Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212F858A48CA11EFBD965146762E951A.roa
File: 212F858A48CA11EFBD965146762E951A.roa (raw, json)
Hash identifier: Dlvm0pSnhfdjc8cMNWDe4+GbvXjTxf/aR55jJFe+/sM=
Subject key identifier: 60:1D:7C:4E:A0:12:F0:7A:CD:A5:E9:D4:89:7C:92:2B:73:8E:AC:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212F858A48CA11EFBD965146762E951A.roa
Signing time: Tue 23 Jul 2024 08:04:05 +0000
ROA not before: Fri 26 Jul 2024 08:04:02 +0000
ROA not after: Fri 23 Aug 2024 08:04:02 +0000
asID: 202656
IP address blocks: 45.199.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40596 (0x9e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:04:02 2024 GMT
Not After : Aug 23 08:04:02 2024 GMT
Subject: CN=669f63f5-2883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:e2:02:ff:22:76:94:f5:57:41:59:f2:6f:
c6:34:bd:b9:76:0b:b7:aa:99:6c:d0:f6:6b:35:9f:
88:b1:be:d9:a2:9f:a5:5b:a4:51:01:76:3f:5b:72:
8a:c1:89:b4:80:08:d1:c4:63:e3:d1:b9:68:fd:84:
10:e9:d0:83:cf:37:3d:76:df:a2:dd:ed:21:56:f0:
18:a7:4d:2c:97:cd:ef:b6:b1:03:31:a0:8a:ee:50:
d0:fd:cf:e2:62:93:58:d6:ad:93:d3:b6:22:8c:d2:
0e:41:fe:dd:02:79:bd:4e:33:a7:97:32:88:60:a6:
45:ca:a6:8a:cf:da:7e:f7:a6:0c:8c:25:26:2a:5e:
4e:f1:f1:e2:b7:80:b6:00:ba:88:0a:c8:d9:d5:43:
0d:68:6c:cb:2c:c2:b3:b6:6f:d4:ba:18:af:30:66:
d1:88:e2:d7:52:ab:52:74:d7:63:29:be:1f:a0:4c:
96:42:67:ad:d8:a2:2e:83:93:f4:e4:72:30:ad:67:
6a:9d:d3:1a:1e:3f:71:de:57:a9:c2:fe:3a:98:b8:
b4:c7:8f:7d:ab:91:51:ec:31:19:36:fd:64:8e:f1:
33:b3:6c:c7:63:16:81:5e:74:6a:83:46:c8:ee:48:
4c:50:56:b0:f9:a5:a2:c1:f5:c0:c3:a7:63:ae:d7:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:7C:4E:A0:12:F0:7A:CD:A5:E9:D4:89:7C:92:2B:73:8E:AC:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/212F858A48CA11EFBD965146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.192.0/18
Signature Algorithm: sha256WithRSAEncryption
81:b9:92:dc:f4:d8:66:80:37:eb:46:59:ec:89:9f:55:d4:1e:
bc:d7:c1:9a:01:2f:4f:f8:ec:60:68:1f:09:c7:08:18:63:48:
48:e1:03:7f:2f:40:4b:a6:5b:7d:d9:ba:02:2f:7f:a0:26:86:
a5:3c:c5:3c:8e:35:a5:5f:22:d0:32:36:a1:b7:bc:6d:00:3a:
e8:5d:07:59:86:bb:a6:95:1b:a7:6d:8e:ce:93:e5:1c:50:11:
b3:b0:51:b2:2f:f0:33:3a:f8:c6:ae:79:0c:9c:55:fb:1a:01:
39:45:d4:ca:1d:e4:61:6d:59:09:38:23:64:9a:30:c8:87:e1:
11:58:ce:be:04:19:72:a2:05:d3:54:17:c1:9e:2e:9f:c7:3b:
ea:9f:df:ee:95:0c:de:af:07:c6:7f:66:92:8a:95:53:78:ce:
b1:8a:76:0a:b5:5a:31:09:05:c8:f0:42:c5:27:72:7e:94:6d:
6f:07:89:67:ac:ca:7c:f6:07:91:40:5e:37:ca:3e:2b:7b:4e:
0a:91:0f:fa:c6:a1:4d:af:66:ac:54:3e:98:78:d1:ad:9f:38:
a4:21:39:f3:5b:30:2c:f3:bf:57:0e:42:22:61:35:80:f9:b6:
c2:e9:20:58:fc:ce:cd:01:d7:37:18:a5:04:7a:98:b0:f4:b7:
60:e3:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:47 2024 by rpki-client on console-fra.rpki-client.org