Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B01A5AFB9611EEB6D03D67017001B1.roa
File: 21B01A5AFB9611EEB6D03D67017001B1.roa (raw, json)
Hash identifier: ahf32qHXdqJESdCbplDnQkGlYn9/xGi12kTSYFcXStI=
Subject key identifier: 4E:78:16:10:3F:DF:22:D2:F6:5B:E4:6B:B7:30:AE:B3:17:19:4C:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 828B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B01A5AFB9611EEB6D03D67017001B1.roa
Signing time: Tue 16 Apr 2024 02:07:52 +0000
ROA not before: Tue 16 Apr 2024 02:07:49 +0000
ROA not after: Mon 29 Apr 2024 02:07:49 +0000
asID: 141883
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33419 (0x828b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:07:49 2024 GMT
Not After : Apr 29 02:07:49 2024 GMT
Subject: CN=661ddd78-9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:47:3c:46:4e:a8:28:7e:5a:9c:ea:88:d3:
84:e4:30:9b:4c:93:d7:34:c1:bf:7f:d7:fa:fb:b3:
98:38:64:e3:05:6d:77:5f:1f:89:c7:8e:bb:f7:57:
93:71:6f:ab:9b:f8:8b:9d:08:62:09:8c:f1:b2:32:
a8:bc:f1:8e:71:b1:fb:2b:75:69:26:44:bb:8c:96:
eb:cb:d1:f1:c1:9a:a5:ec:0d:12:d3:dd:16:78:fc:
90:6f:6d:40:7a:24:74:97:96:9e:6e:31:cc:52:97:
c1:12:90:0c:94:05:92:47:7e:ca:55:3a:18:a8:78:
5b:bc:7d:66:6b:e9:57:44:a8:4c:46:64:b1:4c:02:
27:c1:d2:a9:52:ae:81:bd:75:c6:2d:01:19:3c:04:
6c:ea:ab:66:f6:b9:d2:3d:90:20:7a:fe:89:90:07:
ff:60:82:85:4d:98:03:77:df:78:87:1d:b4:e2:cc:
46:a5:50:87:5e:49:26:21:55:b4:98:3b:f2:db:81:
be:a4:34:bf:81:12:b9:42:48:3a:b5:a8:d0:d7:ba:
41:7b:f1:11:bd:8b:ee:48:72:2c:91:2b:53:38:13:
bb:fc:5c:3d:a1:89:c3:2e:63:d1:2b:11:86:53:46:
4e:97:c9:85:89:aa:66:ef:5d:5e:50:2c:7c:76:f5:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:16:10:3F:DF:22:D2:F6:5B:E4:6B:B7:30:AE:B3:17:19:4C:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B01A5AFB9611EEB6D03D67017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
39:4b:97:42:1a:3b:85:8a:bc:bd:ee:51:c9:12:e6:a4:68:d3:
02:00:97:df:96:c0:2a:8a:f5:95:d8:79:8f:0a:d2:0e:22:fc:
5b:b6:b6:82:61:0d:cb:87:36:12:b7:9c:5c:88:31:25:20:c0:
bb:25:f5:6c:61:48:66:a9:a3:32:3f:78:f6:dd:65:64:d9:07:
89:52:f2:96:b4:3c:55:12:e6:bf:0c:64:21:d5:6a:c7:90:a7:
f3:43:58:4e:06:1b:fa:10:68:2c:75:a8:f4:9c:18:8b:cc:69:
65:88:12:1c:92:1f:fa:de:2e:fd:f5:84:d9:47:76:b1:b6:26:
02:2f:3e:f1:c1:07:76:2f:fb:ef:07:c2:a2:2b:9e:ba:e4:29:
2d:ee:ef:82:c9:55:a2:91:39:8d:9c:a2:03:17:6e:65:5a:61:
35:9c:7a:32:6b:02:33:be:cb:75:5b:30:f6:26:b8:31:a4:30:
b3:a4:17:f5:13:c4:0d:5c:31:4b:b9:6a:c3:a2:72:0b:3a:99:
9b:5a:9f:3b:50:b5:4a:88:ff:93:48:af:99:ca:74:ff:8b:87:
2d:ad:76:98:c0:46:23:57:d7:e6:27:b9:05:01:99:7b:e9:52:
5a:00:6f:d4:1c:b9:d0:0a:c4:a8:8d:7a:f2:83:c0:24:25:55:
71:5a:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org