Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/731C25D8FB9511EE8A25E460017001B1.roa
File: 731C25D8FB9511EE8A25E460017001B1.roa (raw, json)
Hash identifier: lu3xFMeXGlNMzOP1/cUdxsNunVVx8dNZ2dr6htl4P4Y=
Subject key identifier: 21:F9:73:A9:5E:60:7F:81:23:11:26:50:A9:9E:45:58:69:CC:4A:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/731C25D8FB9511EE8A25E460017001B1.roa
Signing time: Tue 16 Apr 2024 02:03:00 +0000
ROA not before: Tue 16 Apr 2024 02:02:56 +0000
ROA not after: Mon 29 Apr 2024 02:02:56 +0000
asID: 141883
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33409 (0x8281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:02:56 2024 GMT
Not After : Apr 29 02:02:56 2024 GMT
Subject: CN=661ddc53-69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:43:72:b5:f9:b8:de:7a:46:8f:39:6c:8b:
9d:b9:1e:e7:8f:e9:01:3a:74:10:7d:2a:9f:73:b2:
0d:5c:c6:f5:7f:8e:43:bd:c3:a6:b0:01:0c:28:25:
b4:21:ac:e8:03:76:e3:63:31:0f:2f:0b:06:72:84:
54:65:bc:0c:fd:f4:12:b5:b4:db:39:94:f5:56:50:
52:61:19:4d:08:11:99:a5:8f:d1:0c:5e:10:23:7e:
b7:12:bc:d4:ed:ff:81:ff:6b:18:42:19:5f:67:a4:
0a:e0:74:de:b6:ef:93:4d:c7:e5:3e:6d:82:3c:bf:
5c:a5:36:3d:db:0c:11:b7:6c:eb:65:ce:ae:4a:12:
2a:19:0d:34:b7:bf:68:f6:51:48:c8:59:53:b8:86:
7d:25:82:46:b6:9b:8d:68:8d:f7:74:16:7d:c8:86:
1c:c9:8a:fd:b8:95:af:24:5c:36:3c:57:7d:97:75:
c6:44:11:0a:f9:e6:b1:f6:90:6b:99:7d:5d:d1:34:
16:86:bc:d9:ad:60:9a:91:df:0c:86:24:a7:fe:49:
78:0a:54:4e:84:b6:0d:7f:4e:50:b7:8e:84:1a:e7:
43:62:ca:9a:8f:bb:05:8d:23:7a:02:63:5e:40:65:
83:88:fb:b4:34:ad:f9:8f:b0:96:3d:9d:61:a0:d7:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:73:A9:5E:60:7F:81:23:11:26:50:A9:9E:45:58:69:CC:4A:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/731C25D8FB9511EE8A25E460017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
10:51:2e:d7:fd:c5:82:3b:8e:1c:17:13:f4:7b:fc:b7:a8:42:
54:01:0c:a4:5a:63:2a:19:4b:2c:79:07:41:38:95:24:c6:17:
51:c7:51:cd:be:1d:6a:d3:41:59:11:dd:ea:5a:14:ae:b2:87:
ce:f1:27:d7:82:fb:8a:0b:22:62:3c:2e:e0:45:f2:34:27:03:
c4:50:55:8a:6f:4a:5f:73:13:5c:c5:50:bc:4b:3f:04:6d:ff:
c4:44:f8:f3:fa:c9:dc:f1:b5:a0:5a:7c:39:47:3e:00:59:d0:
55:26:df:b5:ce:71:66:4a:dc:98:25:d1:a8:c6:29:fd:e7:45:
0a:71:79:58:bc:94:1b:b1:7e:41:21:c9:f6:60:8b:40:51:b7:
83:9b:40:3b:73:66:39:ec:06:0c:6b:2e:01:a2:69:4b:f8:48:
0d:db:9f:d4:f7:e0:40:60:77:8e:d3:62:1c:d8:02:ba:d5:6a:
17:27:1a:b7:cb:cf:0e:9b:cb:22:9a:4f:af:72:76:34:57:0f:
6f:8d:61:62:9e:25:68:59:b3:e3:09:de:78:00:ac:2f:5f:fe:
fd:dd:4c:47:ae:6f:24:09:43:ed:92:f4:0b:b3:45:fe:1e:20:
40:e0:ed:30:80:e7:b6:0a:21:a5:1e:83:58:66:5f:e2:7e:a7:
ab:c6:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:23 2024 by rpki-client on console-ams.rpki-client.org