Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009290D2038E11EF8ED5055F017001B1.roa
File: 009290D2038E11EF8ED5055F017001B1.roa (raw, json)
Hash identifier: h6gr8VhWwHzhson1YchuIGcLWBQWfOZ/CBlMiDC9Tfk=
Subject key identifier: FB:C6:A2:4C:C8:91:17:51:58:53:C3:7A:17:0F:4A:AD:25:FE:CD:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009290D2038E11EF8ED5055F017001B1.roa
Signing time: Fri 26 Apr 2024 05:29:50 +0000
ROA not before: Fri 26 Apr 2024 05:29:47 +0000
ROA not after: Sun 05 May 2024 05:29:47 +0000
asID: 139646
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34292 (0x85f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:29:47 2024 GMT
Not After : May 5 05:29:47 2024 GMT
Subject: CN=662b3bce-6701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:e6:01:0e:b8:0d:8c:42:95:eb:32:35:2f:
f1:0d:3a:d7:de:db:6f:a2:d9:4c:5d:ef:3d:76:25:
d9:c7:85:6c:d8:2e:dc:0f:e6:bc:d3:61:cf:a6:c0:
1d:30:b2:57:f6:dc:58:34:86:7a:bb:82:2f:82:42:
76:b2:8e:c9:d5:79:3b:ae:da:d4:a0:ca:7c:54:6d:
20:85:17:e9:28:8c:c0:59:36:f0:f3:95:77:d0:4b:
58:db:b7:13:1f:cf:f1:9a:c0:f3:32:b2:0b:31:67:
26:3c:a2:56:67:eb:3b:d4:59:51:57:fe:19:64:c5:
ff:f8:df:40:28:17:49:18:66:7b:d6:8f:37:b3:ba:
71:35:45:f6:ab:f0:b0:fa:46:c6:91:1d:fb:81:4a:
c8:84:38:57:30:99:1f:53:20:59:fe:ff:50:35:f7:
91:cb:00:a8:fc:77:e1:ad:5d:c6:81:e8:77:4e:10:
9c:57:34:65:a5:87:92:f3:ff:66:06:38:ba:22:6b:
22:da:3e:13:da:d2:d9:b0:42:f5:42:7f:13:7d:ee:
e7:ff:7d:38:3e:89:b8:46:42:28:cf:e0:d5:5c:3e:
ef:4f:cc:d0:a5:bb:f4:96:81:63:de:e3:11:e0:88:
71:a6:c1:02:ff:e9:00:32:f3:f4:92:53:79:c6:5e:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:A2:4C:C8:91:17:51:58:53:C3:7A:17:0F:4A:AD:25:FE:CD:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/009290D2038E11EF8ED5055F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:1a:24:3f:5e:4c:d9:01:f7:81:e2:5f:0c:77:f9:a4:a6:73:
fa:4e:b6:6a:cb:42:3d:5a:74:c7:dd:21:60:60:28:b0:15:77:
33:d2:ac:ce:9b:36:a7:ff:35:85:fb:2a:c7:6b:0c:76:bc:70:
7b:65:74:61:64:02:6b:09:23:ec:bd:1f:1c:b2:75:03:e7:9d:
16:08:27:8c:5c:03:5c:77:fd:03:89:a4:b8:f5:57:0f:78:35:
d2:f9:1d:f6:3c:b7:43:90:7b:99:ee:aa:d4:b3:03:41:df:23:
c5:54:b6:fd:b4:c9:ee:5a:23:ea:f8:87:16:56:eb:0a:9e:7a:
ea:b5:f2:cd:be:77:41:08:54:25:96:e2:ca:0b:e3:d6:22:19:
e6:9d:d4:3e:f5:7a:f4:99:6a:ec:ac:5b:d8:01:8b:0c:ab:d3:
0d:f8:f2:12:0d:ef:0f:27:9f:7c:23:de:6f:a9:ee:54:18:e3:
c7:51:a3:8d:01:aa:70:0d:03:00:70:a7:11:0b:d1:21:82:a5:
5a:41:92:46:7c:04:b5:81:fb:c5:99:7a:6a:92:40:5d:8f:62:
5f:1f:ac:89:2e:cf:1d:8b:b8:0d:4f:46:13:35:c8:80:bc:06:
3c:b5:23:c2:48:48:80:69:d9:63:83:65:c7:b3:27:35:23:4e:
55:49:08:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIX0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDUyOTQ3WhcNMjQwNTA1MDUyOTQ3WjAYMRYw
FAYDVQQDEw02NjJiM2JjZS02NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtnnmAQ64DYxClesyNS/xDTrX3ttvotlMXe89diXZx4Vs2C7cD+a802HP
psAdMLJX9txYNIZ6u4IvgkJ2so7J1Xk7rtrUoMp8VG0ghRfpKIzAWTbw85V30EtY
27cTH8/xmsDzMrILMWcmPKJWZ+s71FlRV/4ZZMX/+N9AKBdJGGZ71o83s7pxNUX2
q/Cw+kbGkR37gUrIhDhXMJkfUyBZ/v9QNfeRywCo/HfhrV3Ggeh3ThCcVzRlpYeS
8/9mBji6Imsi2j4T2tLZsEL1Qn8Tfe7n/304Pom4RkIoz+DVXD7vT8zQpbv0loFj
3uMR4IhxpsEC/+kAMvP0klN5xl5bHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPvG
okzIkRdRWFPDehcPSq0l/s0PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDkyOTBEMjAzOEUxMUVGOEVENTA1NUYwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcggMA0GCSqGSIb3DQEBCwUA
A4IBAQAGGiQ/XkzZAfeB4l8Md/mkpnP6TrZqy0I9WnTH3SFgYCiwFXcz0qzOmzan
/zWF+yrHawx2vHB7ZXRhZAJrCSPsvR8csnUD550WCCeMXANcd/0DiaS49VcPeDXS
+R32PLdDkHuZ7qrUswNB3yPFVLb9tMnuWiPq+IcWVusKnnrqtfLNvndBCFQlluLK
C+PWIhnmndQ+9Xr0mWrsrFvYAYsMq9MN+PISDe8PJ598I95vqe5UGOPHUaONAapw
DQMAcKcRC9EhgqVaQZJGfAS1gfvFmXpqkkBdj2JfH6yJLs8di7gNT0YTNciAvAY8
tSPCSEiAadljg2XHsyc1I05VSQi2
-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org