Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7ED1D9A13D211EDB8D2C9A9F1222468.roa
File: B7ED1D9A13D211EDB8D2C9A9F1222468.roa (raw, json)
Hash identifier: fIcEw3OcJlR9VJjtqb7mzg6x86f40xSKPAN8Jvx2rkg=
Subject key identifier: 0F:FF:5F:8F:5C:E0:42:AE:72:D6:20:06:59:D6:84:71:6B:3C:B5:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7ED1D9A13D211EDB8D2C9A9F1222468.roa
Signing time: Thu 04 Aug 2022 08:52:07 +0000
ROA not before: Thu 04 Aug 2022 08:52:03 +0000
ROA not after: Fri 10 Feb 2023 08:52:03 +0000
asID: 133861
IP address blocks: 45.207.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696 (0x1640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:52:03 2022 GMT
Not After : Feb 10 08:52:03 2023 GMT
Subject: CN=62eb88b7-1afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:6a:03:67:6d:32:cf:13:66:f0:68:48:4f:
1e:18:6a:ba:34:bd:b9:de:b2:46:99:91:6f:7f:fc:
88:80:f4:3c:c4:06:ee:c9:7b:cd:22:f2:09:c6:74:
7a:1c:af:95:1c:be:50:52:ea:5c:46:54:f0:de:8c:
3d:c0:f2:8e:3a:d6:b1:8e:43:6f:91:5f:a8:46:15:
3a:e3:05:4a:0f:8e:7d:1b:08:df:e6:c8:21:ae:78:
d4:48:38:6f:7f:d9:4e:92:b3:bd:9f:f3:58:c9:03:
ca:b6:fc:84:d3:9f:44:12:04:b6:c6:42:4c:6d:d5:
70:10:46:20:2f:7d:12:f8:e2:a8:d9:b1:ee:c0:8c:
47:24:e1:b5:fe:f7:2f:e2:c7:fe:c3:02:79:b4:51:
70:fd:40:79:cd:db:a2:0e:6e:d9:54:db:6b:6a:08:
9b:5f:12:d9:f2:23:15:ab:7e:37:80:ae:1f:d3:b0:
60:13:47:a4:7b:c7:56:64:1b:58:9e:36:af:7d:77:
6c:91:a6:bd:3f:e7:f9:9a:29:5e:c8:64:26:2b:a3:
d5:9f:c3:43:5d:3d:85:ef:0a:2a:c8:ee:19:17:bb:
41:02:75:c9:57:4e:78:94:82:42:15:da:4a:c4:70:
85:ab:4b:a8:2e:1a:8b:5a:30:80:87:37:63:94:d9:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:5F:8F:5C:E0:42:AE:72:D6:20:06:59:D6:84:71:6B:3C:B5:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7ED1D9A13D211EDB8D2C9A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c0:f4:4d:b1:b8:de:dc:7d:bd:61:77:37:f8:07:bc:ba:34:
57:48:f1:ad:b3:dd:b5:0d:bb:8d:a5:d2:3c:ed:2b:81:07:f3:
91:d5:26:d9:db:b2:99:0a:28:79:1f:75:be:6f:ef:41:d0:44:
5b:62:d0:65:7a:88:82:a3:64:54:f7:89:6f:e0:8c:97:76:ab:
1a:c4:9e:a8:db:2c:a7:e5:8c:33:5a:ba:42:47:2b:ce:d2:5c:
db:d1:f5:82:a1:89:ef:f0:22:55:61:f4:d3:63:29:4b:45:ba:
ab:30:d1:09:8b:24:82:df:51:b3:a5:aa:6a:c4:09:69:53:86:
c3:47:61:70:33:b0:c2:2e:16:3f:17:08:db:22:21:1d:1c:42:
5c:16:5d:26:90:41:e0:4c:25:f3:c8:c7:86:d7:bf:a6:6c:a1:
a7:3a:d0:fd:32:34:24:1d:20:2b:6d:94:aa:2e:01:fd:01:33:
86:d3:2b:dd:89:ea:ee:8f:ac:12:e6:f2:f9:20:fd:f6:9c:06:
7d:75:1b:0e:5b:a3:10:5b:a4:47:a7:d1:b0:04:01:80:8a:eb:
0a:61:17:9b:54:95:9f:f0:46:3e:15:e2:44:42:9d:57:fd:84:
79:09:dc:8d:f7:ca:66:0f:60:85:8d:fe:7b:c2:0e:02:1d:ec:
66:90:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org