Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F249B2848E311EF90D2646C762E951A.roa
File: 0F249B2848E311EF90D2646C762E951A.roa (raw, json)
Hash identifier: qnQCfkJtMqcHeJWGneIn7lEDLfee987LLhXUPRBzksk=
Subject key identifier: 2B:CA:4F:78:3B:52:DB:4F:A0:6A:F4:90:A8:A1:F6:23:A5:60:CF:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F249B2848E311EF90D2646C762E951A.roa
Signing time: Tue 23 Jul 2024 11:02:32 +0000
ROA not before: Fri 26 Jul 2024 11:02:29 +0000
ROA not after: Fri 02 Aug 2024 11:02:29 +0000
asID: 44559
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40636 (0x9ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:02:29 2024 GMT
Not After : Aug 2 11:02:29 2024 GMT
Subject: CN=669f8dc8-716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:17:33:19:45:26:dd:8a:8f:06:a9:87:1d:
a4:bc:4b:98:18:3a:21:09:6c:8b:c8:f3:80:e0:87:
99:27:b7:25:9d:40:ad:84:48:cd:cf:d4:98:c8:4f:
fd:7c:92:9c:9b:29:74:e0:1f:7b:ff:10:d0:2b:cc:
71:e7:94:55:bf:06:1e:a0:c7:3d:e0:42:00:5f:ef:
be:02:72:32:a7:83:8f:f3:04:27:1b:2b:a0:31:8f:
29:4b:2e:06:56:95:f2:b0:bf:2c:81:5c:9c:31:c1:
1e:52:53:f2:94:e8:ac:af:20:28:19:5a:85:08:5e:
c9:1b:70:b9:95:05:ed:ea:b6:26:e5:3b:4e:1b:37:
d5:65:8f:cd:84:05:cc:32:ba:bc:c0:bf:db:b9:75:
2b:0d:34:53:eb:d5:12:08:4d:72:0f:7d:d2:e5:45:
30:de:d0:87:ca:cc:fc:9e:8c:3b:fd:a4:88:5a:80:
68:0f:c7:41:76:84:e7:22:b3:1e:f7:fb:24:df:99:
fd:71:cf:43:99:74:cb:d3:4d:c4:b6:87:f0:65:b5:
71:2d:9e:25:d6:52:bd:35:5f:c1:a5:c4:d4:16:ae:
46:c4:b7:4c:95:a1:bd:45:c2:e3:b4:a5:d5:ee:43:
5b:9c:2e:83:d4:a2:57:8e:77:ba:8e:03:7b:1c:3b:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:4F:78:3B:52:DB:4F:A0:6A:F4:90:A8:A1:F6:23:A5:60:CF:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F249B2848E311EF90D2646C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:78:4b:33:2a:f3:62:19:d7:5e:93:fa:63:83:89:94:d6:94:
46:49:2c:a4:f9:b0:c4:5d:ee:ec:97:96:4a:fd:42:7d:70:ce:
7a:cd:2b:e4:d7:f8:a1:5e:b3:bf:19:84:7f:f0:e9:0f:6d:46:
a0:00:ba:f8:56:41:bd:a0:09:ec:84:9e:9b:79:14:9f:5f:c2:
0c:86:ec:f9:cd:d7:2f:fa:d5:2c:20:8a:35:3e:16:ec:1b:6f:
48:0e:ac:65:8f:ba:a5:7c:31:a4:35:c5:30:ae:a5:cb:3a:88:
74:47:57:a1:bc:46:cc:f0:7b:88:1d:79:d4:03:57:b4:9a:8a:
59:b0:f7:b0:e8:74:19:97:48:d8:74:a9:58:0a:8d:17:92:21:
66:be:7c:40:59:a6:26:7a:cb:a2:a6:8c:01:a2:68:6c:5c:ba:
8c:69:ff:a0:1d:46:6d:4e:18:4f:10:ca:17:6b:f9:d7:15:1c:
8b:d3:40:a7:13:c9:88:71:2d:54:8a:55:9e:ce:b7:18:39:f0:
cb:42:03:40:51:31:89:d7:07:f1:ab:46:81:4b:d0:68:73:46:
bd:c2:c8:27:c6:64:67:f2:f9:40:6f:43:83:1d:d1:24:30:1d:
2f:fc:21:93:95:88:af:0c:86:a9:9a:9a:fb:8a:d8:a9:7a:a6:
b1:cd:5b:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ68MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MTEwMjI5WhcNMjQwODAyMTEwMjI5WjAYMRYw
FAYDVQQDEw02NjlmOGRjOC03MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyaMXMxlFJt2Kjwaphx2kvEuYGDohCWyLyPOA4IeZJ7clnUCthEjNz9SY
yE/9fJKcmyl04B97/xDQK8xx55RVvwYeoMc94EIAX+++AnIyp4OP8wQnGyugMY8p
Sy4GVpXysL8sgVycMcEeUlPylOisryAoGVqFCF7JG3C5lQXt6rYm5TtOGzfVZY/N
hAXMMrq8wL/buXUrDTRT69USCE1yD33S5UUw3tCHysz8now7/aSIWoBoD8dBdoTn
IrMe9/sk35n9cc9DmXTL003EtofwZbVxLZ4l1lK9NV/BpcTUFq5GxLdMlaG9RcLj
tKXV7kNbnC6D1KJXjne6jgN7HDtaSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCvK
T3g7UttPoGr0kKih9iOlYM+SMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRjI0OUIyODQ4RTMxMUVGOTBEMjY0NkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQCieEszKvNiGddek/pjg4mU1pRGSSyk+bDEXe7sl5ZK/UJ9cM56zSvk1/ih
XrO/GYR/8OkPbUagALr4VkG9oAnshJ6beRSfX8IMhuz5zdcv+tUsIIo1PhbsG29I
Dqxlj7qlfDGkNcUwrqXLOoh0R1ehvEbM8HuIHXnUA1e0mopZsPew6HQZl0jYdKlY
Co0XkiFmvnxAWaYmesuipowBomhsXLqMaf+gHUZtThhPEMoXa/nXFRyL00CnE8mI
cS1UilWezrcYOfDLQgNAUTGJ1wfxq0aBS9Boc0a9wsgnxmRn8vlAb0ODHdEkMB0v
/CGTlYivDIapmpr7itipeqaxzVtc
-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:33 2024 by rpki-client on console-fra.rpki-client.org