Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EFA93BC06D311EF9137A80C017001B1.roa
File: 9EFA93BC06D311EF9137A80C017001B1.roa (raw, json)
Hash identifier: vtg9cDf/YxZ2BTZ1LWyGftkcOxj5I1LSAn2awzs77AY=
Subject key identifier: 7A:43:B8:CD:E3:28:B0:8C:7D:15:BA:C9:02:EC:7E:C1:43:B7:61:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EFA93BC06D311EF9137A80C017001B1.roa
Signing time: Tue 30 Apr 2024 09:25:45 +0000
ROA not before: Tue 30 Apr 2024 09:25:41 +0000
ROA not after: Fri 10 May 2024 09:25:41 +0000
asID: 23764
IP address blocks: 45.195.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34509 (0x86cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:25:41 2024 GMT
Not After : May 10 09:25:41 2024 GMT
Subject: CN=6630b919-f865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:03:85:99:e3:2a:aa:6b:87:99:de:a6:7f:
5e:9f:89:8a:fc:9a:5c:45:31:ed:2e:62:86:f8:35:
15:e2:ad:dc:56:24:86:9b:4b:db:f6:54:ef:ef:f1:
01:e0:8e:67:74:6c:f8:0d:27:3b:29:46:74:e4:eb:
95:a2:cd:f5:10:6d:97:a2:b7:b5:52:a0:2a:a1:6c:
9c:f0:5f:6a:7e:40:35:4e:5e:b6:c3:89:39:c8:c0:
3b:27:bc:b3:1f:2a:79:4b:ad:07:2f:ae:bc:97:b7:
5e:90:d4:60:84:07:a9:79:d6:53:29:e2:6d:18:15:
4e:c7:26:d7:7c:7a:74:6f:11:b8:e7:79:93:dc:46:
03:c9:fa:db:53:83:2d:99:7e:d0:c9:81:56:4d:d6:
74:08:1d:1f:d2:0a:93:d5:06:3d:fe:f2:de:b2:d1:
80:d7:37:9c:3f:72:be:c7:8a:0a:78:0c:04:6f:95:
b5:0f:2c:68:48:8d:1f:12:0d:43:2e:3b:28:29:cc:
cf:11:f3:67:f1:9b:5d:aa:2c:cd:5f:ee:16:98:41:
c6:6f:6e:1e:0e:f6:bc:28:a5:78:86:eb:6c:5f:81:
71:5b:ff:85:82:55:7e:95:5b:55:2a:50:fd:48:7c:
ec:6c:48:09:e3:61:56:e1:7f:19:a8:8f:21:a7:47:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:43:B8:CD:E3:28:B0:8C:7D:15:BA:C9:02:EC:7E:C1:43:B7:61:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EFA93BC06D311EF9137A80C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:76:f7:ea:1a:1a:e8:b4:fa:60:e4:c4:75:40:53:e4:da:00:
84:ea:1c:88:a1:55:e5:1a:87:7c:dd:32:df:fa:f5:e1:0c:4d:
ca:6b:3a:eb:fb:14:6b:eb:18:de:a3:06:98:08:85:d2:80:65:
fd:83:de:f2:ba:2b:65:d5:33:a8:b1:cd:0f:47:4d:6c:c9:4e:
ec:96:ad:18:17:3e:e2:aa:f5:7e:2e:c7:91:06:d6:3b:64:85:
04:f6:10:4c:1f:c4:ad:a3:c9:b5:df:04:4a:45:b0:42:78:ef:
b0:61:53:dc:8d:02:ac:38:c6:19:60:7f:c8:d0:e3:84:08:33:
0b:5c:50:64:58:07:ef:f9:b1:51:0f:41:34:eb:ee:9c:c9:7a:
0a:27:97:50:d7:fa:83:97:65:fd:85:82:b7:a8:a3:a2:b9:d5:
4e:e5:ea:34:99:ae:3b:e5:f4:4c:41:16:f8:17:4a:ef:03:2a:
e4:2b:73:cf:46:87:de:c5:30:bb:22:00:68:a2:d3:69:8b:af:
e8:4b:bb:21:fc:88:91:b8:90:71:91:d0:98:f3:2d:6c:16:c6:
65:f9:0e:67:f2:95:b1:07:1c:a7:b6:2e:99:97:b1:e7:ce:b2:
bd:3e:7f:f1:c9:36:7e:2b:23:7b:1e:0f:94:af:14:4d:fa:f2:
da:ab:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:13:59 2024 by rpki-client on console-ams.rpki-client.org