Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D479FA4A038C11EF8C07CE54017001B1.roa
File: D479FA4A038C11EF8C07CE54017001B1.roa (raw, json)
Hash identifier: c2g0RUb2iSUxoTwiqF+Uq6CcEQhPx+rn/GfKQp5zOqM=
Subject key identifier: 94:A8:91:D8:D0:F6:91:F7:FE:CA:72:E9:51:C4:E8:B3:2F:DA:92:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D479FA4A038C11EF8C07CE54017001B1.roa
Signing time: Fri 26 Apr 2024 05:21:27 +0000
ROA not before: Fri 26 Apr 2024 05:21:23 +0000
ROA not after: Sun 05 May 2024 05:21:23 +0000
asID: 139646
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34278 (0x85e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:21:23 2024 GMT
Not After : May 5 05:21:23 2024 GMT
Subject: CN=662b39d7-499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:5d:99:78:03:48:a0:32:17:44:b8:33:8d:
fb:c2:1a:96:af:d7:b6:5e:c7:02:de:48:4a:59:e5:
5e:2e:df:2f:50:48:30:68:88:91:ad:75:56:4f:3d:
56:fe:bf:0a:69:b3:d0:5d:b7:54:62:d7:0e:ce:cf:
95:b7:98:e4:97:bf:25:bd:22:9d:b4:a2:b6:e8:14:
cf:63:e2:40:58:6e:3f:89:62:83:36:01:60:84:37:
66:3f:f7:b7:53:10:84:5f:44:16:5f:c2:05:40:4f:
19:bb:8f:53:2d:c1:5c:19:4e:6f:ed:64:1d:8d:7b:
2d:2d:41:b2:5c:18:af:c9:c3:fb:01:87:2a:74:59:
14:d0:05:af:44:2c:ac:92:79:e3:84:3a:3c:b2:b1:
8f:56:79:bd:c6:15:c9:0c:9a:37:56:69:db:0a:d3:
f6:5d:d5:c3:0a:eb:83:8e:a4:33:4e:1d:e4:8a:90:
c8:c7:13:1c:35:58:5f:f1:2b:b7:0f:80:95:73:de:
ce:1f:50:d3:f7:7e:7a:5d:28:03:4c:94:29:eb:d1:
66:cf:37:5c:2f:57:ab:70:1c:44:7e:34:51:1a:b1:
0e:ce:12:7e:59:0b:9e:34:89:db:0c:ae:87:c0:23:
03:31:d0:46:a3:2c:70:6c:e5:45:f9:5b:49:4c:45:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:91:D8:D0:F6:91:F7:FE:CA:72:E9:51:C4:E8:B3:2F:DA:92:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D479FA4A038C11EF8C07CE54017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:26:bb:a9:1e:d2:af:1e:89:17:0b:d6:74:13:42:5b:79:22:
b8:96:a4:e6:44:d2:d4:94:25:1a:f6:96:28:8c:ae:97:5a:42:
91:55:60:88:f5:30:2d:01:c5:eb:0f:d5:13:c6:c2:eb:31:5c:
7b:f7:c8:df:bf:12:6a:b3:37:66:89:fb:86:d4:30:bb:a1:7a:
8e:8b:b0:8f:e2:41:3a:d5:6a:05:bf:ec:4b:d3:d7:26:cc:ad:
1b:0a:0a:22:a2:c8:bd:c9:4e:6a:39:7e:92:54:fd:3a:8f:9e:
1d:37:b4:2d:f0:33:9b:8f:f0:4b:af:16:f7:12:d9:50:b2:66:
5e:b1:45:a3:77:2a:f3:f5:95:3b:29:08:e5:38:de:18:2c:b2:
c5:48:40:8b:61:46:6f:42:fc:25:e5:85:c5:b4:ce:f0:41:5f:
90:9b:20:bb:4d:cc:3c:57:73:69:41:8b:98:9f:bb:91:2a:34:
67:91:9d:ba:ed:10:bb:02:30:bc:40:17:b3:93:3c:9c:1c:6e:
64:b9:1c:d8:ca:42:41:d6:85:42:6e:fd:b1:53:e2:22:c0:d3:
c4:37:34:be:39:69:9f:cc:0b:d9:b2:a0:76:1e:54:25:cc:8e:
eb:1d:fa:8c:31:12:50:b1:84:7f:ca:21:cb:35:b4:e0:b2:2a:
92:57:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org