Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BA1DB20DCC11EF93FA8B56017001B1.roa
File: 78BA1DB20DCC11EF93FA8B56017001B1.roa (raw, json)
Hash identifier: WNN3Mj6Rl6ek/hnDE0le6BmJPhARML15JnGg6kkC6xE=
Subject key identifier: AF:C3:FB:90:D8:64:05:0F:A8:02:C1:FC:F7:C9:C7:02:36:21:F0:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 890D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BA1DB20DCC11EF93FA8B56017001B1.roa
Signing time: Thu 09 May 2024 06:22:12 +0000
ROA not before: Thu 09 May 2024 06:22:09 +0000
ROA not after: Wed 29 May 2024 06:22:09 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35085 (0x890d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:22:09 2024 GMT
Not After : May 29 06:22:09 2024 GMT
Subject: CN=663c6b94-dff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:29:d9:a0:ca:ca:90:3d:0b:b5:b6:65:0d:
39:86:10:d0:b7:e9:f9:75:35:cf:35:de:1a:98:9f:
a9:57:8b:85:fc:83:ee:f4:08:d8:07:df:1b:5b:53:
3e:82:a3:05:90:2a:ea:2c:7b:43:8e:b1:5a:30:99:
85:51:ca:59:5d:7c:e8:fb:ea:1b:ea:6b:fc:09:ca:
7b:db:f9:08:76:b5:26:7d:0f:9e:01:2e:fb:9f:7c:
27:b4:fe:d9:89:94:5f:83:aa:6d:41:e4:3a:fe:fd:
b0:8a:0a:d7:b8:a5:47:f7:c7:61:3d:20:4e:f9:2c:
be:74:b4:a4:be:f3:50:44:48:6e:8e:fe:8f:b8:f7:
86:10:35:80:ca:77:31:f1:7b:53:96:2f:47:af:b2:
bf:32:4a:ee:25:3e:10:bf:fe:da:08:b9:59:c3:bd:
ee:cd:dd:aa:c9:e5:e0:71:79:c1:88:28:f7:da:c9:
ec:c0:b4:c4:8b:d7:bb:8e:0a:f3:16:7c:0e:17:56:
8a:09:ab:fe:66:a1:d3:5a:99:e2:47:c3:d5:31:86:
ee:71:2a:58:11:bf:d2:f6:75:8f:8a:1a:a5:75:8a:
e5:38:73:39:a9:6c:36:88:18:ff:86:52:56:11:e5:
54:34:1e:39:ba:f5:e5:8a:e6:61:02:0f:86:cb:01:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:FB:90:D8:64:05:0F:A8:02:C1:FC:F7:C9:C7:02:36:21:F0:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BA1DB20DCC11EF93FA8B56017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
44:7a:29:91:2c:8a:bb:11:c8:82:e6:d5:9d:c7:8e:9b:cd:1a:
ef:d9:40:51:a1:ce:1d:f0:7e:a3:20:0f:88:1a:3f:e4:20:07:
8b:c6:45:e2:be:ec:45:2f:f1:16:f3:f3:d3:29:ad:06:2a:c6:
ab:fa:ca:0e:d9:b1:22:56:8b:3c:4d:88:da:76:9f:dd:e1:16:
98:7e:69:91:78:bc:9a:c4:58:fd:39:b7:91:a1:b5:6e:b5:f0:
43:ba:6b:1f:2d:41:4a:7a:df:95:73:1a:2b:1a:dd:ca:07:fb:
f3:27:c3:3c:b9:6e:43:da:13:60:48:71:1d:5a:fa:aa:06:d3:
95:9c:73:a2:d5:97:a0:7b:10:43:07:4b:b5:82:da:43:f2:62:
12:d4:49:aa:5a:9f:35:f4:e3:39:35:6b:00:d9:c3:4a:b0:21:
0a:86:e6:80:1d:a4:27:ce:34:a7:ce:02:47:a0:0b:44:df:42:
e5:6b:6b:5b:88:86:2e:2a:ed:82:fd:5b:b8:1a:2e:6b:3a:6f:
aa:9c:d2:ac:dc:d4:2f:f2:32:21:95:3c:45:e0:fb:bc:85:39:
5c:ec:c9:ab:b8:16:5f:7b:15:e5:5b:6f:54:c7:48:4b:60:b3:
0a:d3:2b:22:1c:b3:b0:c7:2e:a3:35:55:4b:a1:e6:a8:21:26:
30:31:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:10 2024 by rpki-client on console-fra.rpki-client.org