Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5538CB60F17311EEBFBA5C6C775412E6.roa
File: 5538CB60F17311EEBFBA5C6C775412E6.roa (raw, json)
Hash identifier: JMKAxZDjeqnk+W62nft7bhRE6UvXy1O9x39ZCq6or7I=
Subject key identifier: 79:99:EA:30:74:79:30:AE:74:F1:15:29:C8:ED:E9:0E:7D:21:4A:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8183
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5538CB60F17311EEBFBA5C6C775412E6.roa
Signing time: Wed 03 Apr 2024 04:33:35 +0000
ROA not before: Wed 03 Apr 2024 04:33:32 +0000
ROA not after: Mon 29 Apr 2024 04:33:32 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33155 (0x8183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 04:33:32 2024 GMT
Not After : Apr 29 04:33:32 2024 GMT
Subject: CN=660cdc1f-5dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:00:52:63:dd:a8:9c:6e:f0:31:59:d5:32:
e1:7a:66:ad:83:27:aa:a1:83:d5:4d:18:e9:d4:2f:
c0:aa:6f:99:6b:fb:8a:6d:73:0b:73:02:b5:fb:7e:
5f:18:7e:69:6b:36:91:be:bf:69:ec:9e:41:24:d4:
5b:b9:67:5c:9b:1b:45:31:2c:b6:4c:e3:a4:12:a2:
54:2c:61:c6:cf:42:f0:2d:8b:b5:58:2d:d4:99:9a:
ae:b0:92:05:96:fb:1c:46:79:e3:f7:9d:af:d5:af:
aa:ec:67:81:83:1a:17:4a:e9:46:e4:1d:45:a8:9f:
83:09:7a:c9:f0:c9:ca:78:f3:5e:1a:ef:1f:4b:16:
27:d5:b7:83:ec:08:bd:d2:89:5a:79:c2:2a:8b:8f:
f0:2b:00:39:03:b7:d7:9b:35:5c:2a:1b:4e:d3:d4:
37:1d:2d:62:aa:87:2d:c2:26:d6:16:b6:55:db:e5:
fc:4a:d2:5d:82:59:f5:81:63:89:db:dc:b2:c8:16:
f0:65:cd:71:37:26:c1:95:11:ef:9d:fa:5a:d0:1a:
76:6d:6c:11:c1:b9:4c:75:5f:0e:20:f2:e8:2c:46:
ed:f9:35:ee:1a:5b:41:de:f7:f9:8b:c6:88:03:d4:
ec:7c:18:bd:8a:1d:8f:46:e4:f1:0a:16:24:75:d1:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:EA:30:74:79:30:AE:74:F1:15:29:C8:ED:E9:0E:7D:21:4A:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5538CB60F17311EEBFBA5C6C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
24:82:64:f5:75:2a:32:2b:51:85:6b:e0:ee:87:af:3f:25:33:
a7:5f:3c:b6:49:5b:4e:cc:55:e9:f4:64:5f:ee:50:1f:78:1c:
62:0a:ba:e7:be:c2:b5:f0:72:88:b0:3f:5b:c7:c4:44:82:76:
3b:03:e0:99:7b:34:02:ca:0e:dc:60:3d:14:75:19:26:97:cc:
e0:9c:54:80:32:b4:0b:30:75:5f:90:63:4d:20:b8:b3:fa:74:
3d:c0:68:84:cd:fc:75:8e:1f:4f:c9:11:34:d4:50:ec:fe:73:
0a:6c:b0:8b:e6:33:90:77:d5:58:c3:be:f5:d3:eb:f3:e4:44:
98:3d:91:9c:5b:9d:a7:c5:77:86:7a:21:72:96:fb:ae:cf:cc:
9c:91:5f:dc:aa:2d:c5:0b:61:84:67:fe:99:71:17:ae:0e:8b:
26:49:9c:9b:a9:e4:0c:50:13:1b:1c:89:a8:c6:4e:cb:fc:72:
58:aa:ee:b1:b1:0a:bb:b9:0b:d2:dd:63:5b:b5:89:ab:b4:75:
01:1a:b7:d8:50:f1:2c:cf:9a:a9:5a:21:f4:d6:7a:cf:6d:7f:
e1:3a:a9:5d:57:43:10:b3:63:69:b5:91:e7:8f:e5:75:a9:9a:
84:bb:30:b1:3a:c4:82:91:9c:89:61:0e:ef:22:68:73:5e:52:
3f:78:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 05:25:35 2024 by rpki-client on console-ams.rpki-client.org