Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC35570ED96D11EBBED46F48F8AEA228.roa
File: CC35570ED96D11EBBED46F48F8AEA228.roa (raw, json)
Hash identifier: AQix0905Usy0wXoClVo1OocUpx7P8m3zYv4I2gAT6Lc=
Subject key identifier: 0C:A8:48:E6:E2:A1:3E:87:38:8F:EA:84:03:2E:72:A1:71:0E:02:C9
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 031F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC35570ED96D11EBBED46F48F8AEA228.roa
Signing time: Wed 30 Jun 2021 06:38:37 +0000
ROA not before: Wed 30 Jun 2021 06:38:31 +0000
ROA not after: Fri 30 Jun 2023 06:38:31 +0000
asID: 1239
IP address blocks: 192.142.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 30 06:38:31 2021 GMT
Not After : Jun 30 06:38:31 2023 GMT
Subject: CN=60dc116d-c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:c4:00:50:bf:a9:8c:ec:6e:3d:53:a9:f4:
ee:70:69:cb:94:35:96:58:c4:d6:5d:f1:4c:03:f1:
0f:f7:58:14:56:11:af:9b:9d:8c:d8:e6:67:63:cf:
88:bd:e3:71:25:1c:28:35:43:03:b1:63:05:83:a5:
b2:9a:cd:cf:f0:25:15:fc:34:cd:31:6a:7b:4a:7a:
99:16:96:c0:d0:42:f7:e2:a8:ba:90:35:d2:bc:1b:
ec:aa:a1:95:33:2e:94:da:0e:6f:a9:d9:9c:73:55:
e6:14:cb:c5:54:8f:23:79:34:60:fa:72:16:f3:3d:
97:d3:76:1c:c3:ec:a6:cf:4b:bf:6b:71:7b:6e:8b:
cb:a4:d6:1b:74:03:35:03:c9:45:12:91:1a:dd:a5:
0e:1a:e5:5f:04:2d:31:e7:00:fc:95:38:c5:cd:94:
fb:01:11:b5:1d:23:d7:3a:6e:9a:a1:25:7a:de:d0:
82:99:fd:9d:9b:a6:ec:ab:13:e7:e2:98:e7:ea:a6:
da:26:a1:d7:8b:aa:51:b4:26:bb:0e:e3:b0:93:94:
39:71:57:c2:5c:70:c5:3b:77:db:c4:a8:b4:e1:49:
3b:8e:26:cf:d9:c8:92:28:4a:ac:58:9a:fb:9a:bd:
ca:da:cc:21:1e:19:a3:a8:64:fd:1b:cc:66:35:98:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:48:E6:E2:A1:3E:87:38:8F:EA:84:03:2E:72:A1:71:0E:02:C9
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC35570ED96D11EBBED46F48F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b7:58:1a:a5:00:21:4a:38:59:63:96:7a:a0:40:4a:da:83:
27:98:4d:d9:04:d9:55:59:95:8b:e6:53:46:9f:49:c7:d8:30:
88:4a:54:e3:7e:a5:f5:75:29:cb:76:eb:08:82:1c:5d:b1:1b:
ed:56:bc:f8:c5:4c:ba:a7:6b:ec:33:4a:44:ff:9f:0c:22:c8:
ae:f5:cd:58:98:04:b3:3c:20:06:a5:65:77:e4:78:2a:3e:cc:
1d:33:3a:a5:6b:8f:12:3d:38:71:0f:ba:54:1b:e9:2c:2a:b5:
05:3a:fc:3a:c5:47:5c:1f:70:95:20:3e:39:7c:43:8e:66:45:
8c:46:04:89:75:a2:68:96:0c:50:a8:35:18:53:ca:d6:12:39:
ba:cb:5f:8b:a9:f1:90:71:90:9b:a1:ca:0e:b6:6b:f2:6d:13:
5b:7a:7b:41:7f:5c:20:c3:82:1a:4a:d7:27:21:a4:e2:07:08:
81:88:97:e0:a5:ec:76:fb:dc:39:eb:c8:85:5f:9e:0a:a9:43:
ae:02:d1:2b:7f:02:26:fa:13:9d:39:f8:91:17:1c:1c:fa:e2:
c0:52:7b:e9:ad:2d:c2:a4:0c:d1:c8:10:87:66:47:e3:d2:2d:
8b:6e:c0:16:37:08:9d:6a:14:4c:cb:9e:fa:7a:59:eb:6b:b2:
f4:18:92:5a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMTA2MzAwNjM4MzFaFw0yMzA2MzAwNjM4MzFaMBgxFjAU
BgNVBAMTDTYwZGMxMTZkLWM1ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1AcQAUL+pjOxuPVOp9O5wacuUNZZYxNZd8UwD8Q/3WBRWEa+bnYzY5mdj
z4i943ElHCg1QwOxYwWDpbKazc/wJRX8NM0xantKepkWlsDQQvfiqLqQNdK8G+yq
oZUzLpTaDm+p2ZxzVeYUy8VUjyN5NGD6chbzPZfTdhzD7KbPS79rcXtui8uk1ht0
AzUDyUUSkRrdpQ4a5V8ELTHnAPyVOMXNlPsBEbUdI9c6bpqhJXre0IKZ/Z2bpuyr
E+fimOfqptomodeLqlG0JrsO47CTlDlxV8JccMU7d9vEqLThSTuOJs/ZyJIoSqxY
mvuavcrazCEeGaOoZP0bzGY1mFZfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUDKhI
5uKhPoc4j+qEAy5yoXEOAskwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0NDMzU1NzBFRDk2RDExRUJCRUQ0NkY0OEY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjrwwDQYJKoZIhvcNAQELBQAD
ggEBAAq3WBqlACFKOFljlnqgQEragyeYTdkE2VVZlYvmU0afScfYMIhKVON+pfV1
Kct26wiCHF2xG+1WvPjFTLqna+wzSkT/nwwiyK71zViYBLM8IAalZXfkeCo+zB0z
OqVrjxI9OHEPulQb6SwqtQU6/DrFR1wfcJUgPjl8Q45mRYxGBIl1omiWDFCoNRhT
ytYSObrLX4up8ZBxkJuhyg62a/JtE1t6e0F/XCDDghpK1ychpOIHCIGIl+Cl7Hb7
3DnryIVfngqpQ64C0St/Aib6E505+JEXHBz64sBSe+mtLcKkDNHIEIdmR+PSLYtu
wBY3CJ1qFEzLnvp6WetrsvQYklo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org