Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4949670C4A5A11EFB825EE67762E951A.roa
File: 4949670C4A5A11EFB825EE67762E951A.roa (raw, json)
Hash identifier: cm5H9R2a3BwmizJNbPCjNTHi64CVM7w4gt/qq0RsFsI=
Subject key identifier: BC:53:22:32:57:77:F2:45:E9:3D:DB:A0:4A:B1:64:BC:F0:E0:3F:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4949670C4A5A11EFB825EE67762E951A.roa
Signing time: Thu 25 Jul 2024 07:48:31 +0000
ROA not before: Thu 25 Jul 2024 07:48:28 +0000
ROA not after: Sat 03 Aug 2024 07:48:28 +0000
asID: 174
IP address blocks: 45.199.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40895 (0x9fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:48:28 2024 GMT
Not After : Aug 3 07:48:28 2024 GMT
Subject: CN=66a2034f-3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:38:b2:a5:8b:b1:99:cb:03:b3:02:bd:cf:
fc:64:93:18:0d:77:82:09:c1:7c:76:49:50:a6:73:
d3:6a:ac:65:a0:a7:e1:d7:1f:d5:b1:6a:1e:a3:d9:
3d:2a:34:79:b5:61:3d:74:4c:91:6f:16:e3:5f:c0:
af:a1:15:93:fe:b2:b1:95:9b:48:6d:4a:b4:6c:c7:
58:81:89:80:da:31:b2:e7:78:b6:5b:55:7f:70:3a:
76:7a:a0:7f:1a:d8:70:e5:a8:5b:38:48:69:13:de:
1a:01:72:e6:44:89:18:0e:90:bc:25:f8:93:13:0c:
ee:c2:23:fc:fb:b5:6c:08:54:6c:e5:14:b0:9b:91:
fe:12:fa:c8:ce:ac:ed:54:1e:9b:0b:fb:dd:58:bc:
83:bb:bc:56:cc:9d:b2:12:4e:ce:2d:3b:3a:3c:f8:
5d:5d:41:32:25:80:19:fe:e1:d9:b2:16:cd:3e:69:
43:22:c6:cf:93:2e:91:65:b0:8d:fb:14:d0:72:09:
9b:3e:59:f6:41:4b:19:48:53:29:12:dc:23:04:7f:
f0:a8:e4:f1:6c:dd:1e:ce:ce:c5:83:a3:b5:47:9b:
f2:71:d7:51:46:04:a0:4c:40:5f:da:4f:c6:b7:9b:
06:4f:3e:ad:d9:a5:90:b8:c1:65:7e:c0:2a:1f:fa:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:53:22:32:57:77:F2:45:E9:3D:DB:A0:4A:B1:64:BC:F0:E0:3F:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4949670C4A5A11EFB825EE67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.136.0/23
Signature Algorithm: sha256WithRSAEncryption
95:b5:72:59:d8:0e:bb:a9:16:e0:2b:74:07:bb:94:5a:89:37:
97:c8:2c:52:67:2f:3e:8e:a8:83:9c:3f:b6:59:d6:f0:57:00:
2d:94:aa:1f:ed:f5:14:32:b4:97:f6:a8:4e:f3:3b:51:9d:7d:
10:de:f0:4e:dd:a6:af:e1:bb:68:a9:6a:fc:81:5b:32:90:8b:
97:90:6a:be:a5:1e:8e:e4:74:be:0a:d0:84:f2:d3:fc:c4:71:
da:66:db:50:1e:87:8e:be:52:bb:04:48:31:8f:b9:f2:f0:50:
46:ec:6f:dc:cb:20:f7:c7:c4:b7:2d:2d:03:12:fc:ba:6e:76:
fd:b8:9d:0d:8e:85:44:08:68:02:81:88:7f:ba:6d:c8:1b:40:
d4:76:94:55:77:33:d3:cc:68:99:04:21:8c:8a:13:72:e7:8a:
2a:54:50:23:c1:15:49:41:2d:cb:93:51:51:29:df:16:11:74:
61:8d:d3:7d:41:8d:55:e0:fd:57:c2:f4:81:90:8d:7e:1e:20:
d6:1c:ed:d2:8e:93:22:9e:21:3d:7f:2b:af:ce:4c:e4:d8:3f:
8b:95:8f:cd:8f:e7:d2:d3:35:b0:cb:e4:18:fe:86:e5:fa:df:
0e:66:16:c5:78:ac:fa:0e:4b:68:78:a3:04:55:c6:8d:1d:9a:
a3:db:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org