Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5822A5E038A11EF82415043017001B1.roa
File: D5822A5E038A11EF82415043017001B1.roa (raw, json)
Hash identifier: l9a7pRjmncjYYrA2e+UPgc/tUuZBYXqsXqPRfxd2p90=
Subject key identifier: F7:39:4D:2E:B3:B9:E3:F6:79:D9:A2:27:0E:CD:1B:E5:D2:E9:EE:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5822A5E038A11EF82415043017001B1.roa
Signing time: Fri 26 Apr 2024 05:07:10 +0000
ROA not before: Fri 26 Apr 2024 05:07:06 +0000
ROA not after: Sun 05 May 2024 05:07:06 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34252 (0x85cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:07:06 2024 GMT
Not After : May 5 05:07:06 2024 GMT
Subject: CN=662b367e-4ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:85:91:e1:67:2f:51:a7:49:45:25:5b:df:
0a:46:2a:53:2f:d6:34:38:04:15:66:a0:96:7d:15:
a4:58:51:15:9b:d5:02:55:0f:40:28:6f:c4:07:02:
41:3b:24:f6:8e:19:e3:a6:f6:c1:e4:c3:39:6f:ac:
b3:5c:cc:95:a1:84:12:cc:a0:0e:8b:e8:ba:d1:48:
99:ec:c5:e6:06:9a:f0:28:bb:7d:da:4b:8f:ac:50:
c1:ae:ea:df:1a:aa:b1:60:93:9c:cd:29:d3:40:ad:
f0:22:ee:42:ac:a9:84:e7:2d:66:2a:fd:ff:e6:1d:
8d:5f:df:60:7c:61:9d:13:35:12:5c:ca:ee:f3:a6:
a6:fd:bb:f0:dd:43:89:04:7d:61:99:d0:b7:19:36:
26:46:fe:5a:dc:d1:15:e1:93:a8:f5:95:46:12:b6:
40:b9:a3:ac:65:eb:77:0e:97:47:c2:63:a5:95:1c:
ce:9b:9e:39:48:b8:e6:30:57:ed:97:3e:f6:f9:9c:
2b:87:e2:fc:09:9f:da:78:20:07:39:38:e9:b4:7f:
03:2a:07:f5:17:45:76:8d:bb:38:e6:b7:89:2f:43:
58:d6:f6:1a:01:62:7d:e5:34:42:a4:4f:66:05:7b:
80:d9:1c:49:0b:39:58:cd:f2:3d:79:52:6b:ae:49:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:4D:2E:B3:B9:E3:F6:79:D9:A2:27:0E:CD:1B:E5:D2:E9:EE:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5822A5E038A11EF82415043017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
42:50:9f:e0:b8:78:5d:0b:8b:38:94:03:4d:d9:42:e0:ba:bd:
36:f0:b9:02:e1:c7:0c:14:09:0d:d1:06:8f:59:51:b5:67:e1:
9d:20:1d:bf:ed:02:e7:7b:9c:66:f1:36:d0:cf:a4:c1:64:07:
23:e9:1f:f4:ec:fd:20:a2:6e:36:f9:75:fa:45:2f:97:dc:07:
5c:dc:15:22:27:45:d2:4b:ed:da:ea:0a:e0:fc:2e:5d:8f:26:
a8:be:42:59:a4:ae:06:c7:d6:e2:30:11:6e:ee:ce:21:3a:25:
45:69:53:7a:23:b0:06:ed:39:64:79:dc:08:1a:87:1e:10:44:
7c:92:ee:99:1f:ae:b6:fd:0e:79:af:26:c8:69:de:0a:f8:85:
46:ce:36:0c:0c:80:5f:d0:3d:8e:06:a7:24:46:94:05:5e:32:
cd:1f:3e:d4:85:f3:1e:bd:32:c6:b5:3f:7d:d1:af:1a:94:45:
13:7d:56:1f:34:1d:de:84:96:5f:3f:80:b4:e4:d3:eb:40:08:
ee:b5:7b:87:6e:3d:62:9a:c1:4f:ce:25:68:71:c6:8e:7f:bf:
09:b9:79:b0:b4:e1:ce:3c:91:8c:8e:2e:aa:27:05:e4:d4:a5:
87:e2:ab:91:41:ab:69:b8:43:47:64:0e:f4:bd:12:c6:cf:66:
aa:8f:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org