Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D4EF364039011EFAB879670017001B1.roa
File: 4D4EF364039011EFAB879670017001B1.roa (raw, json)
Hash identifier: UO+K/hx5cirovLAkJe1fuFUpOKfw4hwk3v5mSlfduB4=
Subject key identifier: DA:62:8A:84:9E:69:8A:8A:51:44:93:6C:6E:8E:2A:11:02:BB:2C:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8606
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D4EF364039011EFAB879670017001B1.roa
Signing time: Fri 26 Apr 2024 05:46:18 +0000
ROA not before: Fri 26 Apr 2024 05:46:15 +0000
ROA not after: Sun 05 May 2024 05:46:15 +0000
asID: 139646
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34310 (0x8606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:46:15 2024 GMT
Not After : May 5 05:46:15 2024 GMT
Subject: CN=662b3faa-a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:e4:39:07:13:4e:3d:45:e8:4d:91:3d:05:
4c:fa:2d:72:cf:0d:51:4e:aa:37:96:03:e2:b5:24:
76:00:fa:6f:60:7b:ad:3d:05:fc:41:19:a0:02:86:
57:7b:45:16:a2:a8:54:49:04:06:71:e6:8f:b3:98:
25:82:96:f4:33:3c:c3:8d:cd:36:ce:6a:fa:ed:cb:
99:8d:16:b9:f9:49:88:41:69:88:3b:0e:bb:f0:a5:
7b:90:74:3b:f5:29:8e:3b:11:13:61:b4:1b:89:63:
38:47:88:c0:58:bb:50:ea:2f:69:87:7e:c9:3b:8f:
46:c5:e4:2c:44:dd:d6:fc:12:63:0b:e4:72:e5:e9:
dd:85:06:e5:65:c7:27:85:a4:e3:66:fa:9e:50:fd:
56:e1:ec:08:d8:88:b3:15:41:27:16:80:7c:6e:b3:
52:86:84:7a:97:3a:b5:95:3b:13:05:22:ca:6a:b1:
8c:a4:45:ef:51:c1:79:77:eb:7d:a2:a4:2b:69:8d:
a8:16:71:e6:fe:df:74:77:87:c9:0a:2f:fc:0e:a5:
ab:59:93:b9:72:be:d1:53:f1:06:39:06:ae:bf:e3:
45:d7:6c:b2:37:c1:3c:fc:13:ec:f0:92:27:2e:c1:
50:5b:35:5e:c4:54:7e:85:e6:cc:2b:97:13:a5:c8:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:8A:84:9E:69:8A:8A:51:44:93:6C:6E:8E:2A:11:02:BB:2C:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D4EF364039011EFAB879670017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:35:7b:74:27:d1:00:63:26:4d:df:75:f5:78:a1:77:d1:a7:
9e:50:61:42:f4:0d:a8:d9:45:6e:cc:c5:fd:b4:ef:f3:16:72:
f0:b3:aa:e5:c9:50:f9:19:9f:8b:c5:3b:47:f2:22:91:6c:26:
d4:25:fa:5f:07:02:d9:36:1f:ea:a2:3c:aa:c5:b9:9a:d3:0e:
b8:fa:f8:fa:c1:d0:4c:27:a0:70:ce:4c:97:9c:aa:a0:cc:1f:
e5:a1:ea:54:02:18:2e:63:1c:3e:1c:00:78:f8:14:98:45:7c:
4c:98:ac:e0:5c:d3:81:66:81:7c:b3:c4:d7:08:14:47:19:34:
bf:cc:ea:d2:a9:90:ab:a8:7b:c9:c9:ad:a5:78:f8:89:af:3a:
fe:0a:12:1c:a0:11:86:f4:ae:ab:9d:04:fd:ba:07:14:00:d0:
c3:2e:52:43:8e:c5:fd:74:39:43:b6:5f:e3:7b:47:77:01:26:
20:d9:5c:f7:aa:49:b0:51:6c:3e:9a:87:63:f8:43:13:4c:e7:
67:ee:44:a4:94:aa:48:83:40:58:12:a6:fc:10:fd:ce:11:2d:
df:49:57:c2:9b:67:7b:9b:64:78:39:d3:89:8d:9f:40:39:04:
21:d4:f1:87:62:c3:dd:6f:31:c8:44:2f:b0:5d:fe:0d:a0:e3:
49:46:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org