Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5BA0A34039011EF8CAFBBF7007001B1.roa
File: F5BA0A34039011EF8CAFBBF7007001B1.roa (raw, json)
Hash identifier: NIjRh3yV/S7Wy0CGQgzuINkhet7Z+IblaadEm0iMAS0=
Subject key identifier: 3E:38:61:74:90:FB:B0:48:AE:99:27:D0:0D:05:E9:D5:16:EE:60:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8615
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5BA0A34039011EF8CAFBBF7007001B1.roa
Signing time: Fri 26 Apr 2024 05:51:00 +0000
ROA not before: Fri 26 Apr 2024 05:50:57 +0000
ROA not after: Sun 05 May 2024 05:50:57 +0000
asID: 139646
IP address blocks: 45.201.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34325 (0x8615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:50:57 2024 GMT
Not After : May 5 05:50:57 2024 GMT
Subject: CN=662b40c4-bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:34:0b:5c:2b:b2:8b:b9:58:07:66:ef:04:
a6:f2:25:ea:f7:b4:44:0b:52:07:da:da:c1:2d:ff:
4d:51:dd:95:2c:3c:a2:77:70:74:54:d3:c6:3a:2f:
d0:7d:c9:55:a7:92:70:0e:0c:eb:58:42:41:91:fb:
78:28:cf:da:87:7c:cd:c6:08:7d:05:38:a4:2b:c9:
d2:0c:13:c5:e1:73:80:03:5e:1d:08:71:88:71:a8:
8b:06:fe:d9:41:1b:1d:82:e8:46:aa:1c:f8:3c:bc:
68:ae:f5:0c:f5:4d:5d:d1:b0:7f:f5:63:de:11:e7:
72:93:ee:14:1b:4d:7e:21:8f:d3:fb:b9:ee:d1:36:
24:f6:dc:19:f0:72:78:39:ab:c0:78:c5:67:34:a9:
3c:00:0a:dd:0a:33:41:e5:29:ca:47:21:80:a2:59:
66:0a:8c:fb:15:9a:10:65:43:d0:77:7b:e0:39:9e:
59:b0:71:80:1d:bc:3a:59:fb:45:f0:91:a5:9e:65:
14:99:e3:50:fa:3f:5c:b3:b5:77:a6:d7:81:19:20:
a4:f3:4c:5e:33:f0:2a:43:71:0e:a4:ff:32:1d:a3:
bb:b1:18:9c:84:11:95:e2:93:c9:5e:02:71:43:be:
4f:fb:1a:48:15:10:08:fe:e8:22:e4:10:fc:3d:40:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:61:74:90:FB:B0:48:AE:99:27:D0:0D:05:E9:D5:16:EE:60:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5BA0A34039011EF8CAFBBF7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.250.0/23
Signature Algorithm: sha256WithRSAEncryption
12:fb:84:f8:2c:56:0d:5f:57:5f:6d:2b:bc:24:d3:1d:b0:81:
ca:12:d9:54:d1:3d:6f:3e:4f:ed:03:66:69:0d:f6:85:5b:d8:
ad:08:6c:7e:9c:7a:31:9e:57:1f:39:a7:fb:3e:54:10:27:3e:
60:36:dd:b4:d8:a9:fb:34:4f:c0:8f:f5:8b:52:55:fb:f7:82:
fe:cb:d4:69:bc:50:a8:06:42:c7:b5:48:6b:71:90:1d:2d:16:
a8:87:b4:4b:e0:b2:77:e0:73:ec:d9:bf:f9:e7:f6:4e:27:32:
71:4e:7d:39:a1:8d:7e:16:df:60:4d:77:5a:54:84:e2:e4:70:
f2:ae:71:ec:35:96:91:eb:ba:09:c4:3d:dd:f1:fb:a9:95:de:
ba:6d:c0:73:50:3b:85:89:8f:74:58:c9:31:e2:60:3c:be:c1:
75:cd:61:49:9a:5a:b8:0d:e6:a4:ec:54:c1:bc:ed:92:e6:50:
3a:06:d1:b6:c7:92:8e:17:fe:b2:ec:8c:2f:01:43:99:cc:d3:
9a:f6:45:71:3f:d3:d1:d5:85:bd:20:45:aa:11:56:78:9f:f8:
dd:3e:63:34:e9:cf:78:c4:3b:30:63:96:fc:8a:ed:74:75:18:
25:b1:32:de:fd:ab:70:17:dd:92:16:c0:54:8a:98:b7:25:7d:
0d:07:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org