Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22FF196E06D711EF86F3BD29017001B1.roa
File: 22FF196E06D711EF86F3BD29017001B1.roa (raw, json)
Hash identifier: C/tZfn31kUKMBpJeTCeUICGMMWrz+EVo4dCMn0/l1s4=
Subject key identifier: A1:59:E0:73:E0:9F:16:B7:62:49:C1:59:8A:19:CF:8B:73:2F:5D:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22FF196E06D711EF86F3BD29017001B1.roa
Signing time: Tue 30 Apr 2024 09:50:55 +0000
ROA not before: Tue 30 Apr 2024 09:50:51 +0000
ROA not after: Tue 07 May 2024 09:50:51 +0000
asID: 136778
IP address blocks: 45.204.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34529 (0x86e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:50:51 2024 GMT
Not After : May 7 09:50:51 2024 GMT
Subject: CN=6630beff-fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:65:fa:9e:50:21:c8:f5:74:fd:06:91:9a:
62:a8:de:ff:2e:a9:59:46:22:6a:3b:c3:56:6c:33:
de:3e:2a:ed:01:e2:54:16:b1:a8:2f:68:68:5f:10:
ba:23:74:bb:68:30:fb:25:4b:f3:b8:de:8f:ed:8f:
c2:e6:97:fc:40:ea:28:5b:a7:c0:94:65:ef:5f:35:
a8:f7:a0:bb:4e:39:9a:d8:c6:2f:31:3e:f2:16:01:
04:b9:df:76:15:78:0a:48:1b:96:21:a2:91:b0:bc:
1d:88:d4:8c:bc:96:58:c8:06:1a:a7:dd:33:4b:72:
12:ad:7d:4f:4e:76:88:3f:f5:05:e2:0e:6f:09:fb:
91:3c:ea:fc:54:7b:82:de:4a:7d:2e:ee:0f:80:e9:
c6:31:60:89:9f:75:25:02:35:4e:e3:03:94:db:8d:
58:50:32:ca:c9:0c:33:2b:46:24:3f:e3:4b:20:5a:
82:eb:8f:f5:59:b4:2b:dc:04:ee:28:2c:c4:43:a5:
5b:ea:6b:8b:f4:b2:a2:b8:4a:f5:7d:bc:78:64:95:
5e:83:93:28:b0:3f:34:5c:eb:09:86:9d:4e:4e:97:
28:78:81:d2:a7:90:08:6f:91:8a:2c:08:cb:23:a7:
99:77:2b:35:01:89:b5:e8:73:bf:c0:53:bc:fa:b6:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:59:E0:73:E0:9F:16:B7:62:49:C1:59:8A:19:CF:8B:73:2F:5D:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22FF196E06D711EF86F3BD29017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:35:8a:98:c7:e6:c3:db:5a:13:42:0b:43:a7:01:91:24:be:
c3:e7:02:00:d1:bc:38:fe:d4:04:9c:d9:ae:d0:21:78:a4:a6:
e1:b3:77:a0:00:9a:b5:e2:6b:c4:f8:6f:f1:2a:7f:b4:f9:d1:
c6:a3:18:b4:0f:92:1b:d1:4c:b6:b6:85:a2:5a:6b:4d:bb:76:
61:40:a9:bf:ce:8d:bd:ab:16:51:39:cd:3b:00:29:c7:3b:c0:
8c:d6:6d:93:bd:2a:91:2e:7f:8d:da:aa:f6:67:80:85:04:f2:
15:fd:fd:24:35:ff:08:62:cb:c0:08:4b:a9:92:d3:ad:09:b6:
3b:21:ab:3a:58:b7:2c:81:a2:39:ca:02:7b:53:59:22:05:57:
2c:fb:91:dd:a4:25:1d:1c:e2:bc:3b:de:e4:21:04:6e:30:bc:
10:65:d3:1f:a7:4e:a5:f1:76:7e:dc:51:e4:81:7a:38:62:21:
57:57:fe:f7:8e:30:7d:75:b2:00:27:bd:45:3f:c7:e6:bb:eb:
06:bf:9a:c7:0d:13:39:6c:5d:ec:db:61:f2:ca:c6:7f:98:56:
72:4e:71:3a:d2:83:ab:06:ab:bd:2d:2d:6f:d8:11:12:62:7b:
b7:d1:67:84:84:36:ca:92:fe:e4:97:6e:53:bd:f5:36:98:56:
b9:d8:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org