52:15 +0000
ROA not before: Fri 26 Apr 2024 05:52:12 +0000
ROA not after: Sun 05 May 2024 05:52:12 +0000
asID: 139646
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34327 (0x8617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:52:12 2024 GMT
Not After : May 5 05:52:12 2024 GMT
Subject: CN=662b410f-a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:be:e0:b9:ab:0d:bd:fd:9b:57:3e:64:10:
7e:3e:cc:50:f0:64:c4:f3:69:67:ec:b0:d0:33:e0:
6f:2b:40:6a:6c:5a:ea:c1:e3:4b:12:5f:04:ea:b1:
dc:58:1d:89:39:f4:e5:a6:89:5c:31:c0:eb:b5:2a:
d1:be:7c:a0:26:87:52:c8:4d:c9:b1:15:3b:33:b0:
c8:e7:df:6f:af:b9:a6:53:06:a3:6f:0e:65:34:7a:
a0:78:11:1b:20:d2:ac:08:dc:88:9e:09:2d:1f:e7:
50:18:5c:04:92:09:32:97:f6:80:c3:b1:08:90:9f:
4b:ac:18:64:01:7a:d7:6a:18:71:5d:15:53:23:74:
d4:9b:96:b6:dd:fd:a9:18:9d:a0:0d:90:15:8f:50:
30:c1:8e:7a:09:e5:cb:43:4e:ee:40:d9:4d:1d:e4:
26:8a:8d:0c:20:45:6a:8e:90:39:41:ec:ee:5b:f4:
a7:3a:ff:5d:40:4c:82:cf:f3:20:d4:14:e6:38:96:
96:c2:12:29:01:18:f6:52:b9:a4:07:f1:d4:e6:2e:
1f:74:f8:33:72:ef:a6:18:42:68:39:71:44:43:47:
19:24:32:3d:a0:af:ec:b6:b0:da:8d:00:55:92:4e:
2b:5c:06:3e:ce:73:54:50:a5:e1:22:f6:bb:e8:fc:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:5A:9F:8F:85:9F:92:B6:E6:FF:54:8D:A2:5A:E6:E7:A8:21:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22409ADC039111EFAC2246F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:17:79:e3:7c:bc:60:76:7b:f3:1d:cc:cd:12:d3:56:1d:
a3:4d:87:60:d6:04:92:f7:b4:09:3f:08:62:1d:25:17:fa:5e:
41:6d:ad:5a:e4:58:13:db:e0:6c:56:5e:00:b6:26:ed:8c:31:
61:b2:f2:74:7e:dd:8a:70:63:9b:16:87:d5:8f:d3:81:18:6e:
e8:58:f8:90:ec:af:19:0e:d2:a7:a1:b6:92:d1:f2:49:03:10:
34:23:3c:a7:13:18:e0:3d:4c:fa:97:64:57:82:4c:be:16:b5:
42:b8:e0:1f:1d:ff:95:95:1d:8d:7f:a9:d3:36:8a:42:ea:c7:
83:a1:b4:45:97:88:7c:c3:8d:07:6b:a1:53:74:6a:5b:85:13:
34:1b:55:60:51:e7:e7:29:44:6e:f1:e1:b1:b6:cd:5b:27:14:
0e:f4:f0:6a:33:1a:fd:ab:2f:9f:4d:ad:ea:1c:50:86:09:4f:
ee:c7:04:6e:7e:51:9e:38:49:43:e2:ad:1b:2a:5c:48:3d:df:
48:a8:36:16:82:de:a0:d4:29:1f:bc:56:5b:ac:41:1c:48:04:
71:91:20:a9:20:ee:4d:06:1b:ea:db:96:25:91:06:c9:09:d2:
49:00:26:d8:1f:29:6d:31:9e:48:f8:27:96:d1:90:bf:7d:ae:
e6:13:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org