Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/479C1B9245AB11EF995D938F762E951A.roa
File: 479C1B9245AB11EF995D938F762E951A.roa (raw, json)
Hash identifier: lyABf9MQHwweCRaMZGscv5L8VKsIk7nDn79fo+crKZs=
Subject key identifier: 08:22:24:1F:F0:AB:39:93:5B:04:51:67:7F:7E:58:ED:A1:15:83:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/479C1B9245AB11EF995D938F762E951A.roa
Signing time: Fri 19 Jul 2024 08:45:42 +0000
ROA not before: Fri 19 Jul 2024 08:45:38 +0000
ROA not after: Mon 29 Jul 2024 08:45:38 +0000
asID: 39600
IP address blocks: 45.196.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40370 (0x9db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:45:38 2024 GMT
Not After : Jul 29 08:45:38 2024 GMT
Subject: CN=669a27b5-8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:c0:fe:76:0d:22:68:c7:ec:97:fc:e9:f4:
a6:70:19:c1:3c:39:52:94:b9:aa:bd:47:3c:28:3d:
4f:ec:e9:7a:1f:cf:56:6e:a2:bf:7f:ac:a7:a3:aa:
23:36:88:2b:28:df:6a:48:08:14:d0:2c:1e:80:c5:
f2:58:6a:13:85:e6:60:14:59:70:c2:ff:71:ff:98:
94:69:bd:a2:bc:a3:1e:f7:27:61:8b:7d:80:a4:25:
b9:a7:78:24:ce:ef:ab:52:18:a0:76:94:4d:be:1b:
89:c4:43:13:48:78:e3:8f:d4:7b:e2:11:9e:f1:e1:
14:00:fe:13:97:40:70:72:36:6e:c8:69:71:9d:e1:
51:ec:3c:60:e6:e5:20:df:ea:29:a0:a8:06:5d:49:
27:72:9e:6a:76:ad:6a:cc:8b:8b:6e:d8:f9:9d:e5:
83:4c:a4:a7:76:a8:1f:50:92:fd:b5:ad:7a:df:3f:
b9:ba:5c:79:d3:65:4f:03:a4:f9:ef:cf:2c:de:89:
85:4a:45:a7:39:ad:39:68:dd:9b:13:4c:ba:5f:b9:
3e:d8:ec:e8:29:97:ed:e1:e1:82:3c:86:32:2c:96:
7d:98:ca:94:0e:78:70:a5:ae:33:f5:95:66:a1:9a:
20:e0:87:03:0b:5d:04:be:ee:ae:08:42:08:c7:74:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:24:1F:F0:AB:39:93:5B:04:51:67:7F:7E:58:ED:A1:15:83:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/479C1B9245AB11EF995D938F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7f:16:d2:5e:d7:69:70:ea:0c:95:07:56:a5:05:e1:6a:02:
6b:ec:dc:b8:75:53:41:67:78:56:a3:80:40:7a:c8:b6:23:4a:
2a:2c:f7:b4:41:24:86:35:ea:17:ba:cd:76:09:7a:11:a6:f0:
ce:bd:b2:35:c9:f1:df:fc:ea:97:50:b8:d9:e3:fe:91:f5:0a:
6b:a9:3e:40:dc:94:da:86:6f:68:5a:2d:b2:dc:e4:f7:80:7f:
26:f6:02:55:7a:3e:e8:23:31:1d:00:11:cb:9f:46:ac:01:17:
e3:0a:f7:0c:d4:6d:e6:c0:ec:a6:33:d1:f2:bb:f3:ad:95:be:
87:d5:6c:09:64:02:c0:01:6e:44:d0:ea:42:69:8a:dd:1c:d3:
7a:10:99:7d:ea:d2:86:b4:fb:2d:b4:ba:42:c2:21:9d:7f:4a:
2e:22:f0:13:5a:b8:99:c5:f6:60:77:50:ea:2c:e7:aa:af:5f:
26:02:87:3b:7f:8c:98:ed:a2:d0:b5:04:71:66:6e:5e:37:96:
28:03:06:63:5f:f7:d7:c2:86:25:77:93:3d:55:de:be:1c:ed:
1e:5e:a2:a9:db:23:2d:4f:34:ae:29:fb:db:ab:a3:59:3b:d8:
47:94:b8:09:ff:04:4c:7b:bb:86:d6:e8:7b:2f:14:8f:bb:c6:
d9:9f:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org