Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C0FCF814B111EEA53F72344AD9E6FC.roa
File: 11C0FCF814B111EEA53F72344AD9E6FC.roa (raw, json)
Hash identifier: 4tQ0HzZ2rgyKOef995u5ORw54M2PjYkdxxi8kIZlHGc=
Subject key identifier: D3:79:E5:46:0B:8E:7E:2D:13:B2:AC:2B:C1:4F:AD:0D:BA:8A:68:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C0FCF814B111EEA53F72344AD9E6FC.roa
Signing time: Tue 27 Jun 2023 06:08:43 +0000
ROA not before: Tue 27 Jun 2023 06:08:40 +0000
ROA not after: Wed 01 May 2024 06:08:40 +0000
asID: 140227
IP address blocks: 45.194.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11529 (0x2d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 06:08:40 2023 GMT
Not After : May 1 06:08:40 2024 GMT
Subject: CN=649a7ceb-8755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:8a:bd:2e:87:aa:46:4d:34:ab:4c:28:48:
21:5a:31:d1:8c:a4:43:06:91:1d:80:70:3b:a5:20:
7b:3e:52:11:21:fe:9c:46:38:ca:5a:d7:ad:6e:da:
0b:6d:59:2b:77:36:fa:92:ab:73:ad:af:bc:a3:1b:
95:37:c2:b6:4b:17:f7:7c:57:03:ce:c7:33:bf:88:
84:80:34:1d:24:7f:b9:14:ca:59:00:55:7e:28:6d:
8b:18:ec:7b:6a:b4:9f:c9:76:2f:d4:69:ed:f1:4c:
92:a5:41:4d:b2:69:55:c6:ad:68:d0:9f:58:98:c9:
6e:50:32:9a:78:15:8f:62:3e:95:ae:1a:d9:2c:7e:
59:77:bc:23:f5:c8:e3:75:67:0a:58:f1:93:a8:85:
94:97:d8:af:21:f8:37:77:cf:23:e4:df:95:25:49:
61:e7:6c:20:de:ef:6d:82:17:82:12:40:17:f4:02:
8c:08:29:3e:da:93:21:08:d4:1b:83:d8:4a:b1:ea:
88:82:73:b3:48:05:8e:ed:c7:a6:36:e3:90:83:a4:
3c:1a:83:17:8c:cc:6a:39:31:90:52:6d:ac:fe:ab:
7b:76:88:8a:9f:e7:ca:e8:7e:87:34:d1:67:a2:3a:
be:14:2c:11:07:62:8e:e5:46:8f:b0:11:12:b8:fd:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:E5:46:0B:8E:7E:2D:13:B2:AC:2B:C1:4F:AD:0D:BA:8A:68:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C0FCF814B111EEA53F72344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2b:5e:45:4a:26:d9:95:aa:c9:6c:23:3c:54:26:7e:dd:69:
7b:e7:4a:61:83:75:98:1b:50:30:51:69:10:3c:f4:ad:af:6d:
7a:70:0f:a1:01:d6:d2:fa:d5:1e:4d:0d:c7:9f:11:b7:90:aa:
4f:7f:7f:e3:93:83:a4:a5:61:2e:93:94:4d:97:99:6a:b8:fd:
e3:80:49:dd:4d:6b:75:85:1b:5f:2f:85:b4:ca:e3:8c:0d:4d:
8a:c8:85:59:7e:05:74:8a:0f:68:1b:5d:b0:b3:48:69:6a:72:
70:62:ca:f7:c7:aa:3e:fd:2a:1e:23:a6:3a:92:48:a1:15:58:
bf:42:18:f5:ff:c8:75:21:72:48:45:57:40:ea:36:d6:8e:89:
01:d5:4d:c2:bf:1b:12:59:7c:50:66:7e:88:b2:8b:4e:0a:f5:
49:b5:70:74:db:d6:df:3c:92:17:22:3a:ff:b2:9b:86:00:b5:
7e:d8:4f:c9:8d:76:92:f5:a6:eb:b8:f7:76:a1:ea:e1:04:46:
93:e8:c4:75:af:66:f6:78:42:f0:03:ea:28:c7:40:42:17:75:
a6:f5:a4:5c:64:30:d5:ef:85:69:ba:41:15:b1:25:70:5b:9d:
de:97:29:32:c3:11:e2:80:50:45:25:a4:07:58:4b:ee:d9:53:
39:d8:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org