Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B1AA92F6C311ECB6C330D1F1222468.roa
File: 90B1AA92F6C311ECB6C330D1F1222468.roa (raw, json)
Hash identifier: NsyRGV4Mp6w74hf1yI/AXv3z+xsVMWdVdun+dlQvtwI=
Subject key identifier: A7:98:14:76:90:5D:E4:40:6C:77:72:2E:C0:36:53:B4:C3:61:9D:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 151C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B1AA92F6C311ECB6C330D1F1222468.roa
Signing time: Tue 28 Jun 2022 09:20:35 +0000
ROA not before: Tue 28 Jun 2022 09:20:31 +0000
ROA not after: Fri 30 Dec 2022 09:20:31 +0000
asID: 328608
IP address blocks: 45.200.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5404 (0x151c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 09:20:31 2022 GMT
Not After : Dec 30 09:20:31 2022 GMT
Subject: CN=62bac7e3-a49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:fa:b6:74:8d:65:06:5d:7c:da:1d:80:10:
33:18:eb:ab:a9:53:7a:54:01:06:a3:fe:48:53:a9:
35:58:ee:13:ac:08:9a:a7:44:08:fc:1b:f3:23:b3:
94:ab:84:ef:c2:8d:5c:eb:98:5e:af:ab:23:b4:2b:
de:7b:45:a1:9c:24:b0:43:6f:57:8f:d9:94:c3:83:
8a:4d:5a:56:1f:3d:06:e1:3f:a6:94:79:58:6c:06:
69:5c:27:70:ea:9f:a0:80:81:ac:f8:4f:55:ef:c3:
87:59:77:91:82:b4:9e:e4:fb:34:9e:fd:35:97:45:
6c:48:4a:9e:46:cb:89:d1:94:f6:be:33:39:75:09:
8c:e0:01:29:37:df:b7:25:4d:5a:0a:fe:5e:c6:69:
1c:a3:f2:7f:cb:3e:78:91:17:b0:de:fb:6d:59:8f:
0d:38:fe:4f:88:d1:30:7c:ea:8e:2b:e8:7b:da:e8:
f8:91:c7:dc:47:45:77:99:b1:51:1f:de:26:95:a9:
b4:89:8e:4e:ad:96:6a:bf:6a:af:3c:9b:a3:d5:67:
89:3c:ee:02:76:d1:fc:ed:d7:27:ad:f8:60:5c:b2:
97:da:ce:79:04:ef:0e:42:7d:56:69:fd:0b:b7:d1:
5c:a6:4d:2f:ba:d4:c8:bf:20:56:a3:57:39:58:3f:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:14:76:90:5D:E4:40:6C:77:72:2E:C0:36:53:B4:C3:61:9D:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B1AA92F6C311ECB6C330D1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.121.0/24
Signature Algorithm: sha256WithRSAEncryption
98:86:27:a1:c8:54:04:b0:2c:bf:74:60:fa:e9:c4:bc:e8:ed:
a6:c9:66:9f:4e:d4:04:68:68:f4:8b:7e:a9:a1:1e:98:86:b1:
7b:a2:93:ce:a9:0d:f1:5f:fc:e9:ec:fa:52:3a:68:d0:eb:07:
fc:d3:42:ee:91:68:3f:24:d6:2c:f3:b5:20:fe:de:42:c9:8b:
a0:fc:0b:3d:98:35:5c:04:a1:fc:02:aa:4b:ab:54:c6:60:38:
b8:f9:cd:d4:dd:18:6c:85:40:e7:09:d4:c5:f1:7b:1a:99:07:
a1:13:aa:e0:92:d0:b5:03:de:4c:5a:9c:d7:b5:4d:07:8f:92:
81:99:48:fc:22:ec:82:be:ea:38:d3:ee:68:39:1a:f7:81:cc:
12:32:b6:f6:30:c1:be:b9:7a:0a:d5:77:79:35:b5:af:95:26:
ea:88:16:de:3d:28:46:06:e6:aa:97:37:c8:d6:db:5f:13:06:
6a:36:37:6b:01:01:e4:a6:02:a9:82:90:7b:bc:07:09:47:e8:
a3:ce:1b:0f:2f:1f:8c:b4:a5:48:42:1a:aa:47:35:c8:64:eb:
48:ad:3a:4e:9f:a9:c0:da:4f:6a:a4:2f:4b:6f:32:90:6c:80:
de:f9:b4:53:ba:42:98:ff:36:43:c0:f2:c7:bd:9b:47:44:e7:
9b:40:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org