Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41EE400835AE11ED894D99E5F1222468.roa
File: 41EE400835AE11ED894D99E5F1222468.roa (raw, json)
Hash identifier: yPubZZMi6aBickOHqpYZBG4+zrxSWOaTg9SJHp+SufM=
Subject key identifier: 45:AE:EF:5B:D9:FE:FF:94:0F:C3:F0:5C:2A:64:C2:BF:4B:57:87:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1804
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41EE400835AE11ED894D99E5F1222468.roa
Signing time: Fri 16 Sep 2022 10:56:47 +0000
ROA not before: Fri 16 Sep 2022 10:56:43 +0000
ROA not after: Wed 20 Sep 2023 10:56:43 +0000
asID: 136907
IP address blocks: 45.203.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6148 (0x1804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 10:56:43 2022 GMT
Not After : Sep 20 10:56:43 2023 GMT
Subject: CN=6324566e-052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:49:7f:05:ea:11:4b:dc:d4:de:3b:d0:70:
2f:0b:b7:79:ea:cb:a4:20:81:17:11:5e:9c:22:6d:
30:d8:11:f1:1a:fd:bd:3a:f3:a9:2d:b2:0c:b0:b2:
55:45:92:a3:bf:75:9b:d2:06:95:9c:f7:e9:99:a3:
88:b4:70:b7:a9:96:5e:c4:76:37:62:be:3d:88:b8:
21:16:39:2c:dd:fe:52:ce:17:88:6f:87:94:df:c3:
a7:e7:1a:8b:54:a7:96:24:60:a2:8f:0b:15:d5:e5:
c7:60:a1:5e:c4:eb:e9:17:75:74:e1:f5:f5:a1:a4:
6b:f6:74:a7:59:fa:6f:13:7b:f8:ed:c2:6b:a8:f5:
00:73:34:a9:f9:44:4b:85:57:d3:d5:f7:55:6e:39:
af:a2:46:28:c1:09:02:78:26:7c:a4:1a:52:1e:7b:
52:62:3b:82:74:8e:28:0f:94:59:da:fa:37:9e:6b:
9f:25:b1:91:ed:05:40:66:cc:cd:38:90:f2:c5:b4:
97:2c:b0:e9:5f:aa:4e:85:e2:1d:63:c9:f7:8b:a0:
57:83:e9:db:b8:5a:54:97:77:12:fa:36:d8:56:cd:
7f:97:76:69:f0:75:47:bc:91:64:05:3a:bf:4c:42:
f8:cf:68:8b:25:3c:2a:ea:1c:3e:00:a4:22:d6:30:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AE:EF:5B:D9:FE:FF:94:0F:C3:F0:5C:2A:64:C2:BF:4B:57:87:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41EE400835AE11ED894D99E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:8d:0e:9f:db:30:8e:82:02:40:2a:93:a2:13:6f:7b:b9:f0:
64:73:b4:48:ff:52:e6:07:53:26:e9:6f:6c:64:a3:38:15:b1:
7f:63:98:33:5d:a6:84:1b:bf:2e:15:63:0a:ff:06:55:5d:89:
ca:02:c1:c1:40:48:42:de:4b:30:5c:d5:19:f4:99:10:b5:3f:
10:d9:74:2e:ba:33:57:a7:4d:19:3e:30:fe:7b:33:e7:ec:1e:
7b:c1:3f:0a:bf:17:8b:c5:26:1a:3a:6b:04:14:b8:77:2c:27:
f1:57:57:7d:06:70:80:ec:2e:d3:79:90:61:85:ed:26:67:93:
3d:1c:e6:3e:12:6b:2a:33:74:ec:63:08:23:dc:3b:79:f5:fc:
c7:85:2e:6d:16:16:1a:7a:8f:4c:50:fb:da:ca:fc:7e:44:8a:
18:01:3f:73:6f:ed:71:23:d1:73:3b:a6:91:61:a1:22:e2:dd:
9f:6c:b1:22:7e:54:0c:13:7b:54:6b:83:65:6b:53:f8:60:3c:
a7:22:0c:a3:1a:ce:d5:cd:35:ff:56:c9:e1:b3:ec:2f:17:3e:
ec:8e:fa:d0:56:23:ca:40:d1:26:70:e0:a9:02:d6:20:27:bf:
b7:f9:7a:52:df:aa:66:5f:3a:0b:8c:1c:25:bc:34:00:c1:c5:
4f:10:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 01:16:31 2023 by rpki-client on console-fra.rpki-client.org