Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9BF2AF0C511EEB7D10198775412E6.roa
File: E7B9BF2AF0C511EEB7D10198775412E6.roa (raw, json)
Hash identifier: fXppPBeRiP3VKZzgXFCUWNmyZoxhnS5CbMjXqNHvTnQ=
Subject key identifier: D9:88:32:FA:90:E3:11:9E:41:C4:D8:7E:E1:A4:66:38:AE:9D:45:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 815A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9BF2AF0C511EEB7D10198775412E6.roa
Signing time: Tue 02 Apr 2024 07:52:08 +0000
ROA not before: Tue 02 Apr 2024 07:52:05 +0000
ROA not after: Mon 29 Apr 2024 07:52:05 +0000
asID: 139646
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33114 (0x815a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:52:05 2024 GMT
Not After : Apr 29 07:52:05 2024 GMT
Subject: CN=660bb928-c362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:e4:80:d5:50:34:b5:ef:0c:44:89:84:23:
af:50:7f:1a:56:90:60:81:50:0c:cf:fe:30:80:3d:
53:b3:dc:1a:42:36:98:f2:42:92:6b:83:81:d9:82:
ad:35:fe:a1:8f:d0:be:fc:88:86:2c:e5:16:17:62:
8f:19:80:77:78:07:3a:1f:64:b5:96:cd:07:bf:e4:
39:a0:74:e4:67:e2:c2:b3:ee:14:36:eb:22:ac:68:
0d:46:d9:8e:9e:8f:e8:52:d8:ba:a8:f8:71:56:50:
df:43:b9:9b:37:f6:17:f5:e7:9b:5c:f2:ed:b8:1d:
66:cd:10:7f:9c:3e:1b:86:8e:05:3c:91:b3:02:92:
cf:b4:8b:28:0a:ea:be:4c:f7:a7:7d:e9:12:87:42:
c3:1f:73:e5:3a:90:65:55:77:2a:42:fa:d0:c9:c8:
79:b4:4e:78:ce:6f:d5:6c:25:be:01:9d:ca:ba:92:
85:c3:77:de:a4:2c:95:fd:17:32:ef:54:8c:7a:f7:
6b:aa:12:64:74:a1:b5:ca:67:40:cb:1a:b8:c0:cc:
92:7d:ad:6c:eb:8f:e4:28:7b:3e:01:d6:64:40:42:
d5:0e:7a:97:08:12:ed:68:fe:e2:c8:41:63:af:58:
8c:9f:60:eb:ec:d5:03:95:f4:46:0a:3a:f7:85:9f:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:32:FA:90:E3:11:9E:41:C4:D8:7E:E1:A4:66:38:AE:9D:45:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B9BF2AF0C511EEB7D10198775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:60:5d:0e:be:0d:55:0a:af:c0:6d:55:74:e9:5e:08:bc:a3:
fd:b8:f7:63:ec:36:63:d0:25:46:bc:cc:7c:5b:66:91:9f:75:
79:d6:18:70:dc:e3:19:ac:ff:64:2a:9e:c4:53:ae:af:f4:2c:
ae:0a:53:eb:c0:5f:ac:fc:35:9c:9d:2b:33:4c:c6:65:28:7c:
62:9e:9a:dc:e8:b9:bb:d1:7d:43:6a:c5:9c:b3:78:c7:4e:4f:
95:1c:f6:cf:f2:1f:6f:1c:ab:fa:e3:ec:e2:d6:2b:b8:03:fa:
f7:65:26:5a:b5:b9:f2:0e:4f:f9:f4:3e:b5:dc:48:e5:0e:b9:
1e:a1:59:0f:bc:6f:76:d5:30:30:e8:c6:44:2c:73:3f:9d:5b:
7e:91:60:4b:85:69:b1:35:79:85:58:58:25:b2:54:5a:f7:e7:
fd:09:dc:1f:6c:05:e8:cc:cb:5c:fc:a9:58:10:91:25:28:af:
b4:74:84:78:3f:19:93:a9:e6:8e:26:6f:bf:11:ce:73:b1:bf:
02:27:8b:9b:c6:ee:05:62:9e:c1:1a:3e:ea:72:2f:f4:49:f9:
e5:ca:73:04:fe:78:5c:ca:5e:bd:61:01:88:b3:e2:ab:5f:38:
19:3a:35:2f:53:5f:62:aa:a8:5a:56:c4:98:eb:6a:7f:83:0e:
37:96:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:26 2024 by rpki-client on console-ams.rpki-client.org