Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642AC74007A811EFBBAD7F50017001B1.roa
File: 642AC74007A811EFBBAD7F50017001B1.roa (raw, json)
Hash identifier: rE+AbeA3DMUTL57PVAYpoxwGAkgMk+Zvex4IaZVu0MQ=
Subject key identifier: 15:1F:2C:87:3D:4E:CF:FE:79:4E:D6:AA:73:E3:1D:0B:43:45:BB:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8712
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642AC74007A811EFBBAD7F50017001B1.roa
Signing time: Wed 01 May 2024 10:48:49 +0000
ROA not before: Wed 01 May 2024 10:48:46 +0000
ROA not after: Sat 11 May 2024 10:48:46 +0000
asID: 136950
IP address blocks: 45.195.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34578 (0x8712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:48:46 2024 GMT
Not After : May 11 10:48:46 2024 GMT
Subject: CN=66321e11-9f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:b3:f3:41:28:b4:3a:b2:25:21:82:f3:24:
f0:8a:ca:50:a3:5f:3b:51:1a:0a:78:4f:d0:96:3b:
93:2b:40:5a:1d:c1:38:a9:68:f0:1c:09:e6:ce:05:
fc:3b:e3:6b:cc:cd:ec:19:80:b5:e3:7a:ea:bc:f0:
49:2e:e2:e5:64:97:f3:25:ea:63:38:6f:78:2e:83:
d5:de:12:e6:81:60:29:f1:11:0c:36:97:a9:5f:3c:
0c:fa:e0:d4:21:98:a3:d4:1b:70:4a:1d:14:3f:e4:
3d:93:ed:05:9c:c8:9c:7a:4f:d0:65:f9:fa:c5:49:
c8:ba:70:a4:a1:52:5e:32:82:6d:38:4c:92:c0:74:
ec:6c:13:ef:97:8c:76:64:e3:77:43:31:9d:b8:19:
0b:b9:1a:7a:ca:40:eb:f5:55:11:aa:9d:7c:75:5b:
4a:38:99:1a:4a:60:10:ca:9e:ab:f7:14:8a:f7:e7:
9c:bc:ec:63:e9:c8:72:17:20:e2:cb:78:24:56:6f:
d1:85:8c:50:d4:57:8c:08:8b:8d:01:c1:12:e6:5d:
0a:26:fe:0b:96:d0:a7:62:60:ad:0b:9b:d7:be:3b:
e5:f0:ad:57:0c:90:cc:c5:96:24:33:eb:c8:e7:42:
63:f2:6f:a5:8f:fe:f0:75:53:af:04:77:e1:be:9c:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:2C:87:3D:4E:CF:FE:79:4E:D6:AA:73:E3:1D:0B:43:45:BB:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642AC74007A811EFBBAD7F50017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:00:bb:87:3a:cf:35:c9:8c:5f:9b:86:66:ea:31:81:fe:fc:
4b:a8:75:a3:de:1e:d1:5e:3a:6c:9c:b5:13:c7:cd:60:4c:57:
5d:12:78:41:07:2c:40:bb:04:fc:47:4b:2c:ae:bd:f1:a1:0a:
19:1a:aa:ea:09:47:06:1b:1d:aa:d9:13:41:1e:5e:bf:40:9c:
e5:3b:27:2f:95:3c:ea:3f:e4:a4:c8:3b:50:da:67:6e:39:81:
0b:5e:a9:ef:c3:0a:24:5b:b9:f3:03:51:db:b8:43:3d:03:f5:
29:5e:51:8e:b3:f3:7f:93:b3:33:72:43:30:dc:e5:e4:f0:25:
87:fa:33:02:04:ea:76:8f:6e:63:7c:85:96:5f:fc:6d:bc:ea:
c2:2e:cd:1c:de:86:60:2b:1a:31:95:4d:da:0f:05:6c:3c:c4:
f8:2a:68:cc:dd:7d:67:2a:09:b8:c9:78:8f:c8:fb:88:55:a0:
7a:ea:e9:48:76:ea:f9:0e:14:bb:76:95:38:9c:4e:45:7c:81:
ae:de:69:a5:9f:37:06:82:c1:db:95:9c:d0:30:73:26:ce:4d:
a6:36:1b:30:20:ca:b3:b9:73:b8:4b:a8:fb:10:ee:a5:32:8b:
f2:10:59:72:2c:45:03:28:16:84:29:fc:41:e3:81:ed:d9:9a:
f8:e2:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org