Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2EBC443B1A11ED902A19C6F1222468.roa
File: 0A2EBC443B1A11ED902A19C6F1222468.roa (raw, json)
Hash identifier: ykmGzx6T5H1Y0DD1DtQEyr4RdKqUU1yNdiJNZop6JhQ=
Subject key identifier: 6C:EC:CE:EA:99:87:9B:63:C0:43:C7:DE:91:14:B8:31:A1:3A:DC:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 185C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2EBC443B1A11ED902A19C6F1222468.roa
Signing time: Fri 23 Sep 2022 08:30:54 +0000
ROA not before: Fri 23 Sep 2022 08:30:51 +0000
ROA not after: Fri 30 Dec 2022 08:30:51 +0000
asID: 328608
IP address blocks: 45.202.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6236 (0x185c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 23 08:30:51 2022 GMT
Not After : Dec 30 08:30:51 2022 GMT
Subject: CN=632d6ebe-b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:2b:dc:01:10:62:6f:7d:3f:a1:3a:5a:d5:
f7:ab:9f:e4:02:1f:96:37:c4:34:e9:bf:7f:7f:0a:
ae:39:6f:89:b2:16:76:a6:7c:34:31:bd:cf:a5:92:
6e:60:73:65:2d:19:b6:9b:ce:a8:95:e1:22:c9:be:
07:25:51:16:3d:09:08:7a:81:aa:b0:36:4e:36:34:
aa:01:10:42:d6:50:de:b1:d7:b4:4f:cf:44:1b:b6:
9c:af:7b:6b:9d:24:cc:e1:27:b1:26:66:8b:c0:cb:
2c:ef:94:76:b8:2f:10:8b:28:c9:c8:86:e0:ed:3f:
b8:f9:45:db:dd:11:af:64:a1:6a:38:d0:66:ad:4f:
72:83:f3:bb:a9:80:bb:c0:ad:5a:4c:ae:25:f8:57:
8a:b9:a5:27:ac:2a:81:1a:b7:22:47:12:41:56:40:
ad:5b:e6:9f:77:da:7c:95:19:85:5c:0c:7b:9c:18:
fb:6e:74:3b:ed:b8:4a:69:d1:ca:7a:e4:23:b5:fd:
75:4a:76:c6:1a:0c:a6:ab:f8:b2:84:64:4c:9c:e9:
db:2d:57:e4:a3:e2:fa:62:74:52:b9:4b:f5:ac:59:
26:e0:6c:97:6c:53:ea:00:ae:ec:18:a9:d5:14:46:
e8:74:ba:cf:a6:0f:09:f0:f5:40:8f:a8:10:41:58:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:CE:EA:99:87:9B:63:C0:43:C7:DE:91:14:B8:31:A1:3A:DC:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2EBC443B1A11ED902A19C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:35:07:0f:92:26:e2:a5:8f:cf:6b:12:47:4d:6b:a0:bf:74:
79:ce:e1:d6:45:a7:84:ea:06:38:ba:61:cc:a0:2d:20:c1:e1:
2b:dd:3a:bc:d7:95:56:6f:86:d9:ae:6d:da:6c:e7:bd:03:cb:
27:04:ef:a8:35:6b:e6:aa:e5:3e:04:35:5e:4d:5c:ef:92:ec:
a8:ac:82:b1:c2:ac:68:05:fc:bf:3e:23:89:e9:1c:a2:55:bb:
89:93:65:8c:fe:ce:77:92:7a:eb:d3:10:01:0c:88:1e:9f:e2:
f3:f1:12:b7:6b:9a:01:5f:c3:41:2e:35:ef:7f:74:7c:e2:4a:
cb:64:6f:0e:43:41:3b:ff:ab:48:1b:ae:26:ae:f9:31:6b:30:
8e:cd:7c:a4:01:a2:48:64:f9:e8:4e:4c:db:b2:34:6c:46:18:
74:3c:92:d4:94:93:2f:92:76:fd:09:73:24:1c:50:66:f2:f1:
59:c7:13:60:3c:ca:c5:ba:56:2d:b5:46:09:f1:ea:cf:cc:7e:
bf:04:91:e3:19:53:a8:77:f4:31:19:10:d2:ee:58:68:76:ec:
bf:0a:03:9f:65:8b:16:58:1b:00:d2:49:14:a1:f5:56:9a:6f:
53:86:b5:76:b6:2f:a1:ca:22:46:4b:45:82:47:6a:b3:fc:eb:
40:20:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org