Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4EEB18E90D11EB834B3D6AD8A014CE.roa
File: 6F4EEB18E90D11EB834B3D6AD8A014CE.roa (raw, json)
Hash identifier: dqRNEAqNt1geFRLOgVv+aJD3YzswwhlwQCiREhkBQRQ=
Subject key identifier: 3D:B1:1C:AF:10:B8:02:EB:32:F9:9F:4D:3F:E4:D4:EA:98:20:10:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0788
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4EEB18E90D11EB834B3D6AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:49:15 +0000
ROA not before: Tue 20 Jul 2021 03:49:11 +0000
ROA not after: Thu 15 Sep 2022 03:49:11 +0000
asID: 1239
IP address blocks: 45.200.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:49:11 2021 GMT
Not After : Sep 15 03:49:11 2022 GMT
Subject: CN=60f647bb-2691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:7c:e2:d5:65:d4:90:e6:92:15:33:73:c0:
3b:8e:21:c7:cd:e9:a7:c3:5b:c7:f4:6a:51:87:0e:
22:d9:4f:31:6a:85:c9:e1:bc:00:9b:3b:df:a6:e1:
03:2b:ed:86:73:fd:20:5e:63:da:de:df:c2:62:69:
01:54:b9:cc:54:66:62:39:ac:87:16:23:7b:42:b8:
b4:ff:b1:1d:97:11:96:b8:43:c1:8d:28:8e:8c:4b:
80:78:5f:f9:5c:4f:57:f1:7a:29:cb:73:b6:26:d7:
22:99:73:63:45:75:45:2e:da:d2:ac:4d:08:b7:aa:
b3:1e:a0:6a:f4:6c:32:cc:07:96:72:6d:21:df:8c:
a3:f5:aa:4c:dc:bc:b9:7d:f2:90:49:53:78:b6:4b:
c3:ac:bb:ca:1c:b1:90:22:52:0c:71:01:7c:8d:8e:
3f:04:7b:89:b3:95:40:32:87:1c:5b:b6:c5:4d:18:
ff:38:e6:70:9e:8a:9f:cf:8e:bb:1c:dc:31:b0:57:
cf:93:bb:ba:41:3e:b8:ff:4b:56:f6:6a:ef:94:32:
ac:fd:b7:fe:95:ef:2a:cd:f0:e5:f9:ea:6b:93:7b:
0f:df:8a:ad:53:e5:26:fb:33:a1:88:85:70:d3:10:
18:5e:58:71:7c:9c:62:39:6e:4a:17:3c:24:de:cd:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:1C:AF:10:B8:02:EB:32:F9:9F:4D:3F:E4:D4:EA:98:20:10:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4EEB18E90D11EB834B3D6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:cd:fe:d2:47:b5:e2:cb:77:cd:90:e6:d5:32:d6:22:f2:49:
35:1c:21:d1:8b:f6:d0:98:5c:80:72:74:55:ea:66:93:d7:b4:
6b:80:bd:02:cd:f9:cc:bc:5f:36:9e:a3:48:2a:35:fb:37:0b:
38:9d:e5:1c:3b:c7:ab:40:5c:18:93:0d:04:e5:5f:20:9e:eb:
25:04:ba:04:4e:4b:6f:ec:55:ec:dc:3a:85:3d:4f:aa:f4:55:
65:6d:d3:47:f6:f1:fe:e7:5b:2c:9a:5d:b8:de:b6:67:45:92:
d4:11:6d:b5:ff:f9:0b:aa:57:8b:76:cc:79:d6:70:3a:0e:67:
f2:be:10:d3:d3:61:d4:21:d2:15:d0:33:01:82:d4:25:5c:14:
b6:b8:85:a5:b4:e7:10:83:86:02:3d:4a:f4:39:d8:45:2b:8f:
bc:2c:fd:db:f5:fe:3d:c7:3a:b4:0c:6b:0c:70:13:51:99:bf:
c0:9c:8d:9a:d7:d4:b3:90:20:a9:b4:3b:02:09:9f:82:67:a6:
a2:ac:13:40:ba:2a:79:4a:b3:d1:61:6a:6e:da:a7:0d:17:0e:
31:0e:f1:49:3e:9b:2d:27:2b:ca:bb:04:b2:06:69:5e:bb:80:
79:c4:09:64:60:63:e5:93:95:7c:9f:95:e0:5b:04:e9:8a:25:
18:37:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org