Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7832469A3F5311EFAA55AD41762E951A.roa
File: 7832469A3F5311EFAA55AD41762E951A.roa (raw, json)
Hash identifier: WkCBbjftmhzHoqWkZWFfNpM2ZjNPtPshF9U7s3n/dnU=
Subject key identifier: 12:E0:31:81:A5:E9:F6:F3:F6:6F:06:57:B2:61:02:37:AB:53:9F:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7832469A3F5311EFAA55AD41762E951A.roa
Signing time: Thu 11 Jul 2024 07:02:00 +0000
ROA not before: Thu 11 Jul 2024 07:01:57 +0000
ROA not after: Fri 02 Aug 2024 07:01:57 +0000
asID: 139646
IP address blocks: 45.201.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39814 (0x9b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:01:57 2024 GMT
Not After : Aug 2 07:01:57 2024 GMT
Subject: CN=668f8368-6c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:60:1a:55:d2:2e:56:59:cc:c0:9b:3c:07:
58:5c:ae:86:ed:6f:0e:45:a6:45:38:70:80:4a:10:
98:bc:4c:ac:48:0c:bb:84:47:f2:61:8d:82:f0:2f:
98:49:81:cd:4d:69:40:c3:ba:10:58:a1:04:96:93:
9f:c3:58:42:b3:f6:77:c8:d1:8f:5f:2e:76:37:62:
86:d9:68:ec:5d:8d:25:ad:6b:03:c5:f9:dd:dc:fa:
5c:64:bf:e2:6b:f5:90:90:7b:6c:a0:e6:12:55:de:
dc:0f:86:79:e1:ac:7f:8a:72:d6:91:35:a5:d9:cf:
7f:33:fd:8b:9d:c0:cf:28:6d:02:57:c0:04:a8:65:
51:08:17:17:d7:70:c5:03:bb:b4:cc:91:ee:8d:ab:
23:b5:e3:47:7c:9f:95:8f:0b:e7:06:43:f4:f0:57:
4b:fd:dc:b1:c5:66:ff:7f:aa:63:47:6c:31:84:d8:
f4:3e:3d:d9:e2:aa:cb:86:58:de:4c:a4:8e:c8:3a:
61:72:c6:49:ac:93:2d:71:cf:19:0d:ed:e3:96:44:
2e:67:78:2d:da:62:0d:9d:cf:12:c3:1c:de:4c:5f:
f5:ac:27:fc:3b:d0:b9:a5:c7:84:d5:07:31:5e:54:
e8:49:31:14:f1:1a:ec:a2:eb:28:f5:b9:9d:05:23:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:31:81:A5:E9:F6:F3:F6:6F:06:57:B2:61:02:37:AB:53:9F:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7832469A3F5311EFAA55AD41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:8f:9b:a9:25:09:b4:65:2a:11:df:9e:7e:7a:5e:6a:cf:0e:
28:9c:7c:42:7c:42:17:28:3e:b7:7f:7f:4d:75:18:7c:9c:5e:
5f:84:91:7c:9f:03:b9:d8:d1:20:ce:b3:1c:c6:67:1f:27:9b:
0b:e8:83:6a:83:09:22:6e:c7:bf:f2:e2:2f:a5:cd:88:37:b4:
50:4a:42:6b:f0:84:2e:3b:e4:88:f5:7e:c8:03:c8:13:17:89:
f6:05:c5:f0:f4:53:5a:a2:82:71:5a:e9:f2:ec:c0:fc:51:44:
4e:47:95:6b:e9:6a:d0:6b:2b:cd:37:e9:4a:88:23:0f:ad:3a:
80:59:33:c6:33:26:17:7e:ec:1c:ca:e1:06:48:e7:ab:89:e4:
67:d6:10:43:d7:c8:92:e1:c8:49:03:fd:64:6a:f2:2c:56:2e:
7f:e7:dc:61:f9:9b:72:28:0a:28:6c:ef:23:8b:7e:22:a5:88:
d4:7f:54:0f:78:86:e9:76:52:a4:74:38:12:28:8e:15:29:39:
3c:53:66:6a:64:71:43:33:d0:f4:8c:d4:12:d5:b9:e2:e5:25:
d3:7c:95:37:39:80:c3:9a:e9:3f:3f:00:0e:8b:d7:9e:19:8b:
a0:80:4c:31:df:2f:a9:8d:33:67:81:67:7b:6d:f4:b5:73:2b:
12:78:46:06
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJuGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzExMDcwMTU3WhcNMjQwODAyMDcwMTU3WjAYMRYw
FAYDVQQDEw02NjhmODM2OC02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8pgGlXSLlZZzMCbPAdYXK6G7W8ORaZFOHCAShCYvEysSAy7hEfyYY2C
8C+YSYHNTWlAw7oQWKEElpOfw1hCs/Z3yNGPXy52N2KG2WjsXY0lrWsDxfnd3Ppc
ZL/ia/WQkHtsoOYSVd7cD4Z54ax/inLWkTWl2c9/M/2LncDPKG0CV8AEqGVRCBcX
13DFA7u0zJHujasjteNHfJ+VjwvnBkP08FdL/dyxxWb/f6pjR2wxhNj0Pj3Z4qrL
hljeTKSOyDphcsZJrJMtcc8ZDe3jlkQuZ3gt2mINnc8SwxzeTF/1rCf8O9C5pceE
1QcxXlToSTEU8Rrsouso9bmdBSOHVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBLg
MYGl6fbz9m8GV7JhAjerU581MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83ODMyNDY5QTNGNTMxMUVGQUE1NUFENDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcnWMA0GCSqGSIb3DQEBCwUA
A4IBAQAvj5upJQm0ZSoR355+el5qzw4onHxCfEIXKD63f39NdRh8nF5fhJF8nwO5
2NEgzrMcxmcfJ5sL6INqgwkibse/8uIvpc2IN7RQSkJr8IQuO+SI9X7IA8gTF4n2
BcXw9FNaooJxWuny7MD8UUROR5Vr6WrQayvNN+lKiCMPrTqAWTPGMyYXfuwcyuEG
SOerieRn1hBD18iS4chJA/1kavIsVi5/59xh+ZtyKAoobO8ji34ipYjUf1QPeIbp
dlKkdDgSKI4VKTk8U2ZqZHFDM9D0jNQS1bni5SXTfJU3OYDDmuk/PwAOi9eeGYug
gEwx3y+pjTNngWd7bfS1cysSeEYG
-----END CERTIFICATE-----
Generated at Fri Aug 2 10:00:17 2024 by rpki-client on console-ams.rpki-client.org