Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1DC5A156011EE81E141534AD9E6FC.roa
File: 00D1DC5A156011EE81E141534AD9E6FC.roa (raw, json)
Hash identifier: sbbEdL55CKmDpuUsJzVnazyBeutuB22I5ZQMp8513Po=
Subject key identifier: D5:D1:59:DD:E3:9D:3F:54:DE:59:E3:5B:CF:20:E1:F0:46:D3:AC:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1DC5A156011EE81E141534AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:00:57 +0000
ROA not before: Wed 28 Jun 2023 03:00:53 +0000
ROA not after: Wed 01 May 2024 03:00:53 +0000
asID: 140227
IP address blocks: 45.207.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11636 (0x2d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:00:53 2023 GMT
Not After : May 1 03:00:53 2024 GMT
Subject: CN=649ba269-1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:68:97:9c:27:69:1e:c0:8c:0a:91:09:dc:
92:4e:d5:21:a5:7b:87:c8:df:5d:e8:56:92:71:17:
88:6d:b7:95:29:5f:7b:d2:dc:66:e8:ec:c4:01:39:
c3:8b:50:f2:ed:d3:7b:fc:9e:79:91:83:10:69:73:
23:ef:25:94:10:bc:f5:06:94:e5:7d:10:a9:6b:b1:
d0:fc:de:89:fc:6d:95:d3:ad:fe:ae:dd:e5:59:5c:
9d:20:89:cd:f9:84:4f:4d:30:e9:70:dc:ef:32:19:
7f:40:11:fe:62:6f:56:57:b9:ee:07:a9:75:4a:cd:
bf:e0:79:04:a3:bc:95:39:15:27:4e:54:b6:8b:0e:
22:7d:c9:9d:be:14:bb:c1:6c:29:7c:9b:64:c1:05:
36:0e:28:d8:81:43:ca:fa:a7:3d:ae:96:6d:dc:76:
96:64:82:9c:07:7b:ad:89:e1:7c:fd:a8:ed:ca:39:
fe:bb:28:b3:a7:31:b7:2f:54:2e:70:88:fa:52:54:
49:29:85:bc:ac:de:82:b5:42:06:9a:8e:9b:2f:a6:
20:05:f4:2d:ad:17:18:71:59:7f:44:9e:aa:b7:2b:
0c:b8:d7:7c:af:0e:fc:f7:fd:0a:8c:1c:08:bc:e7:
5b:99:8e:4a:a2:d6:5f:20:e2:ff:a7:3a:f6:12:95:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:59:DD:E3:9D:3F:54:DE:59:E3:5B:CF:20:E1:F0:46:D3:AC:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1DC5A156011EE81E141534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.15.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d0:14:d8:8d:e3:08:39:0e:fa:5d:2b:29:85:a6:4f:e2:df:
1e:14:44:20:04:69:07:be:2c:89:2a:25:1a:30:69:b6:02:23:
31:6e:30:64:f6:70:00:72:33:62:c6:df:43:f9:43:20:20:1b:
57:37:7f:44:f3:08:bb:bc:96:65:15:2f:2f:a9:92:18:0c:f0:
7a:86:c3:05:0b:ec:58:01:ee:dd:99:60:dc:ec:57:ef:82:ad:
f9:3a:4d:20:63:50:84:82:55:b0:94:bf:f3:03:81:f0:75:ef:
c1:bd:ad:05:9c:41:a7:a2:9b:6b:f6:48:3e:b8:f8:a3:98:46:
2e:de:30:27:59:f6:85:49:9b:39:05:c0:e2:28:51:04:02:53:
eb:64:45:ea:42:e9:77:06:6c:4c:78:9f:ac:29:b2:91:28:77:
75:02:bb:e9:d8:f8:71:0d:f9:db:70:a3:ab:e6:1e:e1:47:3e:
26:a2:68:f1:cb:22:59:6b:e2:86:ba:81:79:cd:fa:46:7d:a5:
3d:2a:55:83:94:ee:aa:88:63:54:18:74:e7:38:a1:30:99:d6:
9e:71:98:0a:ba:44:ab:9a:d8:57:a3:50:89:c5:a9:8a:6c:cd:
b2:1a:7d:86:43:83:7a:60:e0:4d:ac:00:c1:89:6b:bb:12:df:
f8:f3:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org