Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B380CE14D5B611EC9FCF5AB9F1222468.roa
File: B380CE14D5B611EC9FCF5AB9F1222468.roa (raw, json)
Hash identifier: pVx7FFISJ0vEkxy0B2Q7L1kJyG4HegPVU9bhHa+tq00=
Subject key identifier: 5F:A8:CB:11:B8:77:44:07:31:9D:0A:08:67:66:FB:45:8F:B9:FC:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B380CE14D5B611EC9FCF5AB9F1222468.roa
Signing time: Tue 17 May 2022 07:55:21 +0000
ROA not before: Tue 17 May 2022 07:55:16 +0000
ROA not after: Sun 31 Dec 2023 07:55:16 +0000
asID: 133929
IP address blocks: 45.200.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5098 (0x13ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 07:55:16 2022 GMT
Not After : Dec 31 07:55:16 2023 GMT
Subject: CN=628354e9-9fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:65:27:0c:be:38:68:bc:da:ea:af:06:29:
31:c0:50:ac:41:a8:33:2b:f8:47:4f:8a:e2:ec:a8:
9f:24:c0:53:d9:8b:f8:58:94:f4:69:30:03:02:44:
b2:02:ef:9f:37:10:92:d4:05:55:63:02:ab:60:14:
87:47:b7:e6:87:4b:e1:64:1d:4f:fd:e7:66:9b:9a:
85:d5:ef:c9:5d:cb:69:7a:0f:d4:fc:20:18:87:24:
30:25:09:55:a7:73:ed:5f:b8:00:9d:bb:20:c8:93:
7e:ef:7c:96:e9:74:aa:b3:b4:70:86:c6:77:66:65:
b7:2b:4d:0d:0e:98:f6:06:95:10:0f:5b:1f:9c:90:
65:ef:91:ce:a0:f6:fb:b5:81:a1:1e:a1:37:4f:14:
09:76:6b:47:3a:8b:e4:74:ea:6b:f4:f7:30:8a:6b:
b1:05:96:64:3e:29:10:27:1c:6d:d4:d4:32:71:a0:
9a:55:c5:16:0a:9f:d9:00:06:d1:c8:78:30:b7:0b:
13:b1:6d:f6:d2:a3:aa:a9:bb:8d:dd:91:66:57:4b:
a4:12:d0:c5:59:af:89:50:d9:af:6c:f4:24:d4:83:
cc:08:51:9e:73:65:fb:53:40:2f:fe:b2:d6:f2:71:
52:77:67:55:3a:5a:be:8a:70:f1:5d:04:bb:45:ac:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:CB:11:B8:77:44:07:31:9D:0A:08:67:66:FB:45:8F:B9:FC:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B380CE14D5B611EC9FCF5AB9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:fb:91:81:7e:eb:42:76:a0:6b:77:9d:59:97:d0:75:98:b2:
0b:87:6c:38:2c:61:e4:51:cc:5d:24:66:5d:12:4f:9a:40:a5:
a3:25:60:03:75:68:a6:41:34:0f:4d:80:3d:17:13:d8:24:5c:
d1:df:c9:31:56:51:8f:d0:ab:88:c0:3b:77:78:15:bb:b3:3f:
de:6b:2f:2d:66:ac:23:18:6c:ce:c6:8c:41:7f:23:32:46:b1:
6b:74:45:eb:ac:8c:3c:6e:92:b8:b3:75:d9:93:66:7c:21:1d:
65:ad:db:e4:de:11:5c:ea:f2:3d:f6:b6:b8:e1:f9:fb:01:90:
8b:a0:14:af:c7:2c:83:68:99:4d:ef:93:a5:72:65:52:29:20:
52:02:f3:0c:65:1f:a5:3a:ff:4a:60:51:53:f9:2a:28:c7:f8:
37:38:42:bd:ce:75:95:1e:e6:ff:1f:ea:d4:d3:cb:23:78:22:
59:e6:10:8a:7a:e7:6f:ca:22:f7:64:60:8f:71:aa:e2:fe:e9:
69:41:91:a3:3a:07:bc:ad:c4:89:4d:3a:44:43:0b:b8:27:68:
36:2d:a7:f0:d4:e8:6a:3a:dc:7f:3a:53:5a:fd:2d:f9:17:37:
d7:96:9b:39:fa:45:c4:0c:7e:39:a8:53:f8:02:ba:70:86:81:
33:a0:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:38 2024 by rpki-client on console-ams.rpki-client.org