Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B3D7D3CE7C111ECAD0E66A0F1222468.roa
File: 2B3D7D3CE7C111ECAD0E66A0F1222468.roa (raw, json)
Hash identifier: ciBsKp6xKfjBd1nlvGVW7aoJmPa9Jx2VrUdMTiRdMaM=
Subject key identifier: 39:64:AC:86:7B:9D:28:13:40:95:1F:E7:37:6F:14:0B:4F:F9:52:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B3D7D3CE7C111ECAD0E66A0F1222468.roa
Signing time: Thu 09 Jun 2022 06:55:38 +0000
ROA not before: Thu 09 Jun 2022 06:55:35 +0000
ROA not after: Fri 30 Jun 2023 06:55:35 +0000
asID: 133199
IP address blocks: 45.204.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5206 (0x1456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 06:55:35 2022 GMT
Not After : Jun 30 06:55:35 2023 GMT
Subject: CN=62a1996a-c615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:f7:b6:10:c4:d2:18:39:dd:1b:2a:98:3d:
03:4e:fe:e5:75:1b:62:3c:81:f2:35:1d:29:75:d4:
3f:35:64:7d:76:60:46:42:a4:23:69:7a:5f:5a:81:
68:0c:e7:b7:3f:24:2e:8f:de:6d:0e:a8:9c:97:60:
df:cb:9e:1c:af:47:64:ff:40:c9:a7:d6:75:c2:85:
88:bf:62:ee:58:70:e0:20:53:d8:1e:08:df:2b:74:
1d:0d:b1:76:18:c6:b1:e1:0a:18:e3:74:9e:cf:a7:
e1:8d:f7:51:ac:1b:04:f8:20:4f:7b:d4:e0:36:03:
9f:3f:11:85:80:37:49:86:76:c9:c4:18:37:83:29:
bf:13:4c:a7:79:47:26:90:d6:d1:dd:5a:ed:ef:06:
8c:63:30:7f:fa:3f:fb:f9:73:c2:13:51:96:f9:ff:
41:82:84:d0:65:ac:db:3d:91:21:2b:91:1b:40:e7:
17:78:a1:cc:c5:e7:08:95:cc:52:d3:cf:b9:df:52:
da:7f:92:85:d5:6d:a7:a8:16:16:2d:79:7a:86:61:
56:1d:0f:36:c9:95:74:09:32:3b:1f:a8:95:5d:4c:
7b:5a:d1:45:cc:7a:b1:35:82:22:95:1b:37:6d:2f:
51:49:60:d2:81:fa:ac:cc:9e:b9:ff:0d:d7:6d:a6:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:AC:86:7B:9D:28:13:40:95:1F:E7:37:6F:14:0B:4F:F9:52:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B3D7D3CE7C111ECAD0E66A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:eb:60:2f:ee:f8:fa:fd:4d:50:e8:26:08:29:ed:6d:12:
f1:d3:4b:ae:c7:1f:a7:40:e6:fe:68:48:06:d4:9c:a0:c9:3e:
62:42:7f:21:4c:6e:5a:77:20:23:6c:7b:59:12:4c:a7:e5:d4:
1d:28:8b:fb:d4:1d:bc:9d:41:f1:cf:d9:6a:7d:e6:9d:05:2c:
59:f0:cb:d8:86:64:36:b2:87:d9:18:61:64:74:bb:10:ff:79:
78:da:07:69:a9:bc:4c:de:d1:8c:a6:eb:a0:a5:85:4a:5d:a7:
a8:0f:e8:be:d4:08:8e:7c:0e:b6:af:ff:d7:27:73:28:d3:44:
20:89:f5:be:2b:a4:9d:cf:61:42:25:56:c3:e4:05:87:ab:9f:
b0:a0:48:a4:dd:ed:a8:aa:d7:83:c0:09:23:70:fd:58:ef:4e:
eb:38:c6:11:57:60:3b:5a:08:3f:38:44:1c:49:8a:c4:11:c8:
ff:d6:6d:5f:74:63:0b:87:17:02:1a:e7:6e:3b:81:d9:10:24:
1f:43:58:8c:65:f4:e2:18:cc:4a:c7:3d:c4:c6:3f:7e:0d:14:
22:8a:66:83:ab:38:f2:71:8c:41:61:9a:92:35:56:c9:63:5e:
43:dd:69:e0:34:d5:0c:24:5c:b5:cf:0a:c8:40:83:74:0c:ba:
d4:c1:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org