Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8549FE8C429511EF879E7E48762E951A.roa
File: 8549FE8C429511EF879E7E48762E951A.roa (raw, json)
Hash identifier: 9KN76yNIB3W2JoOgeDnVidrB0cuLGQCg8pF/Oxm9HyQ=
Subject key identifier: 5C:71:30:33:CB:9C:F4:28:57:22:19:05:BA:48:AD:3A:B8:6F:62:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8549FE8C429511EF879E7E48762E951A.roa
Signing time: Mon 15 Jul 2024 10:32:23 +0000
ROA not before: Mon 15 Jul 2024 10:32:19 +0000
ROA not after: Sun 01 Sep 2024 10:32:19 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40088 (0x9c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 10:32:19 2024 GMT
Not After : Sep 1 10:32:19 2024 GMT
Subject: CN=6694fab6-4836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:25:18:60:f5:05:6e:ba:1a:05:36:76:c4:
e2:11:c4:46:d8:6f:01:b8:90:bd:88:12:62:a1:af:
35:f2:b5:8d:9b:2d:98:0b:31:4e:c6:38:54:16:32:
57:16:f7:84:84:41:74:94:16:b0:2b:0a:41:39:26:
ea:fd:d2:3a:cb:37:95:1a:1b:89:23:da:c8:59:65:
b2:2a:79:93:cd:72:69:d4:de:e5:91:a8:b1:da:6c:
c9:f7:f4:f5:77:20:7c:62:72:fb:e3:ba:6d:d8:af:
fe:e7:e8:5c:73:e7:66:48:9a:a6:72:3f:13:d5:70:
5f:ef:53:be:14:d9:ae:13:fa:40:73:96:dc:1d:de:
24:f2:c9:18:7e:6c:bf:b7:2c:ed:26:a6:da:1c:16:
63:7b:f9:96:ec:6b:1c:56:9c:0b:83:e0:32:34:6e:
53:fe:98:0f:e2:c1:1c:a5:be:af:ec:7b:83:e5:68:
ea:5e:72:54:57:76:a7:6c:cc:58:f2:d9:2a:17:bb:
cb:b9:2c:6a:db:28:41:b4:60:87:31:29:4a:cf:8a:
44:35:bc:04:33:b4:cd:fb:ca:ab:b4:7c:d6:1c:17:
3e:2e:d6:2b:08:f7:5f:13:d6:58:f4:bc:d0:44:00:
d4:2f:9b:d7:9d:2d:31:0c:5a:e9:df:fb:28:36:7c:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:30:33:CB:9C:F4:28:57:22:19:05:BA:48:AD:3A:B8:6F:62:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8549FE8C429511EF879E7E48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
64:2e:d1:b4:3f:bd:8c:1c:21:fc:61:17:be:82:8b:24:ab:94:
a5:c6:18:97:23:dd:99:5b:50:f2:2b:1f:f0:f5:fd:f7:ed:79:
34:4e:c9:91:84:d5:e3:a1:89:e9:a6:67:7d:72:d8:bd:ed:60:
f6:a4:e0:6a:72:9a:e3:18:a0:34:14:e0:02:a3:a3:b4:85:7c:
bb:12:78:9d:c0:0b:42:88:41:2e:54:57:d4:39:64:ae:35:58:
80:42:73:16:56:14:3a:83:8a:02:4c:00:dd:d8:1d:65:91:40:
00:88:76:d3:74:2e:1e:eb:05:24:4e:7f:84:21:8f:dc:cc:ac:
eb:2e:b7:7c:95:02:1f:d5:a5:2f:69:ea:3a:0c:1c:2d:42:99:
83:40:d0:9f:a3:07:81:92:1e:a2:f6:8b:71:41:14:7a:7c:b7:
41:d7:8e:61:54:9b:34:b4:db:97:4e:d3:ca:14:cd:1c:ff:18:
fd:29:c2:c3:11:6d:11:57:3c:a8:e0:f4:90:b3:8b:66:94:d1:
d0:87:f3:7f:eb:59:be:e9:bb:2c:5c:69:bc:0f:bb:81:dc:34:
4b:ec:d7:ab:a7:b0:89:df:18:bc:9f:be:3b:c9:c9:f7:31:c6:
00:f2:64:12:3a:0b:43:f4:38:bf:d3:13:cf:0f:eb:d0:3c:ce:
6d:7b:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 13:55:21 2024 by rpki-client on console-fra.rpki-client.org