Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3D46A0FB9511EE8788BC62017001B1.roa
File: DC3D46A0FB9511EE8788BC62017001B1.roa (raw, json)
Hash identifier: ZSO22Q/LL1PL8ss82fRXszHMCUEAhLE22ZCr8C6gaAU=
Subject key identifier: E7:39:AB:C6:A9:B8:71:1B:8D:E6:35:33:94:32:B7:9F:63:2D:38:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8287
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3D46A0FB9511EE8788BC62017001B1.roa
Signing time: Tue 16 Apr 2024 02:05:56 +0000
ROA not before: Tue 16 Apr 2024 02:05:52 +0000
ROA not after: Mon 29 Apr 2024 02:05:52 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33415 (0x8287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:05:52 2024 GMT
Not After : Apr 29 02:05:52 2024 GMT
Subject: CN=661ddd04-2042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:6b:7d:46:67:05:27:b0:dc:78:13:db:db:
1b:ce:d0:2f:ff:b6:21:44:37:7e:be:4f:e9:a0:e8:
33:ee:d6:54:6c:0d:a7:63:7c:25:82:fe:70:a2:e9:
ec:65:68:74:d9:52:76:d5:ed:e5:85:f0:7a:ed:e7:
6b:e0:b7:07:a4:bf:a1:92:61:e1:2a:d0:2c:50:c6:
da:b1:78:92:18:41:87:73:16:90:48:53:a5:49:b8:
a9:c1:91:f6:48:90:74:cc:1b:71:95:a1:60:3d:39:
74:f0:39:03:63:25:fa:2d:3a:fd:26:6c:40:fb:d6:
ef:db:11:d4:fb:f7:c3:3c:c8:23:04:a8:3d:7e:74:
0b:35:1b:08:4a:d7:b0:5c:fa:eb:e1:21:a3:bf:13:
f3:ce:22:32:da:24:2e:0e:a5:ec:f2:2a:82:65:cb:
6c:9a:ff:33:68:83:e5:4f:9c:e2:12:64:e5:2e:99:
19:75:20:8f:1b:5e:9d:a2:97:a0:22:ad:a7:eb:3d:
36:e9:b3:9f:3a:0e:0f:11:35:91:33:8d:50:a7:b2:
d8:dc:39:64:95:af:0c:37:9c:6f:e6:c2:3e:59:c2:
dd:6e:2a:60:9d:2c:6e:6e:7c:42:30:2f:df:0b:71:
db:6c:16:c4:fa:b5:93:df:c0:0f:20:d1:b6:dd:2e:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:AB:C6:A9:B8:71:1B:8D:E6:35:33:94:32:B7:9F:63:2D:38:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3D46A0FB9511EE8788BC62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
78:94:e2:c7:01:a6:6f:3a:dc:ce:1c:6b:49:3b:27:a2:72:b5:
ff:48:e0:a3:2d:97:d9:bd:8a:e0:5f:54:68:c0:47:3e:a5:17:
74:4e:6e:c0:c5:6a:85:be:0d:24:05:5d:d9:8d:eb:c2:8e:70:
68:a7:5e:43:82:22:59:0a:f5:f0:97:e7:3e:19:40:a8:f3:7b:
86:fb:65:13:2d:fe:5f:96:4e:c8:41:37:9f:91:09:fb:af:2a:
da:ad:c6:f6:22:d0:be:6c:15:b0:44:49:5b:51:c8:bd:84:c2:
ef:4b:0f:26:4d:3d:74:c6:1b:1c:68:fd:ac:3e:87:01:e9:04:
fd:dc:74:0e:b0:51:59:25:3f:5f:14:9e:89:92:dd:13:a9:b1:
48:3d:fb:59:ef:81:ea:2e:1f:cd:ef:be:fd:d1:98:ce:e8:0f:
d4:02:b8:82:2d:65:85:11:bd:93:44:11:9c:b8:dd:ee:48:3c:
64:31:0a:5b:fb:c3:5c:61:3f:f1:d7:06:93:cf:6e:fa:fd:6d:
50:f0:cb:fc:91:fd:1f:19:42:3e:6f:d9:ad:3d:99:7f:40:49:
b0:b3:13:ce:67:e5:a8:40:08:b4:d0:a8:45:fa:03:97:be:61:
7b:67:82:02:c5:de:54:bb:50:fc:65:22:01:b8:c1:01:ac:62:
da:38:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org