Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8EB302E47811EE9D10E997775412E6.roa
File: FA8EB302E47811EE9D10E997775412E6.roa (raw, json)
Hash identifier: a0ihBZCnjeTZGmtgQ7ZpOI4XVIT6wy7HvLO6SX99qSc=
Subject key identifier: 7F:02:BD:1E:8E:83:7D:E9:52:57:E1:7F:0B:64:9C:54:EC:D2:7C:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7EAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8EB302E47811EE9D10E997775412E6.roa
Signing time: Sun 17 Mar 2024 16:11:15 +0000
ROA not before: Sun 17 Mar 2024 16:11:11 +0000
ROA not after: Thu 02 May 2024 16:11:11 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32426 (0x7eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 16:11:11 2024 GMT
Not After : May 2 16:11:11 2024 GMT
Subject: CN=65f71622-f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:72:ee:92:ea:db:15:bf:35:30:5c:17:3f:
64:1b:47:54:09:ff:a4:7e:fd:5f:bc:0f:79:cb:32:
f3:6f:94:4f:09:d8:d0:06:9c:48:83:97:87:47:06:
86:0a:ce:dd:77:6b:f0:18:8b:71:8f:c4:2a:4a:96:
75:8b:54:a8:93:f4:51:15:cc:37:01:48:33:eb:eb:
1d:98:f6:7e:e1:f3:1e:9f:2b:3c:e9:e7:b7:41:c5:
8a:00:40:05:d9:76:69:f2:1d:6a:be:cb:f1:18:5a:
01:4f:60:2d:04:a0:4a:01:a6:73:b2:60:9a:3b:bb:
cb:d4:4a:0a:77:47:60:d3:3b:46:53:27:5b:86:20:
60:61:f7:9f:b3:ba:26:2a:77:da:d0:2e:e9:a5:21:
70:0b:76:53:a9:dc:7c:e0:bb:9d:bb:00:be:40:27:
19:2e:ff:8c:e0:62:07:88:16:b6:dd:0e:ec:47:e7:
2c:8b:bc:b1:11:d0:c7:66:4a:21:d4:da:1a:04:c3:
f9:13:58:92:b5:34:1f:d4:6f:e9:80:18:de:c4:0a:
07:f3:5e:5d:1f:c9:b4:69:8d:a4:d4:10:85:53:e8:
98:4d:1a:5a:4d:ff:e7:2b:5c:dd:59:e7:59:b9:d0:
a0:1a:ab:12:d5:88:34:cb:76:f0:f2:27:26:77:4a:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:BD:1E:8E:83:7D:E9:52:57:E1:7F:0B:64:9C:54:EC:D2:7C:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8EB302E47811EE9D10E997775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
39:17:ee:6b:65:48:e6:4b:d3:95:3e:49:b3:a4:07:91:81:c0:
a8:5c:b4:55:d3:b0:8b:d2:f3:00:b7:75:bd:f3:2b:e8:9c:2c:
46:54:aa:07:63:91:38:e7:2e:7d:2a:c3:6c:4a:35:cb:43:36:
75:49:33:af:b4:4a:09:68:e1:14:7a:dd:2e:ca:35:00:7d:21:
fa:43:0a:f4:dc:c8:70:8e:e2:43:8d:4a:ab:f7:2f:ae:c3:6e:
51:68:92:0a:e2:d4:fd:96:a3:06:e6:b4:36:89:93:39:b9:87:
44:4f:6e:3c:7a:3a:9d:f7:b8:ed:05:08:21:05:e9:75:9c:8d:
bd:a6:84:a1:5f:cb:14:c2:64:27:7a:b2:e0:f9:19:0c:ca:d6:
38:90:20:a2:bc:96:56:03:c2:66:ce:7d:8d:f3:06:fc:0b:27:
01:8f:c3:d0:11:b8:64:77:08:9a:6b:b7:6d:90:65:32:16:70:
e7:34:36:9b:b3:cb:0f:37:40:25:36:c9:11:e9:a5:55:f7:00:
8c:d7:dc:a7:7e:65:d3:6a:b1:8c:c9:2e:57:1e:61:96:01:ec:
dd:c3:6b:db:83:45:5d:fd:dd:be:b1:bf:ee:54:37:51:d3:02:
74:7e:35:a5:78:9b:0e:3b:11:1a:26:6b:22:c9:00:84:6b:4c:
63:81:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org