Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCA05E4D1D811ECAF12EF8EF1222468.roa
File: DFCA05E4D1D811ECAF12EF8EF1222468.roa (raw, json)
Hash identifier: N+Z9rk02Q2/T9EgBn1jl06OzjnthHo7O2as/Z4vb3hU=
Subject key identifier: 69:88:08:1E:A6:3A:58:31:42:D4:0D:7D:10:C2:FC:B9:59:59:AF:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCA05E4D1D811ECAF12EF8EF1222468.roa
Signing time: Thu 12 May 2022 09:49:54 +0000
ROA not before: Thu 12 May 2022 09:49:51 +0000
ROA not after: Fri 30 Dec 2022 09:49:51 +0000
asID: 35916
IP address blocks: 45.199.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5083 (0x13db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 09:49:51 2022 GMT
Not After : Dec 30 09:49:51 2022 GMT
Subject: CN=627cd842-8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:38:dc:26:17:44:63:d2:4e:9a:ab:16:7c:
51:f1:13:3d:81:17:64:12:96:90:7e:de:05:52:21:
25:d7:26:8f:ea:48:99:fc:06:35:e8:37:de:43:88:
ad:e5:3b:6d:5e:e2:7d:ee:32:fd:ee:82:f5:1c:5d:
f3:00:ed:c8:7f:50:e8:53:53:e9:0b:86:87:4d:40:
17:a1:77:02:f0:1b:78:05:6d:61:ac:8d:bc:59:5a:
09:ac:d2:88:5e:d2:5c:69:6a:07:04:6e:1a:ff:23:
f0:52:21:0a:a6:07:0e:ac:b2:4b:42:14:3f:d6:78:
7b:0a:b9:5b:f9:00:d0:e4:07:8b:35:de:5d:d6:04:
5c:38:f3:db:3c:05:a4:dd:4f:5a:95:55:98:7d:e0:
f0:43:24:ac:9d:77:06:d8:5e:50:1c:af:ca:98:4f:
7a:3e:13:ad:00:b1:85:f5:19:58:0c:a9:e8:88:ef:
85:3c:70:2d:28:ed:97:b6:da:fe:98:19:78:31:ba:
85:44:d8:b0:3b:1e:a0:92:ee:bb:ea:60:13:76:07:
29:02:08:4b:6e:f0:d4:50:bd:35:48:85:46:6b:04:
70:88:18:2d:98:69:3b:19:60:8a:c8:33:ef:73:0a:
9a:cb:63:af:89:a7:c7:b9:be:93:d8:fc:80:ce:57:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:08:1E:A6:3A:58:31:42:D4:0D:7D:10:C2:FC:B9:59:59:AF:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCA05E4D1D811ECAF12EF8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4a:82:55:cb:54:a8:bc:1f:fe:d0:c6:80:fd:20:12:17:dd:
1f:fe:06:ce:2f:a4:1a:ee:86:21:e0:8c:35:b8:fd:6c:db:b6:
61:7e:a2:d2:99:3b:4e:7a:18:00:13:6d:9b:7b:46:e7:6f:72:
f0:81:f1:53:19:c3:85:61:86:8c:2c:c1:85:c7:74:63:a3:6c:
42:0d:ad:43:7c:9e:04:b7:59:9a:ea:8f:23:94:80:90:b0:ee:
0f:b7:5f:44:25:d9:c5:cb:53:f2:87:4f:f3:31:1b:3d:a5:cf:
52:b2:0a:ec:e7:fe:dd:ca:79:b5:49:b0:7d:79:2e:00:81:7a:
90:d6:41:84:48:73:3a:7b:23:b4:19:a8:3d:7b:69:4c:4e:54:
98:da:07:b0:76:27:59:5b:37:0b:a8:6c:e6:0d:46:2b:cb:25:
a0:39:5c:55:d5:7f:1b:4d:9b:10:1d:b5:c9:5f:7e:20:6d:23:
6c:93:f7:dc:fb:75:0d:68:68:37:67:99:d6:ba:ab:7a:e4:9a:
92:67:84:4c:be:f6:aa:83:41:53:23:c0:60:b0:05:2c:21:84:
86:46:9d:45:cc:8e:3c:14:16:19:a9:f8:19:d7:78:33:1c:5f:
cd:4e:ac:47:a5:19:05:aa:4e:7c:f0:e4:d5:4a:79:98:3e:6d:
a5:ab:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org