Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530F51E23E2D11ED8BE55B7FF1222468.roa
File: 530F51E23E2D11ED8BE55B7FF1222468.roa (raw, json)
Hash identifier: QjRBAjkJd0M5gbwN/Ut3Cwx0MfJnuPsAk4ZQfQ/PRkI=
Subject key identifier: F8:71:67:15:97:20:DB:F6:8A:F6:4D:68:0E:D0:E7:03:C9:30:E6:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1889
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530F51E23E2D11ED8BE55B7FF1222468.roa
Signing time: Tue 27 Sep 2022 06:26:31 +0000
ROA not before: Tue 27 Sep 2022 06:26:27 +0000
ROA not after: Fri 30 Dec 2022 06:26:27 +0000
asID: 35916
IP address blocks: 45.205.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6281 (0x1889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 06:26:27 2022 GMT
Not After : Dec 30 06:26:27 2022 GMT
Subject: CN=63329796-9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d2:b9:de:3b:ba:ac:29:ce:5a:a6:c8:0f:
d3:ce:1f:ea:bf:4b:83:0b:ff:ea:3e:2d:5b:3a:29:
8a:c4:68:ec:73:dd:81:87:b9:29:af:4c:6d:13:a6:
f7:a4:ab:d0:1d:40:81:22:8c:c4:a1:fa:62:a9:5a:
c8:ce:35:e7:42:22:2c:04:d5:f2:c5:fc:b2:86:55:
2b:d5:59:7d:f1:42:5a:52:0f:f5:e7:86:65:b2:6c:
f8:37:aa:88:c8:93:1b:98:6e:60:66:a7:53:76:04:
d7:52:84:5d:91:02:fc:43:60:f7:23:93:a2:fe:3c:
a3:7e:d7:e7:32:91:25:1c:65:1f:c1:53:60:e1:f3:
ef:2f:ce:6c:6a:57:ef:4a:2a:e5:70:70:80:ad:a1:
6e:43:6a:22:c3:c3:91:22:e3:f6:16:c8:06:9f:49:
c0:33:6b:30:f6:7a:52:83:d7:54:13:bd:65:9e:c8:
81:01:8b:a5:4a:3a:74:e3:5e:9a:c1:32:c9:b9:29:
d8:4a:5b:61:24:e8:a2:85:57:70:ad:52:a5:3b:78:
37:87:e1:93:01:30:d4:ad:08:c6:f9:4b:57:bc:74:
af:53:e8:67:dc:f9:ca:dd:00:88:b5:c6:b4:3c:94:
23:56:f4:46:1c:db:10:3c:85:36:c4:da:ae:28:11:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:67:15:97:20:DB:F6:8A:F6:4D:68:0E:D0:E7:03:C9:30:E6:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530F51E23E2D11ED8BE55B7FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.220.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d1:d2:17:d5:eb:63:42:f2:3a:00:73:44:9f:9b:50:cd:5d:
7c:0e:51:62:2d:30:49:00:97:83:f8:96:b2:aa:90:f7:0f:69:
d6:6c:3c:8d:d0:77:45:ef:8b:4f:c5:a3:d1:5f:f2:56:3b:28:
4f:a8:5a:65:f2:9d:c0:a6:22:9d:22:70:4b:1b:a6:e4:0a:15:
7a:a2:47:b9:87:a1:f1:13:c5:7a:57:ec:a3:ee:80:9a:5b:9b:
6e:c6:09:40:7d:51:b1:05:a0:d6:0b:4e:de:a7:5c:7e:30:39:
6d:11:91:f6:8e:ae:86:0d:d6:f9:34:00:5e:7a:df:7c:fd:15:
e0:9e:49:ad:4e:0c:db:da:a6:c2:f6:ac:79:31:be:cc:08:56:
f0:b8:53:0a:f3:0e:88:6f:f8:ca:80:84:24:94:a6:aa:4a:3a:
7b:a8:49:9a:de:d3:e5:06:0c:f2:d1:a5:38:33:79:b8:85:68:
ff:c8:32:21:fa:60:ea:cb:7e:19:1b:a4:d3:83:35:76:b0:b3:
95:41:23:d2:bc:c6:6e:65:c1:b0:c2:4f:5e:62:fd:67:45:6e:
ce:8c:5c:c9:f0:10:b4:7f:58:a1:38:61:8f:6a:dc:66:65:ec:
85:3f:e6:52:2d:ce:d2:ac:8f:4f:c5:7f:d2:92:83:20:45:79:
4a:f5:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org