Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6AEDB6406D111EFB8D0CAFC007001B1.roa
File: B6AEDB6406D111EFB8D0CAFC007001B1.roa (raw, json)
Hash identifier: 8udVOmrBvFQaYmyyoYa5YkGbupRU8HXNNpBhQeZWqAc=
Subject key identifier: 05:1A:8B:0E:2A:72:A3:7F:9E:C8:2B:ED:AC:77:66:17:76:79:9E:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6AEDB6406D111EFB8D0CAFC007001B1.roa
Signing time: Tue 30 Apr 2024 09:12:05 +0000
ROA not before: Tue 30 Apr 2024 09:12:02 +0000
ROA not after: Mon 20 May 2024 09:12:02 +0000
asID: 39600
IP address blocks: 45.196.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34503 (0x86c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:12:02 2024 GMT
Not After : May 20 09:12:02 2024 GMT
Subject: CN=6630b5e5-d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:97:eb:5a:21:94:2b:62:50:c4:84:eb:78:
f6:23:28:ca:b9:8f:62:40:e1:a0:32:08:3f:48:46:
62:73:3e:9e:94:9d:7f:1f:69:82:66:33:32:30:e3:
ed:98:57:70:11:70:7d:f3:f5:48:97:5b:c7:a2:84:
a6:c7:84:19:32:89:e4:65:7b:05:ef:66:54:f4:06:
23:7a:d1:2a:71:53:5b:59:6c:63:cc:66:f2:07:34:
50:8e:63:88:68:23:11:14:3c:44:79:49:6e:85:1e:
9f:b7:e3:98:74:c3:d4:16:a6:c3:9a:e7:e8:46:19:
8d:55:0a:29:06:d7:6d:86:7b:33:10:7c:e4:c0:de:
54:69:27:f8:33:6c:fa:ae:cd:62:84:2f:9e:b5:fb:
1e:10:e0:81:e7:4a:ca:90:eb:f1:7e:62:33:80:0e:
68:e1:0d:7d:53:1b:4c:96:be:2d:1e:19:99:11:88:
4f:b1:87:16:eb:f1:be:38:e8:b2:79:60:45:ff:81:
80:10:e8:3b:60:37:2b:fe:3f:b3:07:eb:d5:85:f2:
05:10:04:36:6c:3e:44:23:a0:76:a3:e5:d5:88:7b:
21:91:ad:2b:7f:5c:94:fc:ef:49:f7:e3:b1:d5:a6:
5a:fd:4d:f5:58:12:58:87:29:09:12:d4:4c:a7:24:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:8B:0E:2A:72:A3:7F:9E:C8:2B:ED:AC:77:66:17:76:79:9E:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6AEDB6406D111EFB8D0CAFC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:74:74:09:d8:4a:4d:7a:ff:18:31:b3:7a:77:ee:24:6b:4a:
14:80:ce:21:61:8a:42:1e:1b:ec:50:36:96:74:24:6b:96:33:
a6:b1:7c:09:9e:74:d6:97:e0:19:7f:9e:a4:02:bb:94:4e:d1:
78:3a:b6:c6:24:8e:44:e5:12:b6:9d:43:65:ad:c0:f0:7e:38:
63:b4:4a:68:55:22:93:0a:cd:c3:e6:88:a2:c2:2d:9f:5c:3b:
10:aa:57:8e:90:42:7c:16:10:4c:c1:01:09:22:2f:ba:81:a5:
f4:de:0c:87:f0:71:28:ab:32:8a:7b:c4:1b:ff:49:49:d4:a5:
89:3d:cc:b9:b3:1f:ed:36:f4:61:c3:98:15:9f:e9:71:4a:32:
08:be:e3:42:a1:88:72:80:00:01:b0:ab:0d:6d:52:15:38:7e:
72:03:f2:ea:94:73:e4:d3:ea:b0:03:35:35:a5:bd:50:69:21:
9e:b8:26:ed:d8:de:51:eb:81:dd:b2:7a:16:bd:f6:32:fa:8f:
43:14:7e:a6:d1:60:92:81:db:c4:c6:3e:71:93:ac:1e:bc:d9:
ab:fe:f5:64:93:50:e4:50:5e:71:ba:ea:88:48:70:97:47:a6:
07:e1:c9:9d:e0:08:81:59:36:9f:7d:52:d6:8c:66:0e:d3:b7:
72:fe:fc:6e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIbHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDMwMDkxMjAyWhcNMjQwNTIwMDkxMjAyWjAYMRYw
FAYDVQQDEw02NjMwYjVlNS1kNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArHyX61ohlCtiUMSE63j2IyjKuY9iQOGgMgg/SEZicz6elJ1/H2mCZjMy
MOPtmFdwEXB98/VIl1vHooSmx4QZMonkZXsF72ZU9AYjetEqcVNbWWxjzGbyBzRQ
jmOIaCMRFDxEeUluhR6ft+OYdMPUFqbDmufoRhmNVQopBtdthnszEHzkwN5UaSf4
M2z6rs1ihC+etfseEOCB50rKkOvxfmIzgA5o4Q19UxtMlr4tHhmZEYhPsYcW6/G+
OOiyeWBF/4GAEOg7YDcr/j+zB+vVhfIFEAQ2bD5EI6B2o+XViHshka0rf1yU/O9J
9+Ox1aZa/U31WBJYhykJEtRMpyR/FwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAUa
iw4qcqN/nsgr7ax3Zhd2eZ5NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNkFFREI2NDA2RDExMUVGQjhEMENBRkMwMDcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAedHQJ2EpNev8YMbN6d+4ka0oUgM4hYYpCHhvsUDaWdCRrljOmsXwJnnTW
l+AZf56kAruUTtF4OrbGJI5E5RK2nUNlrcDwfjhjtEpoVSKTCs3D5oiiwi2fXDsQ
qleOkEJ8FhBMwQEJIi+6gaX03gyH8HEoqzKKe8Qb/0lJ1KWJPcy5sx/tNvRhw5gV
n+lxSjIIvuNCoYhygAABsKsNbVIVOH5yA/LqlHPk0+qwAzU1pb1QaSGeuCbt2N5R
64HdsnoWvfYy+o9DFH6m0WCSgdvExj5xk6wevNmr/vVkk1DkUF5xuuqISHCXR6YH
4cmd4AiBWTaffVLWjGYO07dy/vxu
-----END CERTIFICATE-----
Generated at Tue May 21 02:17:28 2024 by rpki-client on console-fra.rpki-client.org