Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/BF8E73160C2C11EE972FF76F4AD9E6FC.roa
File: BF8E73160C2C11EE972FF76F4AD9E6FC.roa (raw, json)
Hash identifier: fnUnJ10odFemWHx5ayCOr+8xYmkEGfjYNRG9RYFgmKs=
Subject key identifier: 76:8F:28:87:10:D6:00:B0:C9:F6:CF:F1:4B:24:A5:D3:8C:57:7E:49
Certificate issuer: /CN=F36592B4AR/serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
Certificate serial: 02
Authority key identifier: 47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/BF8E73160C2C11EE972FF76F4AD9E6FC.roa
Signing time: Fri 16 Jun 2023 10:01:23 +0000
ROA not before: Fri 16 Jun 2023 10:01:19 +0000
ROA not after: Sun 16 Jun 2024 10:01:19 +0000
asID: 328076
IP address blocks: 45.222.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36592B4AR/serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
Validity
Not Before: Jun 16 10:01:19 2023 GMT
Not After : Jun 16 10:01:19 2024 GMT
Subject: CN=648c32f3-0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:93:f7:b7:b9:b7:d7:09:df:da:cd:d8:4c:
21:40:82:d7:37:ad:48:09:f3:f6:5f:be:59:19:81:
25:16:25:ed:ea:4b:57:79:e0:97:75:c4:51:70:26:
7d:0c:ae:9e:5c:0b:32:aa:2d:30:5a:9d:8f:68:03:
a6:4b:21:c7:33:a3:f8:59:38:5a:89:fc:56:38:59:
32:d4:b8:f0:5f:4c:77:a9:f8:f7:ae:8b:b8:67:af:
a1:4b:64:63:fa:87:1e:82:53:fd:8e:ba:ff:22:e9:
9d:af:9c:88:15:3a:f3:1a:1a:31:d3:46:20:a8:2b:
36:5a:f4:38:ad:36:90:d7:2d:ee:52:07:fa:cb:f1:
cc:1a:af:a7:ea:4a:e8:5f:5a:ce:32:68:b0:31:70:
b4:5e:6a:e3:ea:1d:f7:94:aa:16:09:2b:b5:cd:cd:
59:cc:00:9b:82:63:59:8a:52:76:cf:a3:10:34:46:
02:ae:3e:e2:45:ea:2d:7b:25:a0:17:12:0f:d4:39:
14:d8:ef:4d:e2:6d:5e:1c:55:b4:3d:a5:eb:9f:0c:
97:0e:ec:1a:f1:7f:28:e3:cd:47:c4:af:23:64:62:
00:46:67:de:09:c5:5a:f6:d1:da:1f:72:7c:d2:86:
60:82:c9:eb:87:9c:79:14:cc:a4:a7:3c:ca:50:b9:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:28:87:10:D6:00:B0:C9:F6:CF:F1:4B:24:A5:D3:8C:57:7E:49
X509v3 Authority Key Identifier:
keyid:47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/BF8E73160C2C11EE972FF76F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.222.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:cf:9d:0c:53:5b:b9:78:47:1c:bf:a9:8b:38:3a:c0:53:5c:
33:7e:b2:67:80:7b:1f:82:2b:48:e4:63:59:93:47:78:52:71:
8e:ae:f1:65:20:d9:fd:35:de:73:de:4b:4a:35:ab:4c:35:9b:
d0:40:44:20:b7:ab:6b:0a:7a:8e:95:65:11:a1:97:7e:ca:55:
ff:a4:db:c3:b2:ab:0b:92:47:a4:70:1a:89:9d:c4:6b:51:ab:
2e:9a:3f:8d:e6:21:90:fe:41:8d:16:a9:3d:c8:b3:6d:84:5b:
02:66:80:67:77:18:75:46:de:a7:57:f6:7d:57:8b:cb:6e:95:
77:49:bd:63:11:4b:ee:d5:65:f0:f9:55:fb:2f:44:79:1e:0e:
98:b1:ee:48:32:45:de:07:7a:bf:5d:7d:ad:0a:5c:89:9b:36:
2f:8f:41:07:00:bd:62:0b:35:08:83:e8:c0:09:69:98:b4:73:
91:be:35:2f:05:d6:a5:a7:b6:13:a2:28:9a:56:e9:2f:b8:7a:
75:99:9a:24:0e:45:99:45:d7:ae:9b:87:6c:33:38:56:84:14:
47:ee:4b:0f:97:5d:9d:f6:7e:3b:ad:68:22:bb:75:4b:54:76:
5f:e0:c4:92:27:33:42:96:28:36:6e:03:8c:2d:db:d9:cf:a9:
22:38:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:25:05 2024 by rpki-client on console.sobornost.net