Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69C2B46E19411EC9E66418EF1222468.roa
File: A69C2B46E19411EC9E66418EF1222468.roa (raw, json)
Hash identifier: /b7QZX3DYMvc4DEoMru4XupP2qOb68tKOEh3lXnHInA=
Subject key identifier: 6F:49:21:D2:50:F1:A1:33:28:EF:8D:A2:B5:A9:3C:76:7B:86:2E:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1433
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69C2B46E19411EC9E66418EF1222468.roa
Signing time: Wed 01 Jun 2022 10:21:51 +0000
ROA not before: Wed 01 Jun 2022 10:21:47 +0000
ROA not after: Fri 30 Jun 2023 10:21:47 +0000
asID: 23674
IP address blocks: 45.198.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5171 (0x1433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 10:21:47 2022 GMT
Not After : Jun 30 10:21:47 2023 GMT
Subject: CN=62973dbf-2f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:4e:36:e0:77:d5:89:eb:50:63:a9:35:03:
63:cd:26:44:04:cd:47:a7:f2:f9:48:1d:83:c8:ba:
35:ff:40:2f:67:64:9c:35:29:1f:75:90:71:6d:83:
48:f2:a4:d4:77:ef:3c:a8:1e:1c:91:54:74:20:f1:
da:dc:e3:3c:da:18:ea:eb:c2:a5:3c:e1:fc:f0:c4:
e1:44:f3:3f:0a:eb:4f:4b:55:42:49:ea:2c:7a:79:
c8:10:99:c2:a8:92:ae:4a:07:80:58:1d:3e:37:e1:
2a:b6:77:bd:d8:23:eb:a6:33:5b:39:29:ab:92:e3:
85:07:1b:e4:d8:e1:73:f5:a2:4d:0b:e7:08:43:9d:
cb:23:52:d2:f3:86:f7:ce:89:2a:32:c7:8d:1f:d6:
d8:13:2a:a6:09:dc:56:a1:60:6c:b4:68:2e:fb:e4:
2b:30:bc:b6:b4:29:d9:5a:e2:0d:3b:01:b5:9e:79:
65:97:0c:c4:bb:17:4f:a9:7f:22:7d:00:32:ac:cc:
b0:84:b6:14:05:f5:90:aa:79:ca:b7:61:fc:de:4e:
bd:33:4f:5c:04:d4:9d:d7:17:27:47:b2:37:1a:d2:
8f:c3:4d:62:31:07:ec:bc:f8:ea:38:1a:a2:dc:99:
e2:6a:a5:1c:b9:a6:db:46:f0:3b:ca:a3:78:e9:38:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:21:D2:50:F1:A1:33:28:EF:8D:A2:B5:A9:3C:76:7B:86:2E:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69C2B46E19411EC9E66418EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:4b:ae:9a:cf:cd:4a:67:ab:b7:7d:f6:ee:e5:50:3b:75:a5:
e6:d4:a6:bf:3a:e1:27:ff:27:2e:e8:d7:3d:09:8b:40:0b:a0:
76:f6:3b:de:8a:64:36:80:d8:3f:08:6e:dd:b8:3e:e6:4c:78:
b1:4b:f5:24:63:b2:a0:35:a4:93:c7:d5:19:30:6a:e7:80:09:
c9:45:c0:40:64:75:61:bd:66:ef:1c:87:6b:98:a3:6a:79:b2:
b0:8c:56:57:fa:25:5d:25:e5:1d:0d:2a:68:a5:09:fc:18:fa:
39:69:0e:b6:1a:51:b4:14:7d:10:8e:ed:c7:ac:f0:f0:c0:09:
f0:72:e2:4f:17:ed:f2:0b:04:3d:37:3d:37:bf:3d:51:b1:80:
17:05:67:45:bc:a7:49:2b:81:3d:76:2d:f4:48:b1:60:30:cb:
12:98:d3:49:a6:11:be:8a:01:b3:2e:c5:b7:f5:95:08:6d:17:
22:06:35:36:20:7c:70:ba:07:01:cd:0b:04:0e:09:6d:4f:a1:
4a:8d:0c:dc:dc:a1:31:e0:2c:f1:73:e9:77:e7:78:58:36:72:
12:d1:81:98:38:e1:b5:de:50:64:f1:b5:eb:fe:a6:8a:ac:0e:
dd:cd:13:45:ae:68:81:a9:6d:2c:28:19:8b:d1:5b:4e:3f:db:
0f:dd:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org