Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B6CFC2090011EF9413704C017001B1.roa
File: C1B6CFC2090011EF9413704C017001B1.roa (raw, json)
Hash identifier: T6qRxGxIAkSVlA364u/yLojOVjxNAO5JT4R2xgOneQE=
Subject key identifier: 32:12:DF:40:CA:38:CE:E3:3D:19:A3:73:17:12:44:13:C5:84:D6:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 878F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B6CFC2090011EF9413704C017001B1.roa
Signing time: Fri 03 May 2024 03:53:53 +0000
ROA not before: Fri 03 May 2024 03:53:49 +0000
ROA not after: Sat 11 May 2024 03:53:49 +0000
asID: 39600
IP address blocks: 45.204.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34703 (0x878f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:53:49 2024 GMT
Not After : May 11 03:53:49 2024 GMT
Subject: CN=66345fd1-6488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:9a:1b:10:b3:61:38:06:80:1a:b7:5f:37:
a4:56:1c:06:bd:c0:48:9f:5a:7c:bd:86:a4:71:da:
f4:34:d1:83:ea:8c:fc:3d:f4:79:5f:0e:fe:bd:cf:
04:93:49:28:5a:d1:33:61:d1:d8:59:19:29:5b:1b:
2f:91:ef:c6:3c:00:43:06:49:cd:e7:c7:f9:31:41:
61:02:ac:33:94:df:89:16:d9:ba:33:8f:06:d9:be:
90:2b:d0:ab:59:76:b5:ad:86:51:4c:4b:38:89:40:
c7:fb:ab:32:e3:31:01:7a:3c:87:93:3c:d4:2f:c4:
d0:b8:4e:d1:dd:11:76:ae:71:52:91:b2:ec:2f:95:
ee:d5:ae:d2:e2:77:96:17:8e:dc:a9:bb:4e:1b:a1:
5f:dc:2b:cd:e8:bf:d5:16:40:f9:31:68:62:8b:0c:
69:3c:5f:2c:da:01:8b:b6:f1:5e:62:3d:5c:28:04:
22:39:ba:9c:9a:af:4c:6d:3f:86:9c:a4:ec:69:eb:
86:c9:9c:2a:50:74:3a:3c:04:60:23:eb:c6:0c:aa:
0f:bd:20:59:03:82:0e:3e:49:be:b5:34:a6:ea:e5:
74:62:ba:c2:bf:47:5c:33:ed:e2:41:20:58:5a:ae:
f5:64:bd:90:65:49:5e:16:84:ec:18:cd:6f:01:6d:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:DF:40:CA:38:CE:E3:3D:19:A3:73:17:12:44:13:C5:84:D6:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1B6CFC2090011EF9413704C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.28.0/22
Signature Algorithm: sha256WithRSAEncryption
35:b9:b8:92:2c:57:72:26:95:5f:6b:31:2a:20:bb:ed:27:55:
9c:29:88:b3:ff:9a:7f:0d:6a:7f:cb:74:e5:c4:e5:e9:de:c2:
d4:ed:0d:d7:a9:35:86:93:e9:f5:ea:cf:4d:e3:19:23:59:68:
1d:81:ee:dd:da:df:ae:c3:46:2a:6e:8e:6f:cc:91:f4:3b:61:
6f:1d:8e:6a:b5:fb:0e:23:2a:ee:a7:f5:d8:bf:ef:76:01:98:
f5:2c:37:e0:9d:13:b0:39:89:4b:2c:71:04:ad:ef:ea:5e:1c:
e2:13:e6:e9:be:81:d4:97:78:17:d5:60:75:2f:f4:12:bb:3a:
1e:1a:e1:ac:94:c1:0b:0d:0f:c3:4e:fd:a5:47:32:ef:f5:37:
3e:b9:56:78:96:4f:66:37:49:ff:c2:c2:80:16:16:27:4d:e2:
8a:57:e7:f6:aa:03:3c:b6:5d:a8:88:de:d2:8f:44:e0:c2:b9:
cc:ce:59:18:88:4e:97:15:8a:33:30:b9:48:4c:f6:fe:21:44:
6f:58:48:1c:67:4a:1b:6c:b9:53:2c:63:dd:d2:0a:e6:d1:aa:
8a:58:49:94:7a:1b:12:ea:e1:ce:c7:ae:41:28:40:9b:7e:5b:
b8:bb:f9:4c:b5:17:f9:65:cd:87:59:24:a7:4a:76:15:52:43:
c5:ae:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:50 2024 by rpki-client on console-fra.rpki-client.org