Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC49802FAC511EE8E424B38017001B1.roa
File: BDC49802FAC511EE8E424B38017001B1.roa (raw, json)
Hash identifier: GZwv9VAnpVFchq9Qbqy52Etikfr8UaLnB81HGBUsS6U=
Subject key identifier: 96:DB:6F:D1:9E:C5:DB:7D:42:8F:10:0A:0A:4A:61:82:29:67:87:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8260
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC49802FAC511EE8E424B38017001B1.roa
Signing time: Mon 15 Apr 2024 01:16:10 +0000
ROA not before: Mon 15 Apr 2024 01:16:06 +0000
ROA not after: Wed 24 Apr 2024 01:16:06 +0000
asID: 136933
IP address blocks: 45.195.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33376 (0x8260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 01:16:06 2024 GMT
Not After : Apr 24 01:16:06 2024 GMT
Subject: CN=661c7fd9-0b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:6d:ae:4f:ba:5a:e5:31:24:29:ce:7a:6b:
34:f2:5c:f8:f5:1c:d6:49:a5:c2:1f:c2:87:9d:b3:
1a:a4:44:38:1d:64:ed:cb:eb:a5:16:4a:3c:02:9c:
8a:30:a8:2e:ff:0b:f8:7c:a4:4b:53:15:89:06:26:
54:18:62:42:9c:f2:cb:f1:c1:72:75:24:df:34:d3:
86:31:2d:d9:38:fa:e7:a3:85:6a:4d:b0:63:ad:4f:
97:67:1a:5d:6a:47:72:c3:ec:c3:cd:eb:88:25:ac:
f9:78:09:47:8d:28:d0:a6:0d:3c:83:74:7e:34:26:
70:a3:b0:da:e8:1d:cb:02:f0:36:1b:f7:b5:33:41:
b1:95:5c:2a:24:42:97:03:0b:17:ec:04:c3:4b:26:
4b:81:59:cb:d6:82:9f:12:54:68:8f:36:50:dd:84:
0a:f0:d0:8a:28:b0:ba:fb:40:11:a6:d2:e9:ac:fd:
bb:62:ff:53:92:d5:73:e4:d9:1e:11:cd:d1:e2:7d:
b8:7d:7b:fa:24:dd:90:9d:45:ad:fc:b7:8b:f5:87:
27:2b:89:5b:ff:a2:2f:16:72:f1:74:7e:57:00:01:
7b:32:97:45:24:46:26:16:ad:66:42:54:ee:d4:6d:
d7:2c:f7:61:33:19:56:80:87:fe:e4:16:7e:df:ce:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:6F:D1:9E:C5:DB:7D:42:8F:10:0A:0A:4A:61:82:29:67:87:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC49802FAC511EE8E424B38017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6f:b2:b3:79:e7:74:bf:fc:e1:5e:a8:7e:0e:7c:af:29:9f:
1c:19:c9:50:26:1b:01:c9:49:15:8e:b7:11:39:5d:2e:3e:13:
41:b3:71:df:42:07:e4:c1:94:a8:fb:50:d8:68:3e:ec:fc:f9:
68:68:f7:8d:08:2e:b5:5c:50:48:13:c4:c1:f7:da:03:c8:c4:
e8:d1:47:88:3a:de:28:19:eb:fb:97:12:3b:51:ae:78:cb:6f:
ea:0a:d5:78:82:1e:21:7f:11:c2:9a:75:87:32:89:2f:9a:78:
db:68:45:75:52:5b:18:27:5c:e9:44:d1:f1:e7:80:d3:2c:7b:
4f:1f:77:07:84:34:06:d9:aa:31:00:dc:8d:5f:29:87:b0:8e:
03:bb:d1:7c:de:38:86:ea:7f:e0:4c:3e:87:01:ed:24:25:f5:
e7:52:91:df:ed:4d:3d:44:51:03:e5:64:27:7f:0a:58:f8:2b:
8a:39:26:22:4a:6f:e6:fe:ed:b2:f9:c6:16:91:df:23:a7:c5:
89:ec:08:46:eb:77:10:51:41:10:e1:b5:f3:1f:73:b4:18:e1:
a8:61:82:7f:ff:09:fb:e2:db:80:5c:f9:da:e5:b4:99:04:79:
d8:19:aa:65:cb:a8:3c:bc:13:d6:6e:b8:b0:c5:03:9f:6b:03:
7c:84:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:04 2024 by rpki-client on console-fra.rpki-client.org