Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69AF58C030011EFBB014860017001B1.roa
File: C69AF58C030011EFBB014860017001B1.roa (raw, json)
Hash identifier: TqiMZ7faXh0ezRwPJ66w9Oelw/RYNU9ZBYUAYaCp1MM=
Subject key identifier: 5A:1A:3A:FC:6F:07:BD:7C:98:AF:BA:96:95:0F:67:92:E8:0A:94:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69AF58C030011EFBB014860017001B1.roa
Signing time: Thu 25 Apr 2024 12:38:54 +0000
ROA not before: Thu 25 Apr 2024 12:38:50 +0000
ROA not after: Sun 05 May 2024 12:38:50 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34129 (0x8551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:38:50 2024 GMT
Not After : May 5 12:38:50 2024 GMT
Subject: CN=662a4ede-dec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:f1:b8:00:1c:4d:3f:2d:6d:17:b6:94:6e:
2d:7b:58:a2:67:16:90:88:7a:56:99:eb:b7:53:92:
58:97:75:a7:e5:c4:17:cc:00:59:0d:cb:61:22:8c:
26:30:a1:4b:9b:57:a0:a2:e5:de:fc:94:75:e1:21:
31:e4:1d:a2:b4:38:af:7b:a3:85:d8:dd:ae:41:64:
63:76:5e:cd:3b:6e:dd:2e:05:78:f2:08:b9:3e:e2:
7f:fc:f9:c4:ce:52:a0:3a:57:df:89:05:4b:9b:06:
60:fc:07:64:92:82:5d:da:7e:5f:e8:5b:22:e4:0d:
6c:77:11:85:14:8e:82:6d:65:f4:94:61:a4:64:d0:
b4:f6:3e:87:e1:98:f1:30:49:34:ac:6f:0c:5a:e2:
75:e1:97:30:6e:38:99:d7:67:6d:6c:50:30:9f:76:
53:70:b2:44:06:29:b8:db:1f:9f:29:f9:a5:52:cf:
ee:65:e7:53:84:77:57:8f:2d:c4:31:4a:21:07:0c:
4f:53:18:58:04:7a:ee:74:14:f0:75:e8:f7:bd:5f:
1a:63:93:d0:6b:06:9f:be:84:bf:4f:0d:5a:8e:39:
8a:fc:1b:83:0a:f5:7a:6e:e3:c6:d0:5c:d3:55:b1:
21:9a:c9:b8:32:14:ae:b4:4a:e9:59:d9:42:b5:00:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:3A:FC:6F:07:BD:7C:98:AF:BA:96:95:0F:67:92:E8:0A:94:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69AF58C030011EFBB014860017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:85:20:b7:2c:d9:38:5c:aa:3e:bc:f7:f7:6e:30:6a:60:94:
88:c0:43:f4:60:d4:44:31:cd:95:0f:ae:38:71:15:3b:b0:4d:
52:aa:2d:a9:3b:d4:d3:ec:54:2c:bf:c5:6d:b6:17:eb:ce:f3:
48:16:83:47:72:82:0a:36:de:39:52:27:cb:ac:79:3a:dd:c8:
45:f1:cb:11:86:60:85:ee:41:1f:b1:13:02:b9:a9:42:86:b6:
e3:be:05:86:6a:27:0b:53:87:c1:e0:b2:cb:a7:5b:1d:bd:dd:
94:e7:20:dd:16:4a:01:a2:ca:29:11:2d:f1:8d:fb:a3:d1:b4:
59:be:d1:e8:37:b9:20:53:52:7e:c9:94:0c:56:49:62:88:ec:
7e:32:90:14:e6:35:bf:c7:16:d3:22:17:fd:e6:4c:42:1a:37:
8f:ba:92:49:a5:bb:07:a6:fb:e3:79:10:cb:b8:9a:e5:a6:c2:
7a:32:c5:71:2e:8c:de:98:09:56:ab:9a:3d:86:23:99:a8:3f:
93:f6:df:19:c0:7f:9f:6c:7e:d1:5c:0f:e1:b2:83:5c:6b:c3:
b8:cf:2b:69:fe:3e:22:0e:32:b7:a2:5e:56:a1:8d:17:0a:02:
d2:7d:8d:3e:03:0b:4b:dd:be:c4:2c:5c:52:ad:b4:34:77:bd:
5a:de:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org