Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6ECFA45A811EFA04ACC78762E951A.roa
File: 10F6ECFA45A811EFA04ACC78762E951A.roa (raw, json)
Hash identifier: aZmXo/7sokT2wj9beuril58AzHXmdn1cW45JEMa8h3g=
Subject key identifier: 02:7D:3C:DE:57:3A:7F:A7:D6:D6:2B:1F:40:62:C6:9E:D4:19:AE:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6ECFA45A811EFA04ACC78762E951A.roa
Signing time: Fri 19 Jul 2024 08:22:41 +0000
ROA not before: Fri 19 Jul 2024 08:22:38 +0000
ROA not after: Mon 29 Jul 2024 08:22:38 +0000
asID: 142062
IP address blocks: 45.204.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40352 (0x9da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:22:38 2024 GMT
Not After : Jul 29 08:22:38 2024 GMT
Subject: CN=669a2251-01ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:e5:f1:38:00:53:0e:df:fa:f0:c4:d1:98:
6e:eb:ea:bc:18:30:46:f8:95:18:5a:51:e9:0f:59:
2d:43:a4:2a:3e:b9:5b:53:7e:44:da:5a:23:49:bb:
d4:f4:8a:11:42:4f:17:d4:43:0d:a9:3b:89:cc:6f:
22:3f:08:35:da:6c:a3:92:dd:bf:2a:98:e7:3d:68:
54:32:05:f2:31:c6:f9:9a:ca:de:94:04:5a:39:cf:
6a:d1:d8:2a:ad:b3:96:15:3d:3e:fc:ad:6b:0c:b5:
c7:8b:f5:2f:59:cc:28:bd:96:33:bd:4a:6a:6b:66:
33:11:7b:56:13:6d:86:d7:b8:f5:2f:f2:ac:89:a3:
26:59:d2:0e:de:f4:59:76:43:39:ea:1e:73:60:be:
4e:66:bf:b0:55:df:7c:95:37:94:93:01:fd:08:c9:
be:0d:a8:a4:f7:1b:77:be:ec:ae:6d:bd:34:81:29:
18:09:47:30:50:f6:cd:41:2d:03:b9:a4:4b:37:a2:
67:db:e3:09:66:b1:11:1d:87:f6:58:57:7c:2c:59:
ed:ca:62:ac:ca:34:74:4b:06:bf:be:ce:47:55:b7:
92:10:bc:d8:db:79:cc:df:04:7d:aa:9d:8d:ab:22:
84:eb:c8:58:78:9d:7f:8a:d4:72:e5:db:96:94:12:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:3C:DE:57:3A:7F:A7:D6:D6:2B:1F:40:62:C6:9E:D4:19:AE:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F6ECFA45A811EFA04ACC78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.90.0/24
Signature Algorithm: sha256WithRSAEncryption
69:38:62:ea:94:0d:35:96:2e:f7:2f:38:97:15:ae:24:64:8e:
4e:52:7a:33:b6:c5:da:a8:7b:e1:c6:36:80:1a:32:e6:39:b9:
5b:b9:3d:49:9b:f7:53:94:e0:c4:94:c3:a3:7f:9d:87:85:8d:
a4:75:56:0f:2f:c6:81:e7:8c:a0:12:cc:93:4b:fa:75:3c:f8:
c5:8d:c0:c6:3c:08:e8:b5:9f:85:19:18:69:75:7c:09:c5:20:
9d:a6:4b:98:28:49:8f:d0:76:a2:6b:1e:fb:d0:cf:5c:9e:d1:
52:3a:33:fc:e7:74:8e:8a:fa:80:96:b7:62:15:31:e0:93:62:
91:c7:71:52:c9:05:ac:dd:6c:05:ae:25:06:e7:f9:55:07:45:
cc:03:8d:4b:da:ac:94:8a:b0:16:48:19:3b:88:6c:f6:e5:3e:
26:70:7e:01:c7:d3:69:ad:9e:fc:90:fd:cb:b8:ea:19:31:71:
bc:72:1c:5f:f7:0a:56:fc:8a:cd:8f:dc:a1:8b:a9:b4:67:7c:
26:8b:29:1e:86:31:56:2b:5c:14:94:37:af:f3:c3:57:e4:a1:
a6:c6:6f:52:61:79:df:e2:7a:9e:24:f0:8a:20:d7:19:41:f1:
51:5d:b2:5f:dc:7e:b2:2f:b3:3c:9b:99:2c:7c:96:ab:6e:ab:
30:23:f1:f9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ2gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE5MDgyMjM4WhcNMjQwNzI5MDgyMjM4WjAYMRYw
FAYDVQQDEw02NjlhMjI1MS0wMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp0bl8TgAUw7f+vDE0Zhu6+q8GDBG+JUYWlHpD1ktQ6QqPrlbU35E2loj
SbvU9IoRQk8X1EMNqTuJzG8iPwg12myjkt2/KpjnPWhUMgXyMcb5msrelARaOc9q
0dgqrbOWFT0+/K1rDLXHi/UvWcwovZYzvUpqa2YzEXtWE22G17j1L/KsiaMmWdIO
3vRZdkM56h5zYL5OZr+wVd98lTeUkwH9CMm+Daik9xt3vuyubb00gSkYCUcwUPbN
QS0DuaRLN6Jn2+MJZrERHYf2WFd8LFntymKsyjR0Swa/vs5HVbeSELzY23nM3wR9
qp2NqyKE68hYeJ1/itRy5duWlBL7zwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAJ9
PN5XOn+n1tYrH0Bixp7UGa43MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMEY2RUNGQTQ1QTgxMUVGQTA0QUNDNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxaMA0GCSqGSIb3DQEBCwUA
A4IBAQBpOGLqlA01li73LziXFa4kZI5OUnoztsXaqHvhxjaAGjLmOblbuT1Jm/dT
lODElMOjf52HhY2kdVYPL8aB54ygEsyTS/p1PPjFjcDGPAjotZ+FGRhpdXwJxSCd
pkuYKEmP0Haiax770M9cntFSOjP853SOivqAlrdiFTHgk2KRx3FSyQWs3WwFriUG
5/lVB0XMA41L2qyUirAWSBk7iGz25T4mcH4Bx9NprZ78kP3LuOoZMXG8chxf9wpW
/IrNj9yhi6m0Z3wmiykehjFWK1wUlDev88NX5KGmxm9SYXnf4nqeJPCKINcZQfFR
XbJf3H6yL7M8m5ksfJarbqswI/H5
-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org