Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23EE67C499911EF94F60E48762E951A.roa
File: B23EE67C499911EF94F60E48762E951A.roa (raw, json)
Hash identifier: Y4ai09i24/XKwW/mBD2jM00M4PW7hgkFKEMNKOc9M+4=
Subject key identifier: E4:BB:3E:5E:40:DF:C1:63:65:10:4A:8B:A9:D6:74:17:9B:49:F8:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23EE67C499911EF94F60E48762E951A.roa
Signing time: Wed 24 Jul 2024 08:49:54 +0000
ROA not before: Wed 24 Jul 2024 08:49:51 +0000
ROA not after: Sun 25 Aug 2024 08:49:51 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40753 (0x9f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:49:51 2024 GMT
Not After : Aug 25 08:49:51 2024 GMT
Subject: CN=66a0c032-4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:6f:39:d3:6d:8f:6e:1d:02:b2:69:32:97:
8d:64:d1:18:53:b8:cd:1e:66:ea:4c:ff:f7:88:04:
f6:3b:36:00:1b:c2:8a:d6:4b:02:30:92:e4:8e:f9:
c4:e2:ad:3e:45:23:d5:48:80:26:01:e8:bf:ce:02:
55:3f:45:41:15:1c:ed:6c:6f:b0:16:5b:db:51:e3:
0f:eb:de:b1:9e:df:a5:7c:0b:bd:68:a6:ab:58:6b:
1d:64:b5:ee:33:75:f9:bc:30:67:52:41:0c:a2:57:
71:21:8f:e8:60:59:81:04:ff:03:aa:f7:62:62:dc:
d2:65:f2:36:11:cc:72:66:a9:25:f9:d0:f5:a0:88:
1b:77:1d:97:e2:67:f5:3e:64:05:9f:e9:45:66:94:
9a:92:c7:a0:71:b1:2f:90:91:f0:8c:df:50:8d:4f:
25:ca:13:28:72:57:6d:a0:ca:c6:dd:36:60:06:60:
ae:2b:03:b2:7e:f9:37:8b:27:0e:6a:bb:70:f3:59:
80:01:71:c8:4c:16:be:2f:05:60:d3:5c:30:09:a5:
a8:f7:4a:f2:8d:4d:a2:04:e1:15:1d:7b:95:17:3c:
58:ef:d6:e6:36:bd:c1:b2:46:c6:08:0d:f1:fa:1a:
bf:79:ef:15:ba:ea:38:9e:be:66:b6:2b:01:fc:ec:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BB:3E:5E:40:DF:C1:63:65:10:4A:8B:A9:D6:74:17:9B:49:F8:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23EE67C499911EF94F60E48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
80:45:0c:0f:b4:b4:04:db:c9:8e:d2:63:b6:b9:4a:c2:f1:7b:
87:dc:e3:ec:fe:3e:51:b6:7a:5f:24:42:bf:15:f3:d6:6d:85:
e9:ed:59:44:cf:cc:29:80:db:7a:74:8b:af:3f:64:b4:7a:be:
b2:43:31:39:c7:88:ea:2e:ea:05:9f:82:57:cf:46:59:b3:38:
b2:8b:89:5b:60:fb:99:e1:09:9b:71:88:73:5d:c8:68:b9:ab:
4b:74:c4:0e:ef:a1:01:20:8e:ee:81:86:19:38:2c:7f:b0:fc:
87:e8:ef:1a:fa:c6:3c:4e:d2:2d:2c:83:90:89:d6:8f:ce:67:
57:31:c4:82:ce:62:ca:df:f0:18:6a:21:01:37:a0:5f:58:29:
e2:76:05:62:a4:1d:d0:38:51:06:7b:86:8f:a5:25:36:f9:ba:
49:ad:ef:02:bf:01:72:cd:54:cd:5f:8a:e7:fb:5c:c7:7a:39:
3a:fe:2a:d8:1f:40:e4:b0:d8:a0:41:8b:22:09:19:7c:5d:4b:
97:e7:e3:bb:fd:0a:ee:69:38:54:b5:54:fc:c8:67:f3:a8:be:
97:7c:95:7a:8c:25:9a:ff:d6:67:96:f3:4c:34:b6:7d:c1:5b:
fd:87:50:51:aa:8a:71:6a:ad:cb:10:99:ae:be:53:27:0e:89:
d0:48:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 04:27:41 2024 by rpki-client on console-ams.rpki-client.org