Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30DE4CE038D11EFBFC7BC5A017001B1.roa
File: B30DE4CE038D11EFBFC7BC5A017001B1.roa (raw, json)
Hash identifier: tdUIjqqp6hixigWz/sZqXJaRpesuIoengmg3Tr5WQi0=
Subject key identifier: 4F:B7:D5:1F:09:99:55:DF:36:DF:55:42:BE:4D:BA:AC:74:A1:13:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30DE4CE038D11EFBFC7BC5A017001B1.roa
Signing time: Fri 26 Apr 2024 05:27:40 +0000
ROA not before: Fri 26 Apr 2024 05:27:37 +0000
ROA not after: Sun 05 May 2024 05:27:37 +0000
asID: 141883
IP address blocks: 45.207.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34288 (0x85f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:27:37 2024 GMT
Not After : May 5 05:27:37 2024 GMT
Subject: CN=662b3b4c-dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:3e:ac:a0:61:55:a4:12:d2:d3:29:ea:39:
18:e3:45:d1:fd:7c:3b:d6:c1:bb:3b:b9:70:0c:f2:
d8:47:c2:b7:95:6d:5b:7a:da:5a:b3:3d:14:36:4d:
1f:51:03:1e:75:ce:bf:9e:44:50:8a:52:7d:75:60:
ab:c9:b6:85:48:43:0a:fb:8f:d4:8f:50:e6:c7:52:
a4:6e:02:60:f0:0b:dc:b0:ad:3c:86:df:6b:d1:7d:
68:86:85:7c:63:4d:03:1a:28:8b:9f:05:5e:87:b1:
48:e3:42:c0:9b:29:5f:f3:87:48:4d:d5:70:1c:a0:
2c:b4:88:bf:88:79:6f:67:59:ab:71:9c:cb:ee:0d:
b2:dd:c4:d4:72:4e:e2:50:41:12:ed:eb:5a:27:34:
2f:d7:6f:0c:6c:73:b5:3a:18:24:4e:5f:47:8e:0c:
e0:48:ee:f2:eb:d1:a4:9a:94:b1:6a:68:f9:c1:6e:
6b:f1:c7:41:15:63:32:c6:29:f3:a9:b4:07:91:cd:
53:7e:49:e8:63:cb:4e:09:37:40:91:dd:6d:ff:10:
e9:4b:ae:d3:36:c3:f9:3a:40:f3:16:a6:9c:d4:43:
88:c7:96:dd:77:30:2c:25:16:e1:02:2a:84:b1:48:
62:89:ef:64:52:f1:fb:f8:f8:d7:1f:e8:a3:39:2a:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:D5:1F:09:99:55:DF:36:DF:55:42:BE:4D:BA:AC:74:A1:13:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30DE4CE038D11EFBFC7BC5A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:65:2c:e0:55:11:d3:44:3b:17:ac:d4:2d:56:5d:e4:03:e2:
92:81:f6:c2:7c:d7:99:41:c7:f9:bc:3c:e1:83:96:6b:14:f7:
99:c2:98:ff:4f:8b:f3:f0:28:81:b5:20:49:e7:78:91:b3:d1:
7a:bb:0f:54:66:6f:8e:e8:6d:31:d1:56:fb:03:77:d1:9f:84:
f4:02:66:d0:49:b4:48:80:21:8c:fb:a3:a2:f7:38:8b:50:16:
be:ad:bd:4e:02:b6:d1:65:cf:20:d8:4e:7c:91:d3:77:a4:25:
1b:f2:4a:10:4e:8a:72:d6:84:f3:b0:a7:4e:20:b3:58:bf:a9:
d1:c6:74:15:b1:87:ce:4a:37:41:4a:8b:43:b5:a7:f0:ca:c4:
30:02:94:2b:f3:b5:44:56:42:f0:04:ff:22:3b:fa:85:fd:40:
29:d5:d9:27:0e:88:f4:91:ba:98:fa:7a:2d:6f:5d:12:63:26:
a0:0a:c3:91:aa:47:ac:df:ef:a1:40:3d:91:64:51:a8:b5:90:
cf:ff:e9:04:4a:42:1d:88:eb:c2:18:9d:17:15:95:27:5a:6f:
18:0c:3b:cd:84:56:c2:9d:ff:12:f2:21:e7:00:32:0d:44:c1:
51:24:29:61:72:52:d8:0f:30:07:06:78:80:64:25:2e:40:17:
b4:8c:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org