Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D997E06D411EFBE782413017001B1.roa
File: 951D997E06D411EFBE782413017001B1.roa (raw, json)
Hash identifier: ua35JNEY5PGH5EtqvQLGqoyDvrnKLqNGySnovWl6Z6w=
Subject key identifier: 50:E5:12:39:0D:FF:1B:9D:3C:58:5E:2F:16:AE:CE:C9:C6:00:7D:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D997E06D411EFBE782413017001B1.roa
Signing time: Tue 30 Apr 2024 09:32:38 +0000
ROA not before: Tue 30 Apr 2024 09:32:34 +0000
ROA not after: Tue 07 May 2024 09:32:34 +0000
asID: 142062
IP address blocks: 45.204.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34515 (0x86d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:32:34 2024 GMT
Not After : May 7 09:32:34 2024 GMT
Subject: CN=6630bab6-2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:13:69:d4:12:da:4c:c4:72:d5:41:7e:9a:
58:38:3d:99:b8:c3:f6:15:2f:bd:91:74:c3:17:24:
9c:8a:f3:ec:01:e0:90:79:05:5f:cd:46:7b:b4:13:
44:0f:60:4f:6b:6e:20:cf:78:24:4b:e1:38:22:9a:
ca:30:c3:20:b0:71:d9:25:50:f6:e4:36:fa:7f:00:
ac:4d:1c:7e:37:91:10:6c:40:af:fb:f4:21:21:d1:
d2:70:6a:9b:52:d8:41:98:02:32:af:ba:bb:e2:9a:
65:e5:3b:61:16:b4:b9:ca:72:4b:b4:ed:7c:8f:53:
53:11:6f:90:0b:da:6a:73:39:94:d2:4b:80:06:68:
0d:a4:16:62:da:0e:50:e4:87:da:78:aa:d3:77:fe:
31:92:e8:be:70:44:a2:a4:8f:28:f7:1d:5b:5f:e9:
9e:c8:71:3e:66:72:49:f4:2b:f9:e5:3e:5c:2a:b2:
e9:ad:a7:0b:36:75:31:1c:fd:0f:bd:43:35:e1:95:
68:47:bd:fa:f8:5c:ea:7f:0c:92:5e:df:cd:5c:2c:
10:98:fe:ac:eb:ef:e9:58:cc:b8:bb:8d:74:56:bf:
9a:e3:0e:2a:84:19:29:bd:7e:ac:a5:28:3e:74:2a:
29:e9:af:9e:f0:9f:20:c2:1a:9c:a6:18:3d:e6:72:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:12:39:0D:FF:1B:9D:3C:58:5E:2F:16:AE:CE:C9:C6:00:7D:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D997E06D411EFBE782413017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d4:58:b0:2e:c6:3e:1c:4d:e3:8e:9d:60:7e:17:3f:dd:37:
b2:16:91:3b:c6:dc:09:87:c2:32:61:0b:c8:ec:a1:89:06:5a:
a3:97:d9:af:48:16:98:a9:a8:6b:ee:9a:52:ea:42:5b:72:40:
3b:f5:69:53:f0:4a:fb:aa:e6:f2:10:b2:45:4d:2d:d3:67:dc:
55:1b:81:45:a6:d7:b1:92:09:fe:3d:cf:10:c4:9c:5a:95:2a:
b8:3a:14:3a:74:61:a4:68:22:e7:ac:24:ea:46:ea:41:e0:e1:
bd:20:1d:5d:d2:ce:46:35:ae:6b:0d:66:3b:13:1d:95:b9:45:
d0:b5:1b:37:4b:c7:12:17:fc:b1:4d:bb:81:c2:80:b6:a4:22:
e6:b6:60:2e:f7:38:88:2a:84:85:65:2a:d1:1f:79:44:3b:33:
cf:87:95:46:13:d3:13:2e:63:c7:ba:c4:b9:36:69:48:b5:0e:
2e:0e:e1:74:63:78:5e:ea:eb:25:e8:a1:8e:3c:fd:5e:c4:33:
9f:87:fc:d1:45:16:84:9e:dc:8c:4e:29:c5:d7:83:f4:fe:1b:
5c:73:53:f9:59:6e:1c:8d:c5:7c:c7:13:a4:88:65:47:7c:f3:
d7:3d:a4:74:9e:a6:56:9c:52:7e:c2:0e:44:4d:4d:47:64:35:
c7:11:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org