Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1043FE0DCB11EF881CD254017001B1.roa
File: ED1043FE0DCB11EF881CD254017001B1.roa (raw, json)
Hash identifier: 0EeGQ8EPRsmhmK3BjCxtBO5X8FQK+E82DMSbzV2hQYo=
Subject key identifier: 45:91:14:BE:75:DA:7D:85:C8:BE:2B:E0:6B:4C:86:D5:65:D6:CF:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8905
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1043FE0DCB11EF881CD254017001B1.roa
Signing time: Thu 09 May 2024 06:18:18 +0000
ROA not before: Thu 09 May 2024 06:18:14 +0000
ROA not after: Wed 29 May 2024 06:18:14 +0000
asID: 141883
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35077 (0x8905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:18:14 2024 GMT
Not After : May 29 06:18:14 2024 GMT
Subject: CN=663c6aaa-ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:eb:79:27:29:8e:33:73:81:4f:95:23:3f:
5c:ff:03:68:9b:24:c1:71:51:75:c9:a0:a1:22:43:
9e:ed:07:b4:25:47:ff:7d:d6:7b:7d:fc:c3:eb:97:
10:d8:bb:d7:2f:a0:95:b6:75:18:41:ab:4e:c9:1d:
c1:7c:e5:07:43:8b:d8:c1:0e:10:77:da:f0:67:2e:
4a:b8:f7:a1:6c:d8:8b:d7:27:e4:77:54:1e:a1:6b:
c2:46:fb:b2:d0:a3:c2:b6:74:70:26:9b:9f:b3:45:
4b:1b:7b:1c:55:82:50:4d:ea:e3:70:f5:36:73:a5:
50:e3:e2:17:67:5a:b4:cc:50:ec:b3:de:1b:71:88:
48:4f:49:5b:53:f2:d6:92:95:8e:a6:87:fd:e7:7c:
09:ad:d6:89:68:63:c5:eb:0d:53:e9:ab:80:2f:98:
dc:f9:b1:be:1a:d3:d3:5c:d9:07:6b:4e:49:57:a4:
0f:a0:bd:bc:c3:b5:9f:90:bb:3b:7b:10:b9:0f:9b:
9d:63:ab:5d:9d:9f:f4:78:a3:46:04:0f:63:83:9a:
0c:1b:f2:11:d5:64:b3:43:79:ee:63:0b:ba:cd:cc:
0a:0c:d9:eb:b2:dd:33:36:28:19:34:c8:9d:80:3c:
cd:8d:0a:96:fb:4a:f5:4d:d4:d7:13:2d:27:ff:36:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:91:14:BE:75:DA:7D:85:C8:BE:2B:E0:6B:4C:86:D5:65:D6:CF:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1043FE0DCB11EF881CD254017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
55:0b:b0:72:a2:48:42:d1:0f:00:e3:61:a4:c5:54:3f:13:b5:
e2:d3:0c:b8:74:10:a1:da:46:e7:22:cb:b1:38:78:12:4b:ee:
3f:c9:36:8a:5f:17:98:63:68:fd:11:e9:26:47:2d:0d:e0:f6:
02:5c:e3:4c:f5:ee:e2:a5:4d:63:e2:dd:f4:e4:f8:60:13:c3:
56:ac:67:cd:3d:77:f5:3f:9a:76:3e:a5:75:14:08:4c:ee:c7:
aa:53:d4:8c:58:10:57:26:7f:0c:b9:cf:9f:a0:d8:d4:2d:62:
5a:11:2a:95:43:e8:72:04:c7:54:69:96:5d:17:02:f8:f4:e2:
eb:23:71:07:8c:3c:68:f0:ea:4e:9f:6a:c2:ca:ca:67:6f:67:
c4:1d:1a:ce:fb:d2:da:c9:32:69:ee:f4:6c:d4:28:09:e9:2b:
97:fb:23:d8:99:f9:36:60:3d:e3:15:11:6a:26:24:90:c6:56:
07:33:08:cd:8b:c0:a7:1f:93:85:78:1b:61:69:ef:4f:2e:9e:
be:94:cd:3d:95:d4:e4:c8:6c:34:52:07:26:c9:74:1f:02:63:
37:48:09:d3:1c:ea:99:d7:0e:b9:bb:03:5c:56:90:e1:d7:d8:
08:1c:3c:94:c7:8e:9b:88:90:9a:b2:f6:f4:0b:2c:a7:3b:48:
c7:df:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:47 2024 by rpki-client on console-fra.rpki-client.org