Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02174A3AF5C411EC9EEE85A5F1222468.roa
File: 02174A3AF5C411EC9EEE85A5F1222468.roa (raw, json)
Hash identifier: xA24bWsafwnSwcczu1dBVLMjvLolM6JuXPBuHgynsrc=
Subject key identifier: CC:D4:C4:CF:5B:32:60:80:F5:B1:BA:C7:31:7D:52:C8:E3:D6:C8:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1513
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02174A3AF5C411EC9EEE85A5F1222468.roa
Signing time: Mon 27 Jun 2022 02:51:14 +0000
ROA not before: Mon 27 Jun 2022 02:51:11 +0000
ROA not after: Wed 15 Mar 2023 02:51:11 +0000
asID: 35699
IP address blocks: 45.200.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5395 (0x1513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 02:51:11 2022 GMT
Not After : Mar 15 02:51:11 2023 GMT
Subject: CN=62b91b22-a21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:17:b1:6d:a0:9d:c5:8d:52:9a:8e:ae:0c:
81:75:0f:15:27:fe:a2:f6:50:c3:90:bd:81:0f:73:
20:58:a7:1f:67:f9:8c:1d:d7:25:c4:40:30:e1:07:
b5:87:f6:9f:01:4f:f1:b8:c0:5d:31:42:19:7c:55:
b7:1b:c0:44:06:a6:34:90:9d:f0:d0:b8:e3:41:2b:
28:be:19:bd:61:db:dd:a5:18:66:32:aa:3d:b8:f2:
6a:ea:8a:2c:2a:f7:73:f3:6f:40:7b:7a:fb:57:d0:
56:a6:30:ef:e2:ce:65:42:7a:32:a0:06:10:13:bf:
64:68:b3:96:7a:1a:49:ed:0e:67:47:f8:28:2e:48:
6c:9f:44:97:fb:d6:a1:f3:68:3a:b9:ed:95:fd:3b:
d8:50:08:da:d1:4d:cb:80:e8:85:28:53:92:56:07:
32:32:74:15:83:eb:0f:36:1a:9f:43:e8:13:a1:41:
ca:c6:9a:64:34:5b:54:84:21:94:0f:7f:49:f4:f9:
68:69:ac:82:72:44:4c:5c:69:a6:12:13:27:0d:95:
49:1a:e9:29:02:41:8a:64:c9:78:65:36:a3:1c:fd:
b1:3f:93:e4:1b:c7:9d:a7:93:76:cf:4e:65:2c:6a:
c9:19:b9:76:17:b9:7d:cd:6d:25:4b:03:ce:29:f8:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D4:C4:CF:5B:32:60:80:F5:B1:BA:C7:31:7D:52:C8:E3:D6:C8:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02174A3AF5C411EC9EEE85A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:8e:47:7a:81:a6:48:7c:79:a5:a4:af:c0:32:3e:fb:97:
ff:bd:cb:24:13:37:b1:28:b1:b3:69:ce:6d:27:fa:dd:8e:b1:
89:c5:a7:f6:11:39:f4:05:a7:19:2f:f0:8c:93:79:ed:60:36:
3a:40:c5:66:5a:79:26:52:23:1c:cf:19:7e:63:81:a5:8c:27:
f5:ae:7d:1d:bf:46:33:e1:ec:9a:38:59:97:74:97:80:fc:34:
50:68:a0:60:24:3f:b1:03:95:2e:12:32:00:c4:b3:23:0c:48:
88:c8:6d:bd:5d:ca:f8:59:e0:5a:9c:b1:e4:11:21:5c:04:4d:
59:57:47:70:27:8c:a1:b5:59:08:4a:e4:49:3c:1e:93:4c:c3:
6a:ba:11:35:0b:2c:cc:83:de:9a:80:c3:f1:c1:18:e9:20:f9:
15:d6:bc:82:84:69:91:dd:4c:d5:d7:cd:57:e3:37:f3:9a:93:
7f:22:22:e7:10:d0:88:23:84:f2:a2:24:89:5e:cd:dd:ab:da:
44:f4:3c:52:a9:bd:fb:04:9e:85:83:c6:49:6f:ef:21:f5:f8:
8b:2a:e2:62:f1:6b:ae:b4:0b:fe:82:94:7a:0a:2d:fb:98:22:
44:c8:a1:94:96:a4:43:94:4b:63:87:f9:84:e5:ba:e0:bc:3b:
31:ba:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org