Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D1E8F43A9711EF84BE61BE762E951A.roa
File: 88D1E8F43A9711EF84BE61BE762E951A.roa (raw, json)
Hash identifier: /iqV/Key9A6k7HivGzzklntPJYIwUH/I2Lsz6xUp/Xc=
Subject key identifier: 44:44:44:5F:C4:3B:F2:9E:4D:69:06:AB:5E:9F:1B:0F:9B:7E:87:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D1E8F43A9711EF84BE61BE762E951A.roa
Signing time: Fri 05 Jul 2024 06:26:38 +0000
ROA not before: Fri 05 Jul 2024 06:26:35 +0000
ROA not after: Thu 01 Aug 2024 06:26:35 +0000
asID: 39600
IP address blocks: 45.203.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39093 (0x98b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:26:35 2024 GMT
Not After : Aug 1 06:26:35 2024 GMT
Subject: CN=6687921e-7cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:26:cf:b6:60:0d:40:bd:f1:6f:be:51:e9:
a5:96:c5:b3:4a:d6:18:23:95:d2:6b:96:40:5c:0a:
b4:53:3c:84:8b:13:b7:28:9b:34:cb:ee:5f:20:df:
f0:78:f6:71:cd:29:62:c6:00:aa:6c:c9:73:95:e4:
3a:da:e0:7a:fa:6f:a6:e4:76:29:ca:ad:bd:84:80:
69:72:53:bd:c7:9f:98:87:6f:3b:33:c9:71:79:c7:
a3:fe:2e:e5:4c:8b:f9:67:d9:0f:f0:81:e1:fc:f1:
07:7b:ce:60:67:21:49:42:c4:5c:b3:08:6c:b3:e3:
a8:43:b6:38:b7:be:06:74:30:9d:33:b3:87:63:5d:
b2:52:41:40:9e:d2:62:90:3d:76:bd:7a:90:e7:0a:
fe:d2:0a:43:5b:62:65:19:22:13:de:28:2b:17:2f:
32:5d:65:e2:3a:bd:58:a7:17:f0:4d:17:1f:1d:3d:
1d:1a:7e:f7:b5:10:c1:64:da:91:9d:bc:25:35:c0:
93:98:95:9e:59:5a:5d:5a:fa:43:31:55:da:56:24:
e6:fd:0f:e9:3c:1f:79:1f:3c:11:23:8b:be:f0:4a:
51:79:cc:92:b5:0d:b7:bd:0d:c3:92:91:b7:8b:17:
99:4b:85:45:4a:89:ec:40:16:28:19:fc:c1:99:67:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:44:44:5F:C4:3B:F2:9E:4D:69:06:AB:5E:9F:1B:0F:9B:7E:87:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D1E8F43A9711EF84BE61BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
53:b7:db:f1:0b:0b:36:ae:54:7c:75:63:79:fa:a7:aa:80:2a:
25:de:05:5d:28:70:6e:2e:93:07:71:d7:47:e6:e3:ad:13:65:
f1:a8:3a:85:7f:b5:93:1f:da:de:75:e4:3b:e5:0d:c6:a2:66:
f2:13:f7:99:c8:12:93:d2:ba:d1:ec:bf:60:f4:9b:19:56:90:
91:48:7d:25:65:1d:65:7e:e5:d0:e4:3b:bb:d2:8b:55:d6:9c:
fe:3b:7a:3a:bb:40:eb:af:41:f4:6e:57:65:e0:47:75:ec:0b:
ed:da:8e:f4:84:2b:44:45:e1:5a:b1:35:29:f4:69:a8:3c:e6:
a0:30:0d:50:8c:50:3f:e5:35:41:c3:ad:89:99:b3:ab:fa:5e:
7b:5b:eb:a7:74:34:1c:9a:2c:3e:67:fc:d1:e0:77:b0:6d:7b:
14:6c:c8:dc:a3:92:6b:2a:8d:35:11:4e:55:b8:57:81:6d:98:
ea:e5:6c:42:22:92:bc:6d:8b:96:55:81:d8:00:8f:4d:b7:83:
b6:d7:76:e3:df:ca:0a:bd:23:d1:35:f4:4f:99:4e:73:7c:76:
99:7c:8a:3c:bc:e0:88:ff:5b:1c:09:a6:46:af:67:aa:f9:65:
8f:7c:34:86:c4:9d:e5:f5:0f:12:bc:36:3b:72:86:37:d5:01:
83:05:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org