Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47320303E9B11EFBF11345E762E951A.roa
File: E47320303E9B11EFBF11345E762E951A.roa (raw, json)
Hash identifier: wujeLMx/pSbMYLtLaex6CXLtQbL0OYHET3Iu9lmZrZs=
Subject key identifier: FE:14:E2:09:1B:E3:F0:C6:27:FD:50:AE:96:F7:8D:21:1E:9C:E9:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47320303E9B11EFBF11345E762E951A.roa
Signing time: Wed 10 Jul 2024 09:07:54 +0000
ROA not before: Wed 10 Jul 2024 09:07:51 +0000
ROA not after: Fri 02 Aug 2024 09:07:51 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39583 (0x9a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:07:51 2024 GMT
Not After : Aug 2 09:07:51 2024 GMT
Subject: CN=668e4f6a-947a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:e4:14:d3:25:3f:3c:6a:b4:4e:31:12:e0:
39:ad:f6:2a:f7:10:e4:4e:3c:08:48:ad:ba:ab:49:
07:66:c4:a0:31:09:af:8f:23:fd:68:71:54:b7:a4:
82:54:6e:64:7c:4a:e0:28:79:b2:24:92:dd:51:8c:
84:77:51:7e:7f:58:fc:fe:fe:54:d9:b0:4a:0b:60:
81:37:bc:dc:09:98:25:2d:e0:21:b5:8d:e3:dd:80:
6c:05:e8:52:47:d1:df:6e:d3:dc:39:85:cd:dc:71:
00:29:3b:80:20:34:5b:7d:bd:01:6f:df:74:52:39:
79:19:a0:95:23:3c:f2:2e:49:3c:5a:a0:12:8a:b9:
40:f8:26:91:d8:70:2e:01:fa:ab:ac:a9:af:7a:39:
f5:ad:42:ad:90:06:c2:be:ca:cc:60:af:ff:f5:de:
f8:6d:cd:a9:57:7a:c7:19:cf:1a:0d:73:9d:20:11:
2d:e5:31:5b:1f:f6:a8:6d:37:6d:ff:46:b9:5e:51:
db:0c:58:73:6e:38:ba:ad:8a:89:66:16:4f:7e:bd:
62:61:5e:d5:2f:70:0b:b3:8b:14:3f:b4:1c:35:89:
5e:f7:5a:5f:cd:fb:4c:85:05:0e:ed:1d:cc:e0:69:
ab:8f:b7:53:fa:c9:c4:78:ad:91:ab:6f:a4:8a:3a:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:E2:09:1B:E3:F0:C6:27:FD:50:AE:96:F7:8D:21:1E:9C:E9:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47320303E9B11EFBF11345E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
84:d0:85:0f:d5:0d:b3:06:6c:2f:62:38:93:83:2c:81:68:6f:
3f:d1:34:5b:4c:2d:7e:c0:52:29:3f:4e:0d:2e:f1:98:27:a2:
7b:b4:7f:ae:f6:38:a4:9f:6a:c2:01:be:7e:53:6f:ef:fc:f3:
8f:0c:95:cb:2f:17:fb:5d:21:e0:cb:c9:a9:a8:9c:6c:4f:00:
05:a7:1c:44:e1:47:87:34:d3:4b:f9:e3:8d:cf:ae:7e:73:bf:
6b:d8:1d:ce:83:4e:0e:f7:01:a6:e9:59:fb:52:e1:2e:75:2a:
25:bf:43:5e:5d:31:e4:61:d0:91:2d:b5:01:af:52:44:69:ff:
65:20:ad:ca:9a:10:14:7f:77:61:bb:a5:59:28:dd:01:f6:17:
f3:37:c8:f7:ae:6f:d8:09:b8:ae:7d:36:ff:ac:03:24:6f:51:
b8:16:b6:7c:1d:61:ea:79:6d:dc:ba:c2:b4:5d:53:37:40:4e:
07:4b:8e:8a:fb:b1:5b:c3:dc:18:96:35:57:dd:4a:df:60:93:
e6:27:0f:00:05:d7:7e:4b:3c:e7:41:b9:fb:b8:8b:46:64:71:
ba:f0:d4:06:11:2f:7a:17:b5:90:35:43:31:2e:ba:f9:23:38:
8f:e6:23:c3:fd:63:69:47:2b:2c:51:d9:ab:d4:74:ec:5d:25:
82:cc:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org