Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5207915C47EE11EFB2B7D270762E951A.roa
File: 5207915C47EE11EFB2B7D270762E951A.roa (raw, json)
Hash identifier: XKoCxpSSGFYpBDjuwqyt45k43VGzfKL/9VT9TOuGFu8=
Subject key identifier: 15:90:1C:C8:48:3E:62:90:80:FF:8A:46:B0:FC:F7:B2:DE:CE:8C:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5207915C47EE11EFB2B7D270762E951A.roa
Signing time: Mon 22 Jul 2024 05:50:38 +0000
ROA not before: Mon 22 Jul 2024 05:50:34 +0000
ROA not after: Wed 31 Jul 2024 05:50:34 +0000
asID: 137547
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40517 (0x9e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:50:34 2024 GMT
Not After : Jul 31 05:50:34 2024 GMT
Subject: CN=669df32e-9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:55:bc:aa:88:19:cb:2b:a4:1f:e3:74:7d:
a2:7e:e9:8d:b4:c2:cc:c2:ca:98:2e:d3:73:eb:97:
0c:fc:d1:d7:60:91:34:00:d4:53:90:c2:b9:ba:e8:
b8:71:76:0b:a5:95:86:fd:88:71:b6:c7:d3:6d:ae:
3b:6b:3b:6e:3a:06:cc:e4:d5:57:79:21:01:7f:c7:
da:51:8c:7e:fd:7d:75:b2:e2:13:66:35:48:75:9d:
26:57:82:dc:ba:ad:47:29:5f:e7:68:0e:0d:dc:e6:
0d:7f:1f:90:bb:41:87:89:dd:f2:1c:3c:e0:ef:3d:
2e:a0:dc:6e:06:9d:de:1e:ca:67:3b:cb:c2:d1:f0:
2c:9d:eb:40:cd:fc:ca:51:05:65:8e:fe:69:9e:59:
67:e3:0a:fc:08:1e:26:98:44:45:69:93:31:c5:74:
c8:14:bd:7e:8c:87:98:ed:22:f5:f7:7e:05:b0:7f:
bd:02:fc:b9:69:b4:03:e9:3a:e6:4f:76:2b:c8:78:
fc:13:15:b6:8c:a8:0f:8c:a5:84:72:ac:c3:b4:ef:
fe:d9:7b:57:8a:65:fe:75:c3:f7:7b:fd:99:86:0a:
f4:aa:3b:ef:0f:f1:12:5a:d4:90:54:95:e2:0a:65:
d6:86:33:38:46:30:fe:1b:88:97:c0:a9:f2:27:f3:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:1C:C8:48:3E:62:90:80:FF:8A:46:B0:FC:F7:B2:DE:CE:8C:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5207915C47EE11EFB2B7D270762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:ad:61:36:36:75:d9:95:8c:bb:09:a6:dc:a2:02:fc:d3:a9:
ed:16:6c:5a:80:30:e1:32:c9:56:49:b6:c4:d1:12:8d:c9:01:
65:ac:09:fb:20:ce:5f:ca:e4:c9:d4:59:ba:5f:53:a1:64:17:
4d:3a:5c:9f:08:f9:eb:78:aa:14:92:27:42:1b:65:8f:06:a9:
5d:7e:1d:c9:3a:bf:a2:bc:08:c9:02:df:9c:1e:c6:6f:d3:d6:
3b:d2:5e:de:34:9b:a0:00:f2:af:dd:27:d3:88:05:f6:38:39:
b1:03:17:cb:75:9b:1b:fa:03:46:ee:cc:b3:84:f1:1b:6d:dc:
9d:12:56:78:74:7c:dc:da:cf:7b:4b:79:03:31:df:68:bd:14:
47:3c:8a:6b:a6:99:cf:f3:56:2b:eb:15:b7:a4:12:44:83:a8:
c6:fe:01:06:0c:58:c4:d4:e7:d3:ce:83:d8:15:44:88:7b:bc:
e7:4c:86:36:d7:40:b3:3e:0b:39:2d:a8:82:77:2d:c9:4d:7c:
2a:a2:28:f1:20:7b:c6:d2:3b:7f:9a:f3:8c:ae:9e:26:3c:40:
1a:71:12:e8:16:fe:b3:c6:19:23:62:36:19:c3:ac:78:96:fa:
c8:2a:16:6f:09:bb:53:ef:c1:f1:b8:f1:8e:f6:19:5f:f3:5c:
78:3f:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:21 2024 by rpki-client on console-fra.rpki-client.org