Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED8BEBEF0C411EEA379F68C775412E6.roa
File: 5ED8BEBEF0C411EEA379F68C775412E6.roa (raw, json)
Hash identifier: e3OahFfg5oYXSRTb6n+bwSGRQuEoiWo8PyLvOMmfURM=
Subject key identifier: 11:10:99:30:1A:0A:23:5A:70:EC:0C:5E:E6:DE:B4:BB:3E:7B:92:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8144
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED8BEBEF0C411EEA379F68C775412E6.roa
Signing time: Tue 02 Apr 2024 07:41:09 +0000
ROA not before: Tue 02 Apr 2024 07:41:06 +0000
ROA not after: Mon 29 Apr 2024 07:41:06 +0000
asID: 139646
IP address blocks: 45.201.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33092 (0x8144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:41:06 2024 GMT
Not After : Apr 29 07:41:06 2024 GMT
Subject: CN=660bb695-3035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:31:b0:c1:ff:fc:46:f4:46:cb:28:80:7d:
4a:6b:5e:f9:db:95:e2:05:8d:09:7e:a4:b7:60:bd:
8b:e5:49:33:f1:78:cf:ef:f7:60:22:4b:70:84:49:
fd:65:f9:cd:a3:ce:c5:43:ba:d4:bc:6d:59:22:92:
f6:82:c3:8b:6a:3b:ff:90:9b:97:09:2d:71:c6:9c:
ae:3a:a5:c1:d2:47:b4:ad:92:37:d7:eb:8a:c2:49:
e3:8a:00:2a:17:4a:82:44:7f:91:45:ae:82:15:94:
3d:03:6a:b3:77:b1:33:10:ff:f1:cb:03:38:e9:69:
69:6c:41:0c:fa:1b:00:84:10:01:da:29:3b:36:db:
71:79:2e:ce:2c:f3:60:33:a9:05:69:04:1d:8f:4f:
7c:cf:d3:51:73:f2:4e:b8:b2:55:fb:06:3f:5f:2b:
3b:09:b2:73:dd:f3:d7:aa:d8:97:bd:1b:be:2c:2b:
af:c8:ad:c6:b3:41:9a:71:34:c1:cf:db:92:14:3e:
36:38:eb:1b:ad:b5:63:85:25:f0:cb:6a:56:22:9f:
52:1f:99:bc:9d:7e:43:32:bb:73:4b:01:05:0d:8b:
e9:9a:2b:f3:bd:82:3b:d0:fa:fb:be:e8:f7:89:65:
6e:eb:06:4b:c2:5a:86:ba:e7:19:b3:d4:61:44:38:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:99:30:1A:0A:23:5A:70:EC:0C:5E:E6:DE:B4:BB:3E:7B:92:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED8BEBEF0C411EEA379F68C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.226.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:96:e8:8d:0d:70:d3:bd:28:e2:3e:6f:78:0d:c9:af:f1:8e:
a4:60:b8:f1:d2:7c:c9:7c:34:96:63:12:bc:d4:e8:69:35:51:
a9:fd:00:4a:8e:b2:31:ef:37:a5:2e:1a:39:6e:c1:bf:21:af:
89:2a:e2:35:4c:af:34:9c:8f:bd:7c:94:e6:4e:a8:cd:5c:b4:
ac:9b:c1:e2:ce:8b:9e:e0:f0:ea:3d:f6:b4:33:e2:fe:bd:29:
fc:43:f4:9f:76:f3:d3:41:67:25:74:57:38:68:fa:e5:fb:b3:
ae:ce:c2:95:8a:b9:64:64:8e:c0:18:62:82:d3:ee:6d:3e:44:
91:69:2c:7e:3e:d1:53:05:85:ce:b8:6c:54:07:82:a3:3b:eb:
f3:67:b5:b8:7c:b2:45:11:0c:d0:0f:c4:5d:d4:d7:f1:d0:f9:
70:9b:bf:f6:69:58:12:1a:1b:47:30:9e:ef:e7:7f:03:2a:05:
4c:99:1e:7b:42:82:86:ea:a7:e3:6b:69:c0:22:d1:a3:0e:91:
27:a3:8b:95:63:79:e8:66:d0:ab:81:25:3b:85:5b:ef:28:5c:
8b:7d:a7:45:0b:ad:9e:bc:80:2a:f3:be:bd:cd:84:42:be:25:
e7:03:94:5f:b9:00:d2:1c:09:ed:54:f8:48:bf:e0:9b:75:93:
df:4c:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org