Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45669BC3CCD11EF8D1A8DBE762E951A.roa
File: C45669BC3CCD11EF8D1A8DBE762E951A.roa (raw, json)
Hash identifier: WV0NIMJATywVtxb2YXk9mTiFf4zYUBFIinH9hOKtz5k=
Subject key identifier: 40:03:23:B7:6D:33:E4:A9:48:15:E2:BC:73:8D:0C:60:36:9E:84:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 994E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45669BC3CCD11EF8D1A8DBE762E951A.roa
Signing time: Mon 08 Jul 2024 01:59:53 +0000
ROA not before: Mon 08 Jul 2024 01:59:47 +0000
ROA not after: Fri 09 Aug 2024 01:59:47 +0000
asID: 23470
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39246 (0x994e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 01:59:47 2024 GMT
Not After : Aug 9 01:59:47 2024 GMT
Subject: CN=668b4819-d6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:d8:1a:10:7d:00:6c:2d:8d:d9:f0:fb:dc:
d9:e7:7e:f0:23:0c:cf:3f:30:d5:6a:57:51:33:d0:
88:31:be:b3:dc:b3:e3:a3:2c:09:f2:e2:7f:f4:9a:
b5:5e:ac:36:e2:03:84:b2:65:35:07:ca:90:14:7d:
d2:f9:c5:f4:1f:e5:46:7b:b8:f7:31:72:0f:68:db:
25:b3:80:2f:dc:ca:76:d2:a9:a5:a9:3a:31:bc:69:
dc:82:92:1b:de:aa:f1:82:12:e7:e9:73:8b:1e:38:
d1:80:a5:56:3e:29:60:80:4f:d2:3b:c6:7b:15:89:
4d:d8:aa:7c:c2:e7:eb:ed:43:dd:df:07:02:f1:ce:
d5:9b:6f:bd:b1:eb:80:7a:a0:51:9b:58:c3:fc:9f:
5a:02:82:5a:55:86:51:d1:a3:60:24:8e:cc:10:2c:
59:12:32:13:dd:24:a7:2f:49:3f:9a:64:de:fc:bd:
b4:a8:92:da:08:5c:3e:3d:85:96:2d:2f:f9:a5:6b:
dd:88:15:ef:48:26:7f:ab:27:c5:dc:29:5e:be:dd:
e5:61:1d:15:c8:18:9e:a8:a0:27:75:31:45:4e:a5:
4c:71:b4:78:d6:33:d7:db:8d:77:72:8c:e4:e6:65:
59:77:7e:de:f0:c4:23:a7:2a:b9:2d:df:67:ec:d3:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:23:B7:6D:33:E4:A9:48:15:E2:BC:73:8D:0C:60:36:9E:84:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45669BC3CCD11EF8D1A8DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b4:d3:1e:17:0c:9e:21:d6:82:37:80:06:38:d3:7a:63:0d:
e6:85:23:17:f1:f6:35:ec:8a:32:bb:54:4f:5a:0a:66:6f:03:
61:53:8f:9a:e1:ad:3a:2e:a6:41:08:64:47:9f:c2:ac:a6:ac:
e2:46:a2:49:75:05:60:5e:56:81:f7:69:09:b2:30:83:4f:54:
42:5f:aa:c0:d7:7d:f9:fd:c7:ca:f1:b1:eb:96:fa:47:48:e9:
8d:32:1c:c3:6c:16:e4:6d:fb:ad:39:ad:04:e7:07:18:57:8d:
ce:e7:5a:ae:c7:37:24:9c:a7:4d:8f:97:46:4e:59:af:92:37:
43:2d:f7:e6:9a:24:5a:fc:b7:bd:12:0a:ab:17:b5:f7:dc:a8:
c7:ee:59:06:32:23:3d:12:ce:da:ed:60:81:f1:6e:f5:97:88:
41:f1:1d:68:ad:b2:0a:be:91:f2:16:60:f8:61:97:e1:db:73:
db:c5:2d:40:53:88:3d:c6:14:f8:f7:b4:ee:5c:fe:c7:84:13:
10:37:97:0b:33:eb:e6:18:68:ac:7a:b0:c9:b4:c7:3b:6e:af:
45:9d:b3:21:09:83:6e:46:60:f2:74:4c:6b:89:62:db:1b:8f:
00:76:63:3d:c0:15:92:04:5b:48:a8:ad:0a:b3:d9:97:a4:cb:
11:2e:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:30:37 2024 by rpki-client on console-ams.rpki-client.org