Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79F7B2404A5611EFBDB3CF4C762E951A.roa
File: 79F7B2404A5611EFBDB3CF4C762E951A.roa (raw, json)
Hash identifier: NPcCx5lYmX2FMlCu0VVVZsS9aQxLsiivjUChspVT5gA=
Subject key identifier: 6F:4F:2C:61:6C:78:21:10:24:06:62:8C:2C:BC:E8:BF:70:EE:70:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79F7B2404A5611EFBDB3CF4C762E951A.roa
Signing time: Thu 25 Jul 2024 07:21:15 +0000
ROA not before: Thu 25 Jul 2024 07:21:11 +0000
ROA not after: Fri 16 Aug 2024 07:21:11 +0000
asID: 142062
IP address blocks: 45.204.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40855 (0x9f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:21:11 2024 GMT
Not After : Aug 16 07:21:11 2024 GMT
Subject: CN=66a1fcea-70e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:23:80:09:c8:ab:e2:e6:7f:23:2e:8e:78:
fa:6e:1f:81:53:fe:75:3f:62:8f:0e:22:dd:b1:ed:
bf:d2:87:fe:9c:bd:99:21:dd:8d:c8:dd:12:5c:09:
51:01:94:4a:32:51:b3:0d:39:e2:fc:d2:f3:a4:d9:
ac:91:b9:c4:e4:4f:3a:18:bf:d3:21:fc:a3:b5:17:
bf:10:52:0f:94:c4:e4:b0:61:af:f3:5e:4a:32:11:
49:30:11:10:94:9e:13:81:ef:c2:0b:c1:e6:c4:92:
d0:2f:47:81:63:1e:28:6e:f7:99:ab:9d:ab:2c:8b:
55:22:7d:15:46:83:00:e3:56:8f:06:a9:33:d5:a9:
a4:c7:72:7c:08:bf:35:e5:48:3f:12:89:17:f5:88:
d1:cb:5d:f2:de:53:7e:fe:23:e4:f0:7e:38:91:b5:
e0:90:11:96:35:75:cb:db:22:0e:75:7f:0d:bb:3c:
c7:c2:c7:a4:01:6c:49:96:88:6b:af:07:2e:e2:12:
29:d9:ae:1f:f9:1f:30:66:12:7c:eb:e9:b5:cc:3e:
0f:7c:ea:ff:55:4b:07:0c:06:4a:7a:b3:c6:39:13:
85:03:ff:c7:d3:a2:c7:7b:18:75:d9:95:f8:80:cd:
8f:b7:bb:1f:9d:60:8c:84:6a:c1:db:1a:1a:5b:47:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:2C:61:6C:78:21:10:24:06:62:8C:2C:BC:E8:BF:70:EE:70:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79F7B2404A5611EFBDB3CF4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ee:ab:4b:3c:68:73:1e:34:4b:cb:a5:28:69:97:a1:ce:3c:
49:a2:e4:13:1f:bb:c4:a2:8c:5b:18:e6:86:ba:44:34:01:75:
21:f4:ec:e3:29:f1:03:f7:8a:8b:ac:0b:c6:b3:79:5b:3b:dd:
dd:16:09:28:a6:0d:2b:24:a9:89:9a:ae:1e:76:ab:3f:e5:4d:
d5:6c:34:30:b8:2d:d8:53:ad:af:0f:a5:38:f4:e2:28:35:e2:
1d:39:26:f8:73:50:94:e3:24:d6:11:4d:20:6c:11:18:56:31:
01:eb:9a:29:cc:5f:94:bc:be:9b:b3:f5:d9:0a:6f:e7:24:da:
bf:aa:18:2a:e4:e1:3f:8e:95:3a:70:44:bc:fd:58:73:a3:02:
2b:30:04:cd:d8:60:53:a4:96:ce:2f:03:67:5c:0a:82:24:25:
04:a9:b8:1f:9d:e8:92:11:f1:85:a8:97:a5:35:3a:a7:48:e9:
0c:d4:26:3a:9e:ea:2a:b0:39:b9:ba:aa:79:4f:d9:0d:96:fb:
83:3b:12:f8:fe:4e:2b:9f:11:8a:fa:dc:c3:28:e5:95:2d:89:
6d:c2:4a:5a:e7:78:27:ce:87:85:7a:d5:21:ab:df:9c:ec:7e:
60:98:a3:b5:dd:7b:48:d4:44:89:4e:0c:8e:b2:ca:b5:12:4d:
97:99:94:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ+XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDcyMTExWhcNMjQwODE2MDcyMTExWjAYMRYw
FAYDVQQDEw02NmExZmNlYS03MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm3MjgAnIq+LmfyMujnj6bh+BU/51P2KPDiLdse2/0of+nL2ZId2NyN0S
XAlRAZRKMlGzDTni/NLzpNmskbnE5E86GL/TIfyjtRe/EFIPlMTksGGv815KMhFJ
MBEQlJ4Tge/CC8HmxJLQL0eBYx4obveZq52rLItVIn0VRoMA41aPBqkz1amkx3J8
CL815Ug/EokX9YjRy13y3lN+/iPk8H44kbXgkBGWNXXL2yIOdX8NuzzHwsekAWxJ
lohrrwcu4hIp2a4f+R8wZhJ86+m1zD4PfOr/VUsHDAZKerPGOROFA//H06LHexh1
2ZX4gM2Pt7sfnWCMhGrB2xoaW0dWXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG9P
LGFseCEQJAZijCy86L9w7nD0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OUY3QjI0MDRBNTYxMUVGQkRCM0NGNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxeMA0GCSqGSIb3DQEBCwUA
A4IBAQAu7qtLPGhzHjRLy6UoaZehzjxJouQTH7vEooxbGOaGukQ0AXUh9OzjKfED
94qLrAvGs3lbO93dFgkopg0rJKmJmq4edqs/5U3VbDQwuC3YU62vD6U49OIoNeId
OSb4c1CU4yTWEU0gbBEYVjEB65opzF+UvL6bs/XZCm/nJNq/qhgq5OE/jpU6cES8
/VhzowIrMATN2GBTpJbOLwNnXAqCJCUEqbgfneiSEfGFqJelNTqnSOkM1CY6nuoq
sDm5uqp5T9kNlvuDOxL4/k4rnxGK+tzDKOWVLYltwkpa53gnzoeFetUhq9+c7H5g
mKO13XtI1ESJTgyOssq1Ek2XmZQ8
-----END CERTIFICATE-----
Generated at Fri Aug 16 10:13:43 2024 by rpki-client on console-fra.rpki-client.org