Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA7C174338411EF86A290BB762E951A.roa
File: FBA7C174338411EF86A290BB762E951A.roa (raw, json)
Hash identifier: ZvTqJrwB9pSsnN3QNQrtLPuYrADfVLBfrPEJ2ZR6cvU=
Subject key identifier: 57:7E:B2:BB:B8:43:A6:46:81:35:C9:67:A0:3E:EF:CC:01:5C:2B:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA7C174338411EF86A290BB762E951A.roa
Signing time: Wed 26 Jun 2024 06:26:12 +0000
ROA not before: Wed 26 Jun 2024 06:26:09 +0000
ROA not after: Sun 28 Jul 2024 06:26:09 +0000
asID: 272854
IP address blocks: 45.195.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38199 (0x9537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:26:09 2024 GMT
Not After : Jul 28 06:26:09 2024 GMT
Subject: CN=667bb484-ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:b4:72:f1:92:59:63:49:a9:a6:c8:d1:ec:
8c:3e:f3:04:f1:52:f5:1d:c0:26:d2:3f:75:39:5d:
53:d6:bd:c6:68:a9:ea:69:77:3b:cb:a9:a0:83:cc:
40:00:bc:be:5b:f7:ff:41:6b:9d:f3:3c:ad:94:d4:
11:98:de:68:1a:30:f4:85:57:19:96:ef:25:d1:46:
44:8a:99:68:48:96:38:e0:16:ac:11:d4:67:e2:99:
06:ba:86:68:23:2d:3c:56:dd:d4:ca:cb:b2:b4:01:
b5:2d:5d:33:f2:a6:99:d4:a8:cc:72:09:4b:ae:1d:
d9:28:8f:75:e8:ac:94:2b:a9:24:e7:6e:76:ac:b7:
85:a6:ac:87:08:b6:78:42:47:a9:27:93:95:63:4d:
db:7a:ed:4e:33:36:b5:70:44:8c:d9:33:62:0f:78:
33:14:68:98:ea:99:3b:fc:27:b8:38:e9:37:2b:9b:
da:12:dd:6f:d7:e8:10:d8:34:d5:ae:78:71:b1:22:
6a:38:56:a0:7c:c2:47:7e:5d:ee:cf:2a:9f:95:ec:
b7:dd:e0:90:43:e9:97:7f:40:1d:be:dc:8b:58:05:
39:b1:b1:20:18:47:d9:b4:ae:15:d2:c3:4a:40:03:
3c:15:40:bf:43:12:a8:34:98:c5:04:14:27:d0:9e:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:B2:BB:B8:43:A6:46:81:35:C9:67:A0:3E:EF:CC:01:5C:2B:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA7C174338411EF86A290BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:32:db:2e:b5:bc:11:2e:92:0b:6a:dc:21:35:be:d5:29:f2:
37:84:21:bd:0d:df:95:ee:3c:51:ff:8a:fb:1c:1a:6e:17:67:
c3:02:67:07:15:97:46:55:2e:ad:6e:1f:dd:11:32:13:d8:c4:
aa:b6:06:7d:0e:75:94:0c:93:16:7b:04:05:c9:0e:e5:00:f5:
c0:e7:f7:d8:da:d2:cc:9d:84:12:c3:9a:79:78:5b:f4:3f:11:
58:98:dc:94:a0:f9:e1:67:86:88:1e:5d:c6:e9:4b:8d:62:cf:
c4:fd:06:ca:0a:23:34:e2:44:8a:b8:de:d1:cc:ed:f1:16:47:
8b:0b:88:d1:8f:97:ea:0c:1e:a5:e9:32:8b:58:76:e2:aa:9b:
f1:9d:f4:b2:17:ea:79:44:0d:02:96:c6:f6:30:e6:1b:3d:50:
45:80:f9:98:37:5b:c2:80:bc:01:91:ff:92:71:82:1e:11:59:
8a:ca:ad:d0:d7:04:1b:4d:a6:48:6d:6a:59:21:84:14:b1:7d:
41:7d:cf:f6:f2:f2:b6:d7:c3:85:16:1f:86:d8:ea:47:4f:0d:
77:23:d3:74:e7:d6:d0:d1:ab:ab:35:92:86:30:b5:2d:a7:25:
36:0d:1f:4b:a7:f4:9b:cd:fb:c5:8e:64:31:e9:5f:9e:a8:68:
a2:01:eb:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJU3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI2MDYyNjA5WhcNMjQwNzI4MDYyNjA5WjAYMRYw
FAYDVQQDEw02NjdiYjQ4NC1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvE20cvGSWWNJqabI0eyMPvME8VL1HcAm0j91OV1T1r3GaKnqaXc7y6mg
g8xAALy+W/f/QWud8zytlNQRmN5oGjD0hVcZlu8l0UZEiploSJY44BasEdRn4pkG
uoZoIy08Vt3UysuytAG1LV0z8qaZ1KjMcglLrh3ZKI916KyUK6kk5252rLeFpqyH
CLZ4QkepJ5OVY03beu1OMza1cESM2TNiD3gzFGiY6pk7/Ce4OOk3K5vaEt1v1+gQ
2DTVrnhxsSJqOFagfMJHfl3uzyqfley33eCQQ+mXf0AdvtyLWAU5sbEgGEfZtK4V
0sNKQAM8FUC/QxKoNJjFBBQn0J6n7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFd+
sru4Q6ZGgTXJZ6A+78wBXCu4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQkE3QzE3NDMzODQxMUVGODZBMjkwQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcMMMA0GCSqGSIb3DQEBCwUA
A4IBAQC8MtsutbwRLpILatwhNb7VKfI3hCG9Dd+V7jxR/4r7HBpuF2fDAmcHFZdG
VS6tbh/dETIT2MSqtgZ9DnWUDJMWewQFyQ7lAPXA5/fY2tLMnYQSw5p5eFv0PxFY
mNyUoPnhZ4aIHl3G6UuNYs/E/QbKCiM04kSKuN7RzO3xFkeLC4jRj5fqDB6l6TKL
WHbiqpvxnfSyF+p5RA0Clsb2MOYbPVBFgPmYN1vCgLwBkf+ScYIeEVmKyq3Q1wQb
TaZIbWpZIYQUsX1Bfc/28vK218OFFh+G2OpHTw13I9N059bQ0aurNZKGMLUtpyU2
DR9Lp/SbzfvFjmQx6V+eqGiiAesi
-----END CERTIFICATE-----
Generated at Mon Jul 29 03:37:12 2024 by rpki-client on console-fra.rpki-client.org