Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADD3A1C645A311EFB762915C762E951A.roa
File: ADD3A1C645A311EFB762915C762E951A.roa (raw, json)
Hash identifier: CelpwUzqxnfr5F93g5N6E2HCFs+eUGJiiPvZ5HNbzUE=
Subject key identifier: 48:8C:54:B4:DA:1E:ED:08:2F:3C:13:5A:27:76:16:5A:3E:2D:ED:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADD3A1C645A311EFB762915C762E951A.roa
Signing time: Fri 19 Jul 2024 07:51:17 +0000
ROA not before: Fri 19 Jul 2024 07:51:14 +0000
ROA not after: Mon 29 Jul 2024 07:51:14 +0000
asID: 142062
IP address blocks: 45.204.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40316 (0x9d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 07:51:14 2024 GMT
Not After : Jul 29 07:51:14 2024 GMT
Subject: CN=669a1af5-b9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:92:c1:90:8a:39:dd:93:62:0b:3e:50:93:
f5:10:e9:b8:bb:cb:f9:47:f3:b2:7e:28:0f:a4:71:
02:06:78:d0:4e:03:7f:02:8c:9e:de:6b:d0:69:66:
68:51:62:67:05:7b:08:6c:42:b2:0c:f3:bd:7a:ad:
de:47:df:dc:95:d6:61:0a:5d:17:9f:63:94:5b:5e:
fa:fa:dd:7b:31:10:13:3a:fd:f9:22:52:d7:5b:69:
03:f6:b4:4f:5d:cd:19:25:ab:da:d8:54:07:3a:5b:
af:6b:fa:52:d6:50:fa:ab:9e:88:7f:54:9e:77:05:
8a:4a:7b:53:2c:fc:1a:39:03:55:b2:a9:e5:55:8f:
cd:1c:71:d8:28:43:72:9f:b5:c9:29:03:25:6b:3f:
b7:c6:51:04:03:36:9b:b2:b2:13:17:c5:16:6c:f0:
d6:d1:05:6e:a1:72:19:b2:48:ef:ad:e9:fb:03:63:
3c:ea:4a:e0:09:27:b7:11:d2:d5:4e:a5:f5:85:a0:
c5:8a:fa:ef:fa:41:8e:f7:08:42:9f:13:b7:2f:9f:
bf:5e:e4:93:81:51:03:32:3a:63:b4:cd:44:de:dd:
a0:f9:6c:55:76:7c:d7:21:e5:43:6c:c5:0b:80:89:
c3:18:5e:33:90:97:6e:16:22:82:7e:61:14:c7:cd:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:54:B4:DA:1E:ED:08:2F:3C:13:5A:27:76:16:5A:3E:2D:ED:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADD3A1C645A311EFB762915C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:c9:ee:28:07:49:bb:f7:59:35:9d:07:99:68:5d:d2:41:
9d:37:b6:3f:fa:b5:91:96:72:18:75:ac:d6:4b:33:f9:c7:78:
08:79:cb:de:51:82:55:59:65:84:9d:60:7b:05:b5:5e:5d:e5:
51:7c:85:6d:18:3a:c1:1e:47:72:f1:76:4d:22:d1:30:bd:5a:
00:43:b1:03:cb:74:a2:61:3c:83:bb:36:e5:88:23:d6:e1:de:
05:77:7b:19:ca:9b:0d:32:29:c3:e4:57:47:7b:f7:62:b5:99:
d6:27:ae:c4:81:7a:72:63:05:8d:d2:4e:cb:73:47:05:0b:a0:
bc:4f:32:71:a6:c3:dc:22:b4:dc:e6:f6:bf:90:85:d2:9b:d8:
d7:86:4d:a2:11:4a:25:81:6c:54:b7:c7:c3:ac:a0:cb:64:d6:
8e:57:9f:b2:8b:f6:c5:3f:86:be:06:3e:67:66:26:ba:94:d0:
1f:e5:56:1e:c1:ea:e4:1f:e6:82:14:34:b3:73:af:1d:20:fc:
4f:ac:ac:6f:97:4c:60:d0:e5:5d:63:17:ba:e8:c4:cf:20:05:
be:8b:b7:a2:d4:bc:5d:2a:ee:9f:de:17:61:4e:00:bc:d2:66:
7d:87:7a:32:ce:9b:b0:c9:7b:d4:33:46:eb:ca:85:15:b6:fd:
f9:ed:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org