Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/526D2C423EA211EF8A49058C762E951A.roa
File: 526D2C423EA211EF8A49058C762E951A.roa (raw, json)
Hash identifier: 3z9kwPSCZahInKvemtyV+NI4ZiKHmmHnrAWBxFbYMYg=
Subject key identifier: E9:03:DA:EC:68:66:92:FE:23:CB:6D:D2:BE:E1:28:D9:E1:3E:E3:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/526D2C423EA211EF8A49058C762E951A.roa
Signing time: Wed 10 Jul 2024 09:53:56 +0000
ROA not before: Wed 10 Jul 2024 09:53:53 +0000
ROA not after: Fri 02 Aug 2024 09:53:53 +0000
asID: 139646
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39690 (0x9b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:53:53 2024 GMT
Not After : Aug 2 09:53:53 2024 GMT
Subject: CN=668e5a34-064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:d3:3d:20:4b:9a:08:3e:6f:cd:d6:00:c6:
16:ad:46:9c:8e:26:e9:67:c9:cc:fd:0d:9f:aa:79:
c7:62:60:72:2d:ce:62:96:25:76:3f:8f:72:8a:50:
32:54:f8:d7:69:d6:c7:83:cd:ff:f2:19:f7:f8:61:
3f:5d:b3:c1:66:87:fc:de:47:b1:a7:36:5a:fa:ec:
19:12:3d:ff:c6:3d:fa:08:ab:3c:2a:87:68:e8:75:
d1:27:16:0f:27:6c:25:fa:e4:7a:29:a5:c4:d2:57:
86:2b:80:a6:f6:35:68:57:6a:80:11:58:7f:4d:dd:
5b:f2:8d:f4:41:c7:90:de:d3:28:4a:cf:59:5e:31:
c9:2c:07:ad:5d:37:ac:9d:1b:c8:0b:e1:26:5b:6f:
a5:53:3e:0e:c9:69:45:c2:11:e3:30:3f:87:d9:cc:
b7:59:fa:09:54:b6:30:33:0c:9c:eb:1a:3d:76:93:
97:af:a3:2a:29:db:1b:be:78:6d:92:29:8b:3d:ee:
e5:ad:b7:47:84:3c:60:74:d0:34:5b:85:39:fa:2c:
e7:b2:18:8b:66:c8:80:91:2b:23:ed:9d:56:a2:12:
a7:18:35:f0:9f:8c:fa:66:3a:bd:26:71:b6:38:25:
2f:51:8e:fc:a1:27:5d:cc:42:ca:8f:37:26:d5:86:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:DA:EC:68:66:92:FE:23:CB:6D:D2:BE:E1:28:D9:E1:3E:E3:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/526D2C423EA211EF8A49058C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
34:0e:32:9f:45:39:5c:5d:08:56:54:22:a4:99:ed:76:70:91:
93:d9:2f:58:db:8a:65:7c:79:c6:8e:86:87:05:0d:7d:6f:f5:
3e:66:62:65:a3:f0:cf:c1:f7:b1:b1:57:26:5f:c8:a2:49:f4:
3b:fb:e2:bf:ed:55:bd:8d:92:df:8f:54:e7:4f:53:57:64:04:
1f:e5:02:b9:43:4b:da:db:b7:6c:d2:38:5b:b6:71:f1:6f:e0:
c5:ac:f4:85:a8:97:7f:28:29:01:2c:e2:f4:11:25:0c:53:0b:
82:b7:ea:80:0a:67:e3:a6:be:2e:62:de:c1:df:92:38:4e:fc:
2e:f2:a5:b2:ce:e8:90:50:e5:45:90:48:e6:33:e6:ae:33:4e:
0b:a4:e2:24:d3:51:ab:98:6f:81:71:25:3f:ea:4d:b4:25:59:
f0:49:b2:f5:c5:7d:ca:a0:6b:a2:d1:f0:56:39:06:55:43:64:
e9:79:e9:c8:f5:c7:2a:96:e0:87:cf:8d:00:d7:8d:bd:78:4f:
88:73:09:82:46:c2:b0:47:af:4a:5a:c6:67:6c:8d:2a:21:bb:
63:9b:e1:80:90:a3:af:0f:62:e3:37:01:7c:43:3f:90:c5:17:
b1:a6:df:f5:42:f3:6e:79:dd:99:b0:18:11:e1:6e:bb:d9:7c:
a6:57:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:24 2024 by rpki-client on console-ams.rpki-client.org