Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E646A88EF8611EDBA1E4B534AD9E6FC.roa
File: 3E646A88EF8611EDBA1E4B534AD9E6FC.roa (raw, json)
Hash identifier: meEirj4Fa4QY/tu+ZLpyGKN0H3kSd6jXrF2KNrHVXHw=
Subject key identifier: A4:05:8D:D8:5E:9F:D8:CA:BE:81:97:DB:64:02:23:9D:32:D6:7E:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 202D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E646A88EF8611EDBA1E4B534AD9E6FC.roa
Signing time: Wed 10 May 2023 22:58:57 +0000
ROA not before: Thu 11 May 2023 22:58:53 +0000
ROA not after: Sat 30 Dec 2023 22:58:53 +0000
asID: 139057
IP address blocks: 45.200.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8237 (0x202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 22:58:53 2023 GMT
Not After : Dec 30 22:58:53 2023 GMT
Subject: CN=645c21b1-ed10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:d3:39:55:d9:08:98:43:b2:56:01:00:70:
59:fb:1b:c1:40:88:3f:e0:24:3b:2f:d5:42:e2:8f:
23:b8:a6:fd:0b:f0:59:7d:9d:78:be:3a:f8:9f:84:
58:bd:21:81:c3:f7:d9:44:22:66:dc:dd:16:c9:6c:
c3:37:21:08:85:8d:76:79:10:3f:20:a9:26:36:a0:
0d:6a:33:c6:fd:49:97:9a:24:9f:92:ce:fd:e7:a6:
ac:db:00:b0:6d:94:c2:88:80:7e:29:c7:b0:4b:cf:
c7:42:bd:30:10:0e:b5:74:95:15:1f:ca:38:89:05:
e5:14:23:22:01:19:2a:f0:10:a9:76:e5:9c:b9:3e:
d7:99:85:4b:c2:2f:0c:82:9b:56:42:f9:8e:9f:2b:
3a:ee:04:98:75:42:f6:61:b2:1d:8a:34:2a:0b:a7:
e8:4f:8f:bb:a3:01:1d:96:bc:8a:33:cb:fe:e7:a6:
79:94:8e:0d:44:4d:ad:69:6b:f8:f1:af:e5:25:b8:
2a:a7:b3:cc:01:a1:d5:15:73:59:9f:23:dc:ca:66:
29:00:b9:e4:21:ad:5c:09:63:f8:37:4e:f9:d0:dc:
b1:b9:87:58:0b:0b:18:f1:7b:50:bc:86:1a:d8:9e:
8d:cb:4e:e2:93:8b:3a:57:9b:a8:f2:d3:32:6c:0a:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:05:8D:D8:5E:9F:D8:CA:BE:81:97:DB:64:02:23:9D:32:D6:7E:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E646A88EF8611EDBA1E4B534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d3:27:d5:7b:a7:5f:7b:3b:6a:1d:69:e7:35:9b:24:df:13:
2f:f3:99:88:ba:59:2a:56:78:9d:9f:a9:bd:99:a3:de:c4:6f:
13:6e:80:fb:46:45:d0:8b:26:74:19:59:64:67:92:ad:31:6d:
3c:ee:8c:52:5b:17:17:15:15:47:c3:33:e1:c3:0d:eb:59:b9:
af:40:96:6e:84:da:25:43:89:ed:4b:b0:1a:52:39:ea:78:03:
0d:a0:a5:ee:77:4f:53:da:ae:46:da:4e:f6:a3:96:02:fb:1d:
a5:6e:91:1b:56:12:dc:ce:0b:f1:51:a1:da:2a:fd:5c:15:b1:
bf:12:1a:b4:d0:a6:a2:14:64:9d:b3:6e:63:d3:82:ab:75:eb:
a9:78:41:fe:a0:70:18:b5:e7:35:66:d0:eb:39:0d:98:ac:16:
8c:bd:38:40:49:f2:0a:a1:d3:28:3b:4c:fb:6e:d3:82:d2:0a:
0a:3d:d6:8f:10:bc:24:49:60:fe:24:89:da:59:48:04:f4:e5:
10:66:01:bd:0a:7d:34:41:aa:89:99:3c:a1:99:06:d3:a9:f1:
77:28:34:1d:53:14:65:fc:1d:14:66:84:80:74:fd:22:ab:38:
e4:5b:90:1d:29:1f:ad:c8:c3:04:8a:4e:87:90:85:a3:5b:f8:
b6:50:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:05 2024 by rpki-client on console-ams.rpki-client.org