Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF047E6F48911ED9DA0CC3D4AD9E6FC.roa
File: 4BF047E6F48911ED9DA0CC3D4AD9E6FC.roa (raw, json)
Hash identifier: JYmGYUpDoPohUhMlonxJUT2VlCO1lf9IshZarIoxLSM=
Subject key identifier: 5D:53:02:52:5F:53:B3:5D:E1:8E:9B:91:55:8E:F5:2F:52:76:AF:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2528
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF047E6F48911ED9DA0CC3D4AD9E6FC.roa
Signing time: Wed 17 May 2023 08:03:24 +0000
ROA not before: Wed 24 May 2023 08:03:20 +0000
ROA not after: Sun 05 May 2024 08:03:20 +0000
asID: 137510
IP address blocks: 45.204.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9512 (0x2528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:03:20 2023 GMT
Not After : May 5 08:03:20 2024 GMT
Subject: CN=64648a4c-619d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:c9:db:83:fe:04:23:d7:11:f9:90:ed:89:
89:35:a2:87:4e:f4:ba:13:30:69:e3:b1:ca:a6:0a:
dd:8c:6a:ff:4b:43:bb:c7:59:82:3e:20:d0:91:bd:
ae:7b:be:f9:13:e9:53:8a:ec:73:fa:0c:4a:53:ac:
6c:d7:2f:21:d9:e2:31:30:b2:3d:d9:4f:81:5e:c4:
3b:4f:2f:7a:7c:a0:c6:ab:01:db:7c:6d:35:6c:7c:
77:0f:b6:a7:64:0f:33:44:50:d7:bf:f5:57:fb:fb:
94:74:eb:dd:5f:1d:e4:b3:ef:ad:0d:e9:9c:be:89:
cd:6a:ee:d1:59:c3:8f:af:95:b1:05:ab:d2:d6:55:
ea:ce:7b:65:c4:9c:77:71:21:18:de:2b:ec:6c:fe:
16:ff:8f:85:ba:9d:4a:f0:19:8c:39:70:47:ee:22:
30:d3:a4:46:9d:d8:71:c5:e6:72:89:40:55:ae:be:
50:84:2d:ee:90:54:6c:67:a2:bd:be:ed:87:3d:64:
38:d6:17:59:bd:e2:61:92:2e:0a:63:d2:41:01:93:
76:2d:86:04:ad:c7:8d:1e:78:83:8d:06:b2:89:d7:
01:7b:1d:4e:16:8d:37:d3:79:49:30:17:6a:8a:60:
2d:f0:8c:20:65:cf:ef:f8:1f:a9:a9:17:08:4d:59:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:02:52:5F:53:B3:5D:E1:8E:9B:91:55:8E:F5:2F:52:76:AF:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF047E6F48911ED9DA0CC3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6e:15:f0:5b:99:dc:41:ca:79:0b:a5:d2:3e:ec:53:44:e3:
98:f7:90:81:10:fb:a9:69:02:a5:36:bb:c5:c0:30:e4:3c:33:
41:37:f3:39:55:b9:94:b3:27:57:4b:85:f5:2a:4f:e7:0d:29:
ce:32:ed:56:47:38:e5:40:c4:c0:37:48:df:c4:4b:a9:94:a6:
b9:95:99:ab:51:8e:01:17:5a:d8:82:fe:f2:03:ac:5a:e9:93:
03:34:72:36:9f:37:3f:61:87:19:5a:bc:35:14:3a:8a:da:90:
9e:e1:c1:80:73:7f:98:a2:5a:4b:83:42:0e:3e:01:c2:b2:76:
25:71:f8:35:3d:6d:bb:56:75:71:13:2d:a2:f2:1c:e8:30:38:
0f:46:8d:9b:4d:d2:ec:ea:4b:c7:21:d3:05:4b:35:ac:43:69:
15:58:24:b7:a2:0d:7f:d0:67:46:85:b2:f2:98:9d:1c:56:9f:
68:13:37:05:de:12:4e:4c:e8:c8:2c:cf:bc:bb:1d:8b:e5:b1:
8a:93:d8:8b:e9:97:b6:67:7a:a5:07:37:c4:84:fd:5b:59:16:
73:cd:3a:40:df:d4:56:75:5a:b5:02:97:68:90:3d:a9:6a:f1:
ff:73:5d:8e:d8:91:a3:80:bd:ba:bf:07:f0:06:95:3f:66:9e:
b2:cc:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org