Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B0589C038B11EFB4D2A348017001B1.roa
File: 26B0589C038B11EFB4D2A348017001B1.roa (raw, json)
Hash identifier: 4FXZtFqpNIa/tTEtGTryAublmOADMTuGk/MiEUvOdfA=
Subject key identifier: AE:C0:C0:93:D6:CA:1F:19:7B:C8:1F:41:12:33:AB:E3:AC:E4:60:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B0589C038B11EFB4D2A348017001B1.roa
Signing time: Fri 26 Apr 2024 05:09:27 +0000
ROA not before: Fri 26 Apr 2024 05:09:22 +0000
ROA not after: Sun 05 May 2024 05:09:22 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34256 (0x85d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:09:22 2024 GMT
Not After : May 5 05:09:22 2024 GMT
Subject: CN=662b3707-fc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:35:01:36:0b:89:56:f2:bd:9b:00:8c:62:
91:b1:fd:8f:e2:07:c0:96:29:01:e4:5d:a7:04:01:
38:77:f7:9c:f7:60:60:6b:cc:40:77:ee:0e:97:0b:
53:32:0e:70:b8:4c:59:69:c6:f7:23:7e:08:8a:e4:
0a:cf:99:63:37:96:e8:d4:c8:2a:12:3c:89:3c:ed:
6d:88:d2:3d:8d:eb:65:f6:fd:0d:35:9c:fb:97:0d:
a8:c0:29:78:30:b4:07:f8:b9:96:9c:cf:31:b7:fa:
d9:e3:b8:53:b2:46:ae:54:20:f0:49:36:71:8a:dc:
b6:c3:0b:b0:69:f4:fb:09:4b:6a:5e:19:91:87:f7:
ec:e4:6c:53:31:f8:bb:ac:a4:c3:69:6e:db:68:d4:
6c:b1:97:70:e9:e6:66:f5:f6:db:8a:d1:58:5c:ba:
f9:47:7f:e8:78:56:16:c1:e0:90:d7:d6:8e:e4:8e:
08:04:51:ee:68:4b:96:ec:27:2e:63:16:4c:7d:b9:
2a:4f:ac:ca:71:95:a2:b2:ef:78:80:4e:4b:6d:6e:
71:73:35:61:78:06:5e:14:87:c1:c0:f8:10:d8:4b:
5d:98:a4:87:82:ba:5f:75:fd:0f:ef:43:0e:b7:35:
96:64:2e:c0:93:09:b2:4f:2e:10:95:ca:3d:5c:31:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:C0:93:D6:CA:1F:19:7B:C8:1F:41:12:33:AB:E3:AC:E4:60:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26B0589C038B11EFB4D2A348017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:ac:11:1c:55:ab:02:4d:ec:d4:18:65:8a:c6:08:a9:d3:a1:
52:43:ba:f1:d6:e4:ae:5f:18:da:8e:3c:5b:87:da:73:64:37:
41:c1:fb:87:66:91:bc:d4:96:26:b9:7a:f9:74:8a:07:e4:ea:
b6:cb:95:d9:3e:59:e1:fa:ec:13:e3:79:45:bc:43:f4:36:fe:
e3:09:38:8f:56:92:d0:f1:dd:b3:2c:76:b2:01:7a:39:a6:f2:
a1:f4:ce:ed:4c:21:22:ba:cb:5d:1e:ec:4a:3f:59:f6:24:cf:
84:1b:a8:2c:ab:ca:0f:79:8b:e5:12:28:4f:d8:73:2d:7b:a6:
46:cb:55:52:d0:52:d9:03:ed:53:a1:99:f8:05:3d:de:d0:0e:
89:0b:a1:3b:7c:36:6d:e2:fd:a0:52:c6:17:7f:b4:4e:a8:cc:
48:5c:35:ac:bc:4d:89:6e:0b:eb:69:45:5a:f1:89:c2:79:09:
cf:51:81:47:f9:78:fb:95:c8:09:cb:3a:7c:94:26:3b:57:6c:
86:02:dc:b2:f6:31:d2:3d:85:84:92:b0:57:d0:19:a4:75:3a:
7a:9b:96:65:57:db:61:c1:b0:67:11:25:3f:81:21:34:43:8e:
96:7d:e9:86:a5:1c:c4:5a:55:65:66:10:c0:81:66:d7:31:ea:
b9:1f:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org