Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7300EB380DCE11EFAB29CB66017001B1.roa
File: 7300EB380DCE11EFAB29CB66017001B1.roa (raw, json)
Hash identifier: EtBQVV+guF61XQhjC15nzGzOcVyseFGjk7Sm87vW0os=
Subject key identifier: F8:12:35:39:F0:5C:7C:F6:B2:34:DC:72:57:C4:D5:01:45:0C:4A:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8929
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7300EB380DCE11EFAB29CB66017001B1.roa
Signing time: Thu 09 May 2024 06:36:22 +0000
ROA not before: Thu 09 May 2024 06:36:18 +0000
ROA not after: Wed 29 May 2024 06:36:18 +0000
asID: 141883
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35113 (0x8929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:36:18 2024 GMT
Not After : May 29 06:36:18 2024 GMT
Subject: CN=663c6ee5-185f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:fb:ed:40:07:11:e9:f0:0c:28:83:4a:fc:
88:fe:aa:df:ca:84:6a:15:5c:2b:b7:bf:d1:b1:37:
2b:e9:56:e3:ab:ca:cb:25:78:1f:21:4e:d2:0c:9b:
99:31:3f:a3:08:7a:4a:f7:35:ea:c0:84:87:1e:e0:
08:c8:e6:f6:b4:ca:16:5e:98:df:17:d9:31:03:81:
08:a0:0b:74:3a:e1:49:d1:22:88:27:01:c6:56:e8:
68:64:bf:df:81:b3:36:15:f1:4b:30:5c:26:1c:97:
f8:e8:86:6a:27:d5:b7:dc:05:ef:e4:21:eb:0e:28:
f3:85:19:9b:c2:48:fd:7f:27:e6:96:40:c3:06:c9:
ab:d2:53:4d:ab:f3:2b:f7:23:38:42:0e:a1:21:de:
bc:7b:cb:00:19:78:94:31:97:e4:80:97:1c:43:3d:
73:b5:24:99:6b:3d:c6:46:20:5c:03:a9:40:4a:b5:
87:c9:6f:f8:e6:37:f9:20:62:4f:68:38:5a:fa:51:
1b:e1:29:74:c7:9f:b9:bd:d7:e8:c3:be:24:6b:62:
19:7e:5b:90:9c:87:92:99:5a:d0:9a:3e:07:97:1e:
44:5c:a4:99:3c:ba:d4:a1:ed:a5:f0:f7:35:ab:4b:
6b:de:a0:a7:a4:1c:66:84:54:a0:6d:73:ff:c8:a3:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:35:39:F0:5C:7C:F6:B2:34:DC:72:57:C4:D5:01:45:0C:4A:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7300EB380DCE11EFAB29CB66017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
88:58:af:45:a1:ef:59:97:16:75:a5:57:b2:9d:04:03:eb:05:
93:ce:59:82:37:ec:2d:90:6f:57:d1:e1:4f:99:65:20:38:8d:
b6:9a:0b:ca:1a:ad:80:b4:dd:e4:b3:41:cb:11:b8:d0:9f:39:
ab:ca:1f:60:f5:32:28:b5:14:ab:73:72:8a:1f:bf:da:dd:c8:
af:da:b7:67:bd:a5:54:b7:36:73:ed:b3:f6:9e:58:42:b1:61:
a0:ef:3b:9f:f7:d8:b2:20:56:89:79:d8:88:e1:8d:8a:e5:9e:
e2:61:9d:aa:66:e2:82:6d:b3:2d:d4:93:e6:19:10:3c:ba:e8:
87:71:f6:5a:2c:64:ab:61:10:e0:55:c1:6f:d8:74:8e:8e:f5:
b7:0e:c9:74:b9:16:03:a1:ee:23:24:51:1a:f8:60:1d:fe:ae:
97:c0:d1:40:cf:d3:25:c6:6a:60:4e:1e:0a:95:c6:08:cd:8f:
8c:78:c3:cd:1b:ff:f2:0c:f6:ad:4d:c5:bb:05:3d:16:ee:38:
dc:7c:16:ee:a8:aa:36:99:7c:82:09:8d:5e:d5:62:9b:09:09:
cc:99:d0:2b:bb:52:be:f6:66:2f:0d:bb:b1:f8:a6:90:9d:d7:
cd:aa:a7:2c:97:d7:82:2c:63:09:34:01:50:ab:dd:66:95:82:
1f:53:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 12:51:23 2024 by rpki-client on console-ams.rpki-client.org