Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E758F73C277F11EDB99306B6F1222468.roa
File: E758F73C277F11EDB99306B6F1222468.roa (raw, json)
Hash identifier: gkSRFrjvdd73wJKxUXSDg+vljjjzSq6cO2o1zBJ0osg=
Subject key identifier: A0:33:15:8D:E9:EF:48:1F:07:96:DF:AD:0A:FB:84:34:06:BA:E1:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1733
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E758F73C277F11EDB99306B6F1222468.roa
Signing time: Mon 29 Aug 2022 09:49:41 +0000
ROA not before: Tue 30 Aug 2022 09:49:38 +0000
ROA not after: Wed 07 Sep 2022 09:49:38 +0000
asID: 1239
IP address blocks: 45.205.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5939 (0x1733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 09:49:38 2022 GMT
Not After : Sep 7 09:49:38 2022 GMT
Subject: CN=630c8bb5-1924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:40:b8:65:17:3f:2f:ce:b4:60:0b:59:aa:
bc:bd:78:5a:c1:25:fc:42:a8:7b:52:99:fc:8e:42:
27:74:16:10:c7:57:42:df:14:17:65:5f:51:88:d9:
75:cb:55:99:d9:d0:51:22:9c:7c:1d:e4:a8:1e:39:
5d:d8:e8:03:20:12:03:dd:bc:08:b2:a7:6d:41:54:
ee:04:a5:0c:85:81:8c:1e:93:7c:87:12:50:29:07:
90:5d:ac:05:5b:5b:a0:4d:5f:f7:e1:63:74:3f:8f:
c4:93:ba:f0:e6:a4:ea:27:7a:2a:ae:fc:af:95:40:
45:61:69:12:dd:81:06:f7:d0:f5:d0:7a:73:c5:a7:
8f:82:2a:37:f6:62:61:dd:09:ad:c6:28:f9:04:8c:
d3:5d:8a:7a:40:9c:55:ed:ea:38:cb:4d:4f:6b:95:
68:b5:8d:63:0b:e1:58:0b:ab:28:b1:02:c7:14:a6:
8c:42:95:3d:a5:05:d2:e3:12:8a:06:48:2a:48:dd:
9e:77:c7:22:fa:e8:b1:11:d8:9c:2c:52:c0:e0:82:
71:92:62:97:c0:00:d3:c6:31:d8:1f:ff:c7:bf:3f:
e9:bd:df:69:3f:ab:1b:39:80:7f:2a:a6:c7:a5:15:
49:0e:3b:89:9a:7d:8d:75:ba:d8:41:35:1f:cf:3f:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:15:8D:E9:EF:48:1F:07:96:DF:AD:0A:FB:84:34:06:BA:E1:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E758F73C277F11EDB99306B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.96.0/20
Signature Algorithm: sha256WithRSAEncryption
19:ae:c1:25:db:69:cd:7d:9b:15:e7:82:36:1c:20:93:44:d5:
e2:cc:98:f4:29:a7:6c:0e:6f:97:dc:4a:49:50:9e:ce:1d:ce:
b4:9e:1f:06:3d:0c:30:25:5b:5f:8f:fc:5b:68:99:ac:43:be:
02:a2:01:90:f9:26:6b:c1:9d:1c:60:f2:94:19:2c:1b:76:0d:
fc:e6:74:26:50:05:b1:2d:43:a0:2f:fd:5c:cf:50:70:2d:62:
bf:75:d4:ce:c9:a8:cf:89:0e:6b:1f:5b:b7:f2:d4:53:66:9f:
de:c1:41:76:5e:fd:fc:ec:c5:58:12:1e:22:09:17:c9:6d:51:
e0:4d:d9:aa:06:9b:f2:ab:02:9d:f6:a9:50:f4:4e:48:ec:dd:
54:3e:e1:9c:d0:74:ec:e5:c7:e6:f0:ff:d3:29:0b:d0:65:d5:
a5:6b:06:03:b4:9c:a0:a9:6d:61:68:98:3e:b8:48:7c:de:7c:
a6:ce:a2:18:ab:be:a9:27:6c:b4:6a:c7:24:f1:9f:24:ee:24:
d9:1b:9d:ac:4f:f4:af:14:c7:a0:fe:d2:fa:41:32:fd:6e:96:
53:dd:15:77:c2:a8:69:34:c6:2b:3e:11:d5:a9:72:0f:a3:d5:
1b:0b:77:21:3b:f0:d4:34:9f:1d:1f:1b:be:ce:c2:4a:52:79:
10:65:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org