Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7D6E4213D311EDAD26D7ABF1222468.roa
File: 5B7D6E4213D311EDAD26D7ABF1222468.roa (raw, json)
Hash identifier: Tr4iIIwy/hXZmhLn0n9RtfiOyfnWcCKjpWrkaLdsx/A=
Subject key identifier: C4:87:BE:21:1A:78:42:7F:2E:FD:74:F5:6D:BA:61:91:24:78:ED:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1654
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7D6E4213D311EDAD26D7ABF1222468.roa
Signing time: Thu 04 Aug 2022 08:56:42 +0000
ROA not before: Thu 04 Aug 2022 08:56:38 +0000
ROA not after: Fri 10 Feb 2023 08:56:38 +0000
asID: 133861
IP address blocks: 45.207.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5716 (0x1654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:56:38 2022 GMT
Not After : Feb 10 08:56:38 2023 GMT
Subject: CN=62eb89c9-3bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:86:ee:61:72:08:3c:c7:70:7b:47:56:12:
1e:7f:6e:eb:d9:a0:3e:af:13:06:a7:41:64:2e:31:
98:b8:9f:a7:e0:17:4d:f1:fa:ae:4c:dc:ad:1d:bf:
49:a9:01:7e:6a:c2:53:20:12:67:9e:96:db:71:f0:
a3:9b:f7:99:77:8c:f2:68:67:9f:ed:9d:1b:df:4a:
36:15:13:68:fe:9b:82:80:65:bf:2c:a5:d7:ee:bf:
15:10:52:ab:d6:59:ba:12:63:07:de:3c:52:6d:6d:
a8:37:18:69:61:3a:b4:ba:25:9b:3e:7c:4d:99:56:
a5:bb:82:3d:a2:ee:ab:09:f5:5a:49:ee:5a:91:ed:
82:c1:25:1b:ca:84:89:65:8c:21:0a:a9:b9:01:41:
e4:82:b2:5c:61:a3:af:08:e5:66:c7:6e:0c:ae:78:
f7:b6:30:f2:cd:90:e3:df:62:a8:f5:0b:f3:ad:00:
4a:e8:39:67:b7:6d:34:c6:28:9f:0e:6f:53:82:b3:
43:81:96:05:75:97:db:98:71:19:d3:25:75:f1:37:
b4:b2:8b:29:45:5a:bb:f1:8f:57:6c:0f:20:36:06:
8a:68:bd:4b:dc:dd:26:7a:ff:05:c1:90:77:4e:2a:
e1:34:1a:f5:40:54:36:55:cc:df:37:89:e9:7e:74:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:BE:21:1A:78:42:7F:2E:FD:74:F5:6D:BA:61:91:24:78:ED:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B7D6E4213D311EDAD26D7ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:66:99:a7:de:4b:01:cc:da:3b:89:06:9f:00:45:62:48:43:
ba:64:61:ea:f1:66:8e:e8:df:3a:72:bb:4e:95:6c:2f:6f:82:
df:b8:90:cf:2e:76:68:e1:ed:29:1c:39:ed:a0:c7:af:5e:6e:
2b:73:05:e0:d4:e9:30:d5:74:eb:27:cd:1a:4d:56:d2:9f:c9:
b7:ef:5b:ec:b8:a2:cc:84:41:4c:16:20:a7:24:d3:17:16:74:
4d:18:dc:cf:09:bc:72:58:98:ff:ed:30:3c:92:a7:ef:8c:e6:
5c:86:b3:7f:98:2c:62:fc:d5:cd:99:ff:a8:20:ad:68:bc:b6:
27:64:ea:f6:36:43:98:8e:76:d0:52:64:4b:73:77:f7:3f:dc:
f3:c0:cb:d8:26:f2:68:98:da:23:bc:47:82:ab:97:cc:be:59:
a4:1b:aa:b8:70:f6:0a:4e:e5:85:76:8f:c8:db:cd:c9:67:1a:
4c:5a:d9:9c:45:85:7e:63:1e:74:ca:fa:a6:72:20:97:05:c8:
e9:10:b8:74:0f:b0:71:28:29:82:80:68:46:58:3d:67:f4:54:
ea:cb:82:bd:c5:1b:d0:15:62:b8:43:94:62:5b:c9:79:27:7d:
a0:aa:b4:e7:da:43:00:45:eb:12:23:88:b6:cb:d0:e3:0d:90:
d0:08:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org