Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0273E447DB11EF99BE3A71762E951A.roa
File: AF0273E447DB11EF99BE3A71762E951A.roa (raw, json)
Hash identifier: Cr90GBDimUS6GxG+ljeFbw37In+YkVHZ6s5w5nsn2V8=
Subject key identifier: 10:85:22:FC:2D:6F:6B:E4:43:9A:CB:E7:58:60:63:F1:99:B7:15:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0273E447DB11EF99BE3A71762E951A.roa
Signing time: Mon 22 Jul 2024 03:37:13 +0000
ROA not before: Mon 22 Jul 2024 03:37:10 +0000
ROA not after: Fri 23 Aug 2024 03:37:10 +0000
asID: 48031
IP address blocks: 45.200.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40435 (0x9df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:37:10 2024 GMT
Not After : Aug 23 03:37:10 2024 GMT
Subject: CN=669dd3e9-113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:04:cd:85:fe:43:5b:fa:af:9d:7f:f0:7a:
6a:e2:3b:98:a3:6b:7e:46:38:57:2b:a3:3d:61:56:
7e:ee:20:e8:af:e4:b1:d3:82:9e:2b:69:af:5a:f7:
c7:b3:57:f9:e6:13:73:97:08:9b:86:83:7d:28:77:
ed:8c:53:28:8f:ad:ad:1c:87:ed:b3:1c:8d:03:db:
11:96:7d:58:23:0d:63:08:ee:09:d0:6b:04:c4:ee:
98:ef:8c:f1:f5:8d:ed:3f:90:04:18:08:a0:2b:55:
32:2e:02:dd:2c:d6:e0:ac:60:ea:c1:67:ff:cf:44:
36:54:21:b5:ae:df:45:d1:d4:64:00:85:5a:06:7c:
ec:3b:2f:83:dd:56:50:94:09:99:35:df:9e:92:cd:
01:9f:4d:8f:0d:c1:d8:cf:a4:0c:a9:dc:54:e4:f6:
4d:68:4a:b5:c2:40:10:32:26:6f:ba:1a:a2:61:c0:
a1:02:c0:98:3a:df:20:39:47:d2:d2:43:4f:7c:92:
97:64:20:8e:44:1b:e3:c7:d3:78:18:61:62:83:2b:
16:d6:64:eb:64:06:51:9e:d7:b5:4e:e6:bf:97:71:
99:ff:ca:f3:bd:8e:27:0b:42:46:46:46:af:32:4a:
e9:d3:e8:30:12:a1:ab:ee:06:c8:be:4c:75:09:fb:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:22:FC:2D:6F:6B:E4:43:9A:CB:E7:58:60:63:F1:99:B7:15:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0273E447DB11EF99BE3A71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.190.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ee:06:93:8c:ff:d0:57:02:f0:92:e3:02:e5:0b:87:7b:c5:
f0:c4:76:b2:5a:15:28:6f:29:92:bc:cd:65:7b:58:9d:1f:d4:
3b:36:24:6a:a3:2f:ef:a9:37:c7:d5:ca:40:56:67:32:76:db:
1d:4c:3c:26:4f:ba:36:17:a4:05:aa:00:1a:82:0a:90:50:52:
05:b5:df:86:be:42:50:1c:88:6b:1e:79:05:1e:dd:00:c6:e0:
6b:86:8c:a2:54:e1:1a:49:5b:a5:96:16:02:39:e7:e6:00:b6:
78:1e:19:2d:7c:64:7f:34:f6:d7:c0:6e:b5:8c:eb:c7:9d:2c:
65:c4:99:4d:c0:ea:de:a7:e0:90:f1:19:da:40:2b:f9:7a:a5:
0a:84:d5:e7:2f:b6:7b:f9:dc:44:aa:37:22:6e:80:eb:a7:ac:
1b:c0:cd:35:61:53:71:b6:85:f9:91:27:a2:37:bd:3e:43:9d:
9c:a8:ff:02:2d:31:0e:8b:c2:f9:bb:8b:e2:b6:4f:a9:69:14:
36:4b:20:e6:19:a1:b6:b9:d4:b0:98:b5:de:65:d2:b5:d5:99:
ed:9b:d8:07:02:2f:5b:b3:71:94:44:18:69:51:02:51:5b:65:
a6:62:c0:52:d2:5c:68:6e:b1:2a:05:21:6e:03:bf:19:e4:4b:
44:f1:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org