Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFFD9BC156111EE881523574AD9E6FC.roa
File: 3AFFD9BC156111EE881523574AD9E6FC.roa (raw, json)
Hash identifier: VgbOAn50g6GqfXnvStlPlO1Q3QG8xPpRVu4XB/Ta5Jc=
Subject key identifier: B3:1E:0B:23:E6:7B:C8:E8:72:36:7F:4E:14:1F:D2:BE:FD:F0:D4:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFFD9BC156111EE881523574AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:09:44 +0000
ROA not before: Wed 28 Jun 2023 03:09:40 +0000
ROA not after: Wed 01 May 2024 03:09:40 +0000
asID: 140224
IP address blocks: 45.194.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11656 (0x2d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:09:40 2023 GMT
Not After : May 1 03:09:40 2024 GMT
Subject: CN=649ba478-b735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:a6:49:84:ea:93:29:6c:61:1e:ab:00:22:
e3:7c:5d:fd:cb:42:7e:06:84:38:23:a1:a3:02:2b:
1d:7f:69:f7:ed:01:37:0d:75:f6:c1:fe:2a:f9:51:
be:c5:88:3f:97:67:db:a4:e4:58:9a:09:6f:db:fe:
72:60:1b:cd:5b:02:96:6d:b2:cc:d9:4a:b2:c8:d6:
89:d4:89:a1:52:49:d5:90:9b:75:f8:df:89:c5:34:
55:39:dd:da:51:3a:22:bd:e2:79:ba:f5:e7:41:34:
a1:7e:61:23:d3:89:55:bb:f4:76:81:89:86:3c:c0:
78:89:78:97:be:7d:99:81:37:31:d4:32:9f:ae:b7:
29:5a:2b:13:42:f7:19:a1:fe:b9:3d:71:00:48:1a:
e9:06:b0:eb:f4:91:f7:0d:9c:68:82:07:87:51:fd:
38:4d:fb:e0:d0:e6:91:64:ef:fa:09:64:34:ef:a9:
34:5f:2b:be:1d:69:4a:e6:dc:ae:d3:de:fe:1d:89:
17:fa:09:37:9c:aa:6a:48:93:3d:05:9f:51:ed:ad:
97:4e:9a:3d:65:6b:8e:62:de:c6:38:17:6d:c2:35:
ba:05:c2:ea:3b:98:87:e7:15:57:cd:1b:ad:19:45:
9b:bb:87:95:4f:d6:34:bd:a5:66:77:a9:35:56:f6:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:0B:23:E6:7B:C8:E8:72:36:7F:4E:14:1F:D2:BE:FD:F0:D4:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFFD9BC156111EE881523574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.19.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ac:cc:91:36:ff:00:a6:40:c5:d3:1e:db:33:f4:a5:e7:91:
4e:46:fb:26:20:a4:31:cb:e3:ca:71:e4:85:89:da:89:e2:36:
83:5d:22:4c:08:e5:94:b8:b0:86:81:f3:fd:b9:83:16:10:36:
db:84:c7:c3:49:18:75:7b:10:60:18:d0:69:7b:ab:83:6a:01:
dd:7d:a1:fb:45:3c:1e:1a:9c:bd:4a:fc:5b:f4:d0:23:53:90:
b2:8d:d7:0b:c4:b2:63:f0:85:ea:5c:55:36:23:91:be:f9:67:
df:4b:fa:64:00:b1:3e:64:7c:6e:7b:d4:95:c7:81:37:97:01:
05:4f:fc:02:1a:95:de:f9:21:ad:69:03:fa:85:b3:c3:e9:b3:
15:c4:96:92:62:93:ae:c4:9d:9c:5d:08:48:72:dc:4c:52:9b:
6d:38:0c:a6:1a:f1:6e:b6:ec:f2:6f:dd:13:c4:9c:b0:9f:19:
58:0e:82:58:a6:0c:d8:b8:83:71:c7:e7:5f:88:f8:ed:b3:49:
4b:2a:c7:12:c7:1c:64:72:57:a8:24:e3:b6:f9:1a:b3:1e:36:
7d:62:ae:77:63:00:3f:4a:ac:41:11:d9:7d:55:f6:72:df:0d:
1e:99:e2:47:2d:0b:62:d6:40:f9:39:c0:38:7b:44:91:52:4b:
01:aa:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:38:37 2024 by rpki-client on console-ams.rpki-client.org