Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA6AF0E013D211EDB27A56AAF1222468.roa
File: DA6AF0E013D211EDB27A56AAF1222468.roa (raw, json)
Hash identifier: tNBJhdzRnMQYFDtukTsOdDItiVX54j8Ef3qz+Lc8sc0=
Subject key identifier: 08:8F:99:8F:25:7F:71:0B:B2:25:63:66:05:24:D4:79:26:5D:88:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1644
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA6AF0E013D211EDB27A56AAF1222468.roa
Signing time: Thu 04 Aug 2022 08:53:05 +0000
ROA not before: Thu 04 Aug 2022 08:53:01 +0000
ROA not after: Fri 10 Feb 2023 08:53:01 +0000
asID: 133861
IP address blocks: 45.207.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5700 (0x1644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:53:01 2022 GMT
Not After : Feb 10 08:53:01 2023 GMT
Subject: CN=62eb88f1-a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:8f:b4:94:4d:9f:bd:64:a1:75:f6:90:91:
5f:99:44:5e:9f:c7:08:03:8d:b7:90:5d:da:62:e5:
e4:cd:28:9f:74:4b:17:93:c4:47:28:2a:6e:f2:b3:
b8:56:d3:58:07:4f:92:0f:16:07:5d:e5:99:9c:2a:
20:9e:35:32:a5:e8:58:a3:c9:c8:71:42:e2:00:ff:
b3:8a:7d:e9:2c:56:b8:66:08:7c:06:3e:55:11:21:
b9:e3:d5:b8:4a:5d:e1:10:ae:7f:da:e8:00:f7:b2:
1d:9f:b3:ff:e9:81:1f:13:5f:af:26:d8:e5:87:9e:
ac:e6:1e:ba:19:27:90:3c:db:c7:ab:19:d6:8c:35:
9c:9b:a5:d0:09:93:99:4e:67:6a:80:4b:9c:7b:31:
ea:06:df:d7:17:24:1c:6d:fc:38:f6:53:01:3b:a1:
35:c7:36:67:80:58:54:14:3f:c1:43:63:a6:e4:82:
ac:ff:7e:6d:80:85:1e:1c:f8:ba:8b:93:3d:f8:8f:
3b:ef:55:a1:35:bc:f5:e0:22:4f:f1:ac:c4:75:57:
0f:28:37:c6:aa:95:fa:b6:13:f2:a7:dd:88:a1:7f:
de:bb:01:62:bd:14:aa:e5:6e:09:f1:d1:08:bb:df:
23:28:0f:e7:34:de:64:4d:98:7e:db:96:d0:48:ee:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:99:8F:25:7F:71:0B:B2:25:63:66:05:24:D4:79:26:5D:88:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA6AF0E013D211EDB27A56AAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.38.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c1:d7:85:e4:53:35:9d:a0:54:d4:7f:aa:df:da:83:3a:50:
4d:6d:c4:c0:75:49:6f:60:74:2d:75:57:6e:30:eb:e6:0f:61:
dd:8f:47:ce:d6:8e:1f:eb:84:e1:f0:88:47:10:ef:65:60:14:
54:da:b2:37:0b:91:ba:d7:ea:23:81:d8:3d:73:d5:41:1f:49:
f3:90:94:3c:a6:8a:69:27:51:44:32:ee:fb:62:3a:47:d8:a8:
df:d8:c0:aa:f1:bf:0c:9b:9f:bd:1b:a8:09:5c:16:40:76:7d:
55:1f:ea:02:47:48:2a:cf:50:c2:2d:92:af:fb:57:47:fb:4f:
3a:f3:12:0d:3b:38:53:2d:61:3c:66:bf:2d:40:5a:44:46:ff:
95:6e:5f:19:b3:b2:06:95:91:52:44:55:6a:78:4d:79:33:74:
59:de:4f:f3:2a:fd:04:2a:9e:06:bf:ab:ea:a5:07:5e:95:28:
ae:ff:14:47:81:77:31:d4:78:81:df:8c:cf:2f:21:b3:76:34:
79:af:03:42:57:ff:95:d9:96:28:f3:0b:cb:55:44:74:9a:0c:
df:97:90:66:85:0f:e6:41:f1:6f:e7:5f:6d:92:c6:8a:de:1c:
7f:9b:90:ea:6d:a1:bd:58:8f:69:fd:1e:20:1c:93:b0:1a:4d:
e5:90:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org