Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5EB66FB9E11EE90FD232E017001B1.roa
File: 45B5EB66FB9E11EE90FD232E017001B1.roa (raw, json)
Hash identifier: 4XgmPvyEj3poZFpcmNf+Qx/K2zOS+LAEJNb80zHx6pM=
Subject key identifier: DE:46:B7:49:F2:E6:90:5C:58:02:86:49:EB:8C:6D:22:89:BB:6A:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5EB66FB9E11EE90FD232E017001B1.roa
Signing time: Tue 16 Apr 2024 03:06:09 +0000
ROA not before: Tue 16 Apr 2024 03:06:05 +0000
ROA not after: Wed 24 Apr 2024 03:06:05 +0000
asID: 136970
IP address blocks: 45.195.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33477 (0x82c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:06:05 2024 GMT
Not After : Apr 24 03:06:05 2024 GMT
Subject: CN=661deb21-97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:6c:19:be:49:5d:13:68:60:f3:3c:48:93:
5a:63:61:64:54:11:0c:84:15:41:bc:02:14:09:eb:
b9:03:d2:5b:fb:7d:b9:1d:e0:27:bf:e7:57:4e:bf:
dd:57:76:be:bd:f5:7e:7d:f1:29:e6:62:d1:78:55:
6a:aa:07:cd:0b:d1:32:fe:5e:c0:84:51:48:21:86:
be:4f:7e:e6:8c:85:bb:e6:c8:9f:ce:38:e1:c1:be:
29:67:b3:fe:41:fc:c8:a4:9b:d0:c1:15:17:ce:7b:
d6:71:61:b5:d5:b6:8d:b4:d1:f2:55:a7:60:8a:8e:
6e:7d:3c:51:41:7c:9d:71:8b:36:e7:35:61:f4:e1:
d7:71:be:19:d3:b8:4c:9d:89:a6:ed:10:97:2c:ea:
8a:23:06:c0:2d:ed:60:c7:86:9d:bf:64:f0:27:e7:
b7:4e:55:11:af:5e:ac:1a:e9:8d:e9:89:29:e1:4e:
dc:b8:9c:80:32:f7:d9:dc:a7:89:96:4c:4a:91:a6:
12:93:37:85:26:26:d3:ed:9b:5a:54:83:91:2a:0a:
b0:58:0c:81:80:f3:ff:e5:aa:ed:1e:c5:10:79:30:
94:97:96:5d:a9:63:4a:60:3a:d3:4d:2c:af:c3:e0:
48:55:f4:7d:02:c9:c3:a1:17:53:e4:a4:25:d3:0b:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:B7:49:F2:E6:90:5C:58:02:86:49:EB:8C:6D:22:89:BB:6A:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B5EB66FB9E11EE90FD232E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.203.0/24
Signature Algorithm: sha256WithRSAEncryption
60:44:a9:31:b3:86:81:28:b8:e4:c0:dc:b8:e5:d0:e9:cd:a6:
e5:17:f5:ba:b1:10:1e:ff:7b:ea:9d:02:b7:be:94:a6:67:9d:
63:ee:22:af:e8:a4:4b:d7:3a:4d:28:ad:65:6e:53:3a:76:67:
80:5e:44:8a:f8:aa:8e:1b:39:dd:46:d3:fa:2a:17:e1:e0:9a:
42:51:fd:f6:e7:cc:1a:ae:7c:97:3c:45:9a:cb:94:14:41:7f:
45:e3:71:5e:3e:5f:82:08:a1:64:0c:85:fb:f8:e2:33:a4:da:
3e:a4:42:64:f1:80:26:9c:ea:1b:21:95:e8:4c:6a:89:26:a8:
c9:78:23:42:cb:09:23:60:0f:9f:8e:66:70:68:8b:dd:86:45:
85:2d:76:1e:d0:80:54:c8:be:68:7a:3f:52:ce:35:a9:7a:6b:
c2:78:29:93:72:ca:0c:99:a2:20:0a:c3:cb:55:58:9b:ca:3b:
13:65:52:2d:b5:28:b9:ea:24:82:59:c6:65:4b:0b:f9:9d:59:
06:d9:17:1a:3d:fa:15:46:d7:a8:29:b7:62:fc:db:56:7a:46:
19:ce:e5:8b:a0:96:9e:62:c8:a7:eb:d3:02:57:e9:43:30:47:
b2:45:ce:ca:11:9b:fb:63:85:12:ad:ff:bb:d6:cd:7d:95:d4:
45:c1:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org