Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAA130E039311EFB52F4D0D017001B1.roa
File: 6BAA130E039311EFB52F4D0D017001B1.roa (raw, json)
Hash identifier: DPeYYS1mAdFZLwTBsUFBXHqkq4xjvDeyBfXf5KyfxMM=
Subject key identifier: 06:A5:3D:3A:99:05:D6:4F:F9:0E:D1:F0:C4:84:B7:79:DF:2C:D7:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 863C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAA130E039311EFB52F4D0D017001B1.roa
Signing time: Fri 26 Apr 2024 06:08:38 +0000
ROA not before: Fri 26 Apr 2024 06:08:34 +0000
ROA not after: Sun 05 May 2024 06:08:34 +0000
asID: 139646
IP address blocks: 45.201.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34364 (0x863c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:08:34 2024 GMT
Not After : May 5 06:08:34 2024 GMT
Subject: CN=662b44e6-fd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:38:fc:9b:81:7d:5c:40:c1:87:e9:7f:d0:
ea:32:ec:8e:67:43:db:d7:c2:da:20:01:f4:4b:50:
17:ca:c3:70:8d:2a:ec:2e:1e:37:fd:c8:f2:be:bb:
82:64:14:81:92:83:81:df:a9:71:b7:30:94:89:7d:
d4:fa:41:d4:11:0b:6a:6d:95:3e:d1:cb:ac:c0:4f:
eb:26:58:83:17:2e:23:7a:46:53:6d:4f:52:f4:e0:
51:aa:72:a0:67:b5:a4:89:90:d0:c8:21:f9:8f:2e:
b1:20:de:5e:f9:30:c2:fa:7b:dc:c7:81:17:e6:c9:
46:17:b1:ad:13:3e:2d:0d:94:cf:c3:a0:7d:49:8b:
01:81:03:38:8f:40:d2:ba:e3:85:3b:f1:2a:30:99:
14:90:d4:89:9d:20:bf:29:3e:39:02:a2:02:41:87:
34:96:c7:e2:f0:7d:1e:b5:de:eb:db:21:22:60:92:
44:45:58:69:c7:6a:cd:af:04:3c:31:ad:b0:d5:a1:
79:9d:8a:c6:9a:61:d1:46:64:4f:8b:c8:55:10:0a:
b7:23:d1:40:77:e2:5e:91:f0:00:2d:7d:3e:16:45:
fe:fa:40:f2:90:00:7a:0d:52:c3:08:14:54:69:a6:
81:16:e3:23:de:36:6f:39:8b:f7:f5:47:9d:24:50:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:3D:3A:99:05:D6:4F:F9:0E:D1:F0:C4:84:B7:79:DF:2C:D7:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAA130E039311EFB52F4D0D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
62:7e:1a:43:3d:0d:fa:66:a3:aa:d5:79:76:b5:ad:34:7f:18:
a7:4e:c8:f8:4b:9f:bb:dd:6c:4f:f1:1a:a3:af:97:2f:6d:99:
8a:29:7b:71:af:0a:99:97:b3:74:6a:e6:94:19:8b:35:0f:3a:
93:22:5b:4d:c6:4a:1c:4f:5a:7f:ea:89:71:b0:ad:62:bf:0b:
dd:87:9a:a7:4a:58:74:d5:a4:a5:c7:7c:e7:9e:5d:90:c1:2a:
5f:7e:a9:96:bd:52:31:5d:37:15:eb:fd:24:8b:84:f7:9f:8b:
5a:32:11:de:21:6f:a1:01:9d:5e:e3:ac:09:17:fb:2d:f0:2c:
09:9c:e4:39:54:50:ad:2e:7b:fa:18:76:bc:74:9d:6e:01:d1:
fa:b7:6a:d9:0c:59:44:04:13:74:42:de:a1:cf:55:fd:da:cf:
08:09:d8:c2:a0:16:5b:07:62:7a:c9:aa:34:17:b6:6d:53:19:
1b:9c:9d:59:03:cb:7f:33:a2:e6:1b:37:6f:cf:44:2e:02:3d:
ed:9c:ed:3c:c0:b0:ac:c4:1d:72:11:17:5e:95:2c:f4:6b:44:
e0:8c:ea:f3:08:48:9b:85:69:5a:75:1c:30:a6:78:54:52:2c:
75:b4:82:19:85:c9:d6:1a:b8:cb:b1:5f:38:4d:b1:cb:7c:5c:
5f:12:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org