Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38371AEC389911ED86F6039DF1222468.roa
File: 38371AEC389911ED86F6039DF1222468.roa (raw, json)
Hash identifier: OX8OzM7Ey+myWQU8aXBFkC7nxIESOxLiefwcfzjDhz0=
Subject key identifier: D6:F0:47:B0:05:79:99:17:E1:D7:D6:2C:D9:49:E4:D7:50:58:65:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1816
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38371AEC389911ED86F6039DF1222468.roa
Signing time: Tue 20 Sep 2022 04:03:44 +0000
ROA not before: Tue 20 Sep 2022 04:03:41 +0000
ROA not after: Tue 27 Sep 2022 04:03:41 +0000
asID: 135097
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6166 (0x1816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 04:03:41 2022 GMT
Not After : Sep 27 04:03:41 2022 GMT
Subject: CN=63293ba0-71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:e7:63:8e:ae:9b:fc:4d:71:84:9a:e5:c1:
7c:e0:fa:b3:a0:cf:d4:cc:de:ca:db:43:08:0a:d7:
83:9e:fa:35:0b:81:62:a6:95:49:0d:69:30:67:01:
9b:9d:87:f7:ec:25:46:99:11:34:34:90:56:e7:df:
85:ef:b5:f8:2a:de:a6:2d:e9:80:b0:38:46:ee:a1:
51:4a:1a:4c:0c:72:c9:f3:19:57:a2:c5:17:0f:7e:
cb:b0:fe:6d:e1:4a:51:8e:f5:2d:63:fd:9e:1e:6e:
aa:37:5c:59:0b:4b:1e:15:75:d7:8f:43:b3:e3:94:
cd:a9:e3:cd:8e:f3:72:f4:68:2c:bb:67:ad:d6:ba:
b8:17:e8:fd:85:9a:e0:09:f8:7b:a1:1d:ac:2e:91:
d5:1a:40:9d:84:18:58:f8:c2:3b:d8:6e:fe:09:85:
2d:56:49:9b:a3:04:e8:58:ec:68:da:85:66:86:93:
d8:b1:fa:d5:38:58:b6:f7:aa:d7:a8:58:63:12:49:
96:bf:db:d4:5c:a9:a2:17:96:77:03:1b:50:30:f4:
d7:d7:a8:87:6e:d4:72:7c:21:b5:ef:b5:4f:a5:36:
be:24:e5:57:62:b5:a0:78:0f:20:1d:2a:0c:bf:07:
e9:bb:5f:7e:4c:0a:fe:62:cc:3b:0d:e8:3f:4d:c0:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:47:B0:05:79:99:17:E1:D7:D6:2C:D9:49:E4:D7:50:58:65:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38371AEC389911ED86F6039DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6c:58:84:7d:03:a0:54:09:95:53:ca:83:e4:41:5e:47:67:43:
9c:11:e6:ed:98:ac:e5:81:5f:91:ff:0d:73:5f:d1:9a:67:cc:
2f:51:bf:48:e5:f3:9b:e3:bc:3c:4f:b5:8f:09:c1:bc:45:67:
89:93:62:da:26:e5:9c:9e:a0:1a:c0:81:21:f5:4b:9f:84:85:
0e:22:0d:3c:44:34:8a:92:29:bd:cd:ef:57:f8:f3:27:a4:3f:
67:21:e1:78:56:f9:2a:84:9b:aa:66:02:a2:be:4e:62:8f:b5:
9f:d8:72:fe:32:c0:0a:61:f1:d0:c8:53:30:37:93:d1:be:66:
95:72:52:b7:0d:dd:8b:ef:a2:f1:47:68:fc:22:b9:05:37:a2:
a8:80:1a:2a:a5:22:04:06:d9:e3:7f:c0:80:53:25:d3:3f:60:
57:43:d8:03:08:b0:3a:3a:25:41:50:01:44:fd:33:0c:64:be:
da:cb:25:3e:95:0f:c5:ab:b0:9d:6f:bb:55:99:ab:9e:02:44:
e9:e9:93:38:d5:9a:9f:83:4c:f9:d9:0b:3b:be:b3:f8:04:7e:
00:7c:35:09:12:dc:50:f9:09:c0:27:39:f1:66:89:63:75:84:
15:3e:94:ef:17:91:fc:ad:27:42:cf:14:16:c3:8b:90:09:6a:
6b:de:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org