Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/446B8ED8B19A11EB80A4E274F8AEA228.roa
File: 446B8ED8B19A11EB80A4E274F8AEA228.roa (raw, json)
Hash identifier: L1Oy5EMtb1v93yif4vNSj35+RmX/LHgLwrr8+b31Pvw=
Subject key identifier: 6E:EB:9E:F1:9A:74:D7:25:07:E0:29:3D:59:1C:74:4F:8A:C1:67:2B
Certificate issuer: /CN=F364AE44AR/serialNumber=8C834C891B22A7CC5DA61E8FE4A713F886AABFCD
Certificate serial: 05
Authority key identifier: 8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
Authority info access: rsync://rpki.afrinic.net/repository/arin/jINMiRsip8xdph6P5KcT-Iaqv80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/446B8ED8B19A11EB80A4E274F8AEA228.roa
Signing time: Mon 10 May 2021 14:16:10 +0000
ROA not before: Mon 10 May 2021 14:15:56 +0000
ROA not after: Tue 10 May 2022 14:15:56 +0000
asID: 36925
IP address blocks: 45.216.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AR/serialNumber=8C834C891B22A7CC5DA61E8FE4A713F886AABFCD
Validity
Not Before: May 10 14:15:56 2021 GMT
Not After : May 10 14:15:56 2022 GMT
Subject: CN=60994029-1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:73:22:74:86:fb:fb:80:bc:08:c5:b1:e0:
a7:a1:52:3f:5e:7c:d6:2f:7c:fe:74:28:73:2d:bb:
73:bc:e3:c5:c1:c1:14:07:e8:90:0a:35:b3:05:43:
e3:7c:fd:10:5c:5f:9f:06:a6:db:d8:18:13:9b:8e:
b0:a7:3a:c2:e7:e3:eb:32:ce:dd:19:29:5c:d4:9e:
98:3a:3e:60:5b:89:4c:77:3f:f1:e1:fe:26:33:fd:
42:43:36:23:8e:04:53:1e:28:60:86:52:69:0d:4c:
ba:c6:a2:41:34:56:f2:a8:02:40:17:0f:81:98:47:
5c:bc:57:f0:54:15:e8:47:af:2a:9a:c2:05:0e:c0:
f1:c4:f5:5f:19:2a:b2:5c:4a:b0:81:52:59:1f:c5:
03:82:af:6c:4c:8c:3f:20:e7:b8:9b:61:a8:54:a5:
6b:03:a0:5b:88:72:5f:58:6c:4d:fd:f1:8e:cc:a3:
fe:f2:c8:f7:33:1f:76:74:a2:09:ca:8d:9d:53:ae:
a5:7c:ea:f7:25:47:d2:00:66:88:7b:b3:46:8c:d3:
c6:ba:35:37:68:3b:7d:ca:81:8e:29:fe:87:b5:14:
db:c2:2b:bc:e1:cd:e2:f4:b0:a1:5e:e2:b2:16:0d:
5b:43:ff:29:6d:17:da:e4:35:b8:20:64:06:2a:43:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EB:9E:F1:9A:74:D7:25:07:E0:29:3D:59:1C:74:4F:8A:C1:67:2B
X509v3 Authority Key Identifier:
keyid:8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jINMiRsip8xdph6P5KcT-Iaqv80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/446B8ED8B19A11EB80A4E274F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
9d:f5:0e:e0:14:83:e9:59:0b:3e:b3:81:6c:a0:f8:34:95:15:
ba:46:18:69:8c:4f:cd:57:2e:fe:8a:63:a7:b1:53:a3:46:5d:
b9:6d:bd:ba:7a:12:3f:1c:df:f2:8a:aa:63:fa:20:69:e3:7e:
1b:3f:a5:25:ad:ef:d3:ae:e2:0b:d6:59:7d:c2:5f:0a:24:45:
1a:f1:2a:35:df:90:bb:c8:89:92:03:b8:4d:bd:10:07:b1:06:
85:49:de:15:60:08:7d:82:ed:9b:3d:1e:99:2d:fa:8e:5f:04:
65:6b:99:b0:ef:12:29:2e:be:da:1f:86:04:30:10:ab:9e:25:
ef:0d:8e:d0:b0:e1:54:57:cb:3c:fa:94:e7:48:2c:6d:cf:e5:
ad:a6:81:fd:a9:eb:9f:e9:2f:e8:15:0b:ac:1b:3a:da:15:0e:
7f:3b:e5:3f:73:26:df:c6:92:6f:e8:45:a1:c1:c3:8e:37:fc:
22:08:60:c5:62:e4:d2:9e:ef:a8:13:af:13:c1:55:61:77:17:
8c:bd:19:20:51:87:c0:ac:f0:35:13:71:20:fa:aa:7b:6f:ef:
2e:30:2b:12:51:62:3f:7b:a3:d7:f7:78:82:f1:0b:4b:9f:2b:
32:72:17:85:bc:fb:dc:ee:27:75:3b:23:25:9b:be:86:83:e8:
62:e1:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org