Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373E62C4FAC811EE95B4F84F017001B1.roa
File: 373E62C4FAC811EE95B4F84F017001B1.roa (raw, json)
Hash identifier: ADCykTAcK5L8BO6yJH5pzZvc0bJEJD/lvua94sTSDcc=
Subject key identifier: 4E:14:C4:F6:11:C1:70:0A:DB:64:79:0C:5B:D9:FC:0C:94:DB:EC:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8266
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373E62C4FAC811EE95B4F84F017001B1.roa
Signing time: Mon 15 Apr 2024 01:33:52 +0000
ROA not before: Mon 15 Apr 2024 01:33:48 +0000
ROA not after: Wed 24 Apr 2024 01:33:48 +0000
asID: 136950
IP address blocks: 45.195.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33382 (0x8266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 01:33:48 2024 GMT
Not After : Apr 24 01:33:48 2024 GMT
Subject: CN=661c8400-6e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:94:39:1e:b6:70:62:d6:1b:2c:fb:8f:36:
fd:d9:b6:e6:e3:ef:99:c3:54:d4:d9:1c:72:0f:d1:
1a:ff:4d:eb:81:a6:53:78:41:de:71:1e:e5:df:94:
ca:69:63:d7:55:6d:bf:f6:b4:47:3a:67:45:84:97:
16:be:c2:5f:2a:49:c6:d1:f1:03:41:5e:5b:da:d7:
26:ce:a6:af:16:3e:05:39:3e:b4:3a:88:e7:97:71:
6e:be:61:96:7d:00:3d:cc:78:03:4c:03:41:42:f7:
57:47:4e:ac:50:62:ea:ff:69:d0:0c:7b:61:76:ca:
fd:17:6d:3c:dd:be:cf:9b:e7:8e:46:96:8d:b5:94:
01:50:2a:3a:10:69:d4:9f:fb:70:87:4b:48:4d:1e:
57:c8:8a:9c:ad:e6:f4:7f:a3:bd:09:d0:e2:32:f8:
bd:53:13:ef:e3:12:c5:90:63:57:c0:3e:0f:f8:98:
73:22:83:81:c3:7e:a1:f0:4a:67:15:6f:f4:3d:a7:
ae:00:85:e0:84:cf:4e:00:7c:46:ce:cd:d9:17:88:
87:9a:e9:17:b4:8e:a5:ae:9b:52:71:98:0c:df:79:
ac:93:cc:af:e8:6f:81:aa:6c:62:c1:3d:61:28:f6:
ad:73:7c:73:f5:fc:e1:6b:3e:a1:23:82:c1:3b:bb:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:C4:F6:11:C1:70:0A:DB:64:79:0C:5B:D9:FC:0C:94:DB:EC:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373E62C4FAC811EE95B4F84F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:11:d8:f2:25:5c:a6:89:12:39:c8:66:2e:6a:b2:e4:d6:01:
67:a9:55:9d:41:f7:cb:01:a5:cf:7a:e1:d9:58:04:12:e5:cd:
e1:a8:ad:c9:56:08:e0:2b:d0:08:bc:09:63:2f:b4:85:72:08:
80:59:3a:6c:7b:27:b5:18:38:89:cb:d2:00:0c:75:1c:79:09:
10:7a:22:ae:dc:29:09:fa:ef:f5:5d:9d:bc:76:80:30:4c:07:
ba:c2:65:42:64:85:eb:40:fe:91:bd:78:44:8b:e2:97:5c:39:
73:ae:dc:48:d6:af:c4:26:d5:28:27:4d:6c:d9:d9:37:bb:90:
66:37:67:a8:fc:82:4c:01:a8:b5:7b:ad:3b:88:0f:38:b0:15:
3c:26:d5:f1:cd:ff:1b:da:02:d6:24:8d:b0:32:dd:42:89:fe:
e9:61:88:21:a2:7d:19:42:4e:4f:dd:b0:a1:ad:5e:b2:85:b5:
0b:08:30:50:97:b9:96:cf:ef:b0:f4:9c:40:bc:c6:c2:d4:ce:
93:e0:96:36:5c:5b:99:39:38:5e:eb:6f:4d:55:2b:4c:cc:2b:
34:5e:4c:e7:5b:72:b9:12:75:25:b5:06:7a:df:74:cd:08:bd:
b4:ae:5e:ee:0f:f7:97:77:6c:2f:7e:28:f1:82:12:63:82:8f:
48:6b:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org