Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20E883D834DB11EDAAA01BBBF1222468.roa
File: 20E883D834DB11EDAAA01BBBF1222468.roa (raw, json)
Hash identifier: 9x4/1L+EYuet0luFZoQEF5LRmg+RBanMKrybqiT0WaY=
Subject key identifier: 8A:C4:6F:00:EC:87:27:14:8C:A4:4D:97:72:FC:1E:A7:6F:99:F7:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20E883D834DB11EDAAA01BBBF1222468.roa
Signing time: Thu 15 Sep 2022 09:45:27 +0000
ROA not before: Thu 15 Sep 2022 09:45:24 +0000
ROA not after: Wed 31 May 2023 09:45:24 +0000
asID: 1239
IP address blocks: 45.200.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6093 (0x17cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:45:24 2022 GMT
Not After : May 31 09:45:24 2023 GMT
Subject: CN=6322f437-1dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:e7:4b:53:23:ac:75:49:4a:d6:d2:b9:68:
00:cd:58:37:b3:72:b4:03:b6:c4:61:b4:c0:13:3d:
bc:d4:ec:f2:d4:f5:c5:c4:c7:d3:e8:7b:f9:42:46:
9b:85:02:dd:bf:8b:4d:e8:a0:71:20:d4:ec:08:f3:
2d:1d:58:a8:71:ed:0d:ad:4a:1b:1f:28:d0:76:30:
06:9a:c6:ed:fa:42:7d:86:6c:18:15:64:75:81:28:
50:1e:8b:4a:ff:e2:d1:b8:50:be:9b:6e:e1:7d:3a:
42:92:00:d1:86:25:bd:c6:4c:9b:62:56:f1:8c:d0:
f3:26:0c:6a:b0:8f:a6:bb:bf:27:1d:f9:0f:5b:fb:
19:81:28:4b:02:c9:e3:48:2a:24:85:b2:ff:6e:ce:
57:65:4a:25:1e:82:8c:02:72:db:35:0c:bf:59:15:
09:4e:23:f3:4b:60:a2:00:11:9a:c5:39:6e:53:74:
9b:3b:e7:6f:33:78:e7:9d:2c:80:07:7d:71:54:15:
99:42:da:20:1c:4a:51:81:2e:46:74:b6:cf:37:ef:
17:f1:ef:75:ca:a3:61:05:77:37:d3:31:28:38:d2:
39:45:99:86:ea:99:cd:24:a7:60:bb:05:c3:9b:3b:
a3:a7:1c:57:77:18:3c:e2:11:df:df:93:36:db:af:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:6F:00:EC:87:27:14:8C:A4:4D:97:72:FC:1E:A7:6F:99:F7:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20E883D834DB11EDAAA01BBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:8f:ae:f0:a5:09:a0:4c:4b:7c:b8:8f:fd:dc:ea:ec:d7:1f:
1e:da:e1:0d:21:b8:1a:04:ed:3c:db:45:4c:0a:79:0a:3f:11:
6e:06:dd:a4:60:1a:e8:8e:37:d5:02:a4:56:5c:c8:c8:4d:ce:
b2:59:ac:7e:39:15:25:7f:37:d7:80:25:c4:22:84:94:b8:81:
77:ed:60:38:ab:1e:81:5d:de:2e:d2:64:26:13:a7:e2:0a:79:
5d:aa:b5:59:f4:a3:2b:88:d4:a7:32:c8:68:93:60:68:a7:c0:
13:cf:36:af:8a:e0:88:74:72:99:57:71:19:8e:e9:e4:f1:e8:
e9:11:29:6b:ab:7d:25:72:d3:5d:03:49:a6:c3:a9:19:29:06:
a8:0c:76:f1:4b:99:1e:40:b6:42:11:70:78:4f:5b:6e:e3:45:
ed:fb:a0:fd:4b:db:39:f0:b6:c3:19:86:0e:66:bd:81:fc:d6:
c8:a0:f3:16:cc:3a:9a:1d:fd:45:ba:5b:06:d7:51:63:9c:65:
6f:cb:fe:95:b8:e6:6f:5a:10:bf:a5:97:df:44:18:82:ac:fd:
3a:0a:25:4c:b5:5e:6e:fa:19:f9:21:e0:3f:10:6a:49:2a:ed:
f9:57:cc:05:75:fe:82:dd:92:8e:99:8b:85:69:ad:42:64:59:
c2:f2:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org