Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D080A0B87611EBBB3B905FF8AEA228.roa
File: 01D080A0B87611EBBB3B905FF8AEA228.roa (raw, json)
Hash identifier: LKF28oLTv6tfDE+EJtpVnJjlyAi/RpsNbMPFmBN16UM=
Subject key identifier: E1:D6:F3:25:7D:C7:EA:9E:48:7D:74:1D:62:06:F1:61:3F:F6:2B:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D080A0B87611EBBB3B905FF8AEA228.roa
Signing time: Wed 19 May 2021 07:44:14 +0000
ROA not before: Wed 19 May 2021 07:44:10 +0000
ROA not after: Tue 19 Jul 2022 07:44:10 +0000
asID: 1239
IP address blocks: 45.202.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 07:44:10 2021 GMT
Not After : Jul 19 07:44:10 2022 GMT
Subject: CN=60a4c1ce-ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:71:97:ca:80:ee:23:85:16:83:74:c5:e2:
79:45:7f:2d:c6:55:1c:16:d1:ea:34:fa:ac:16:ec:
86:9e:16:8a:82:5b:8e:8c:11:54:94:36:31:ca:e8:
62:14:56:48:9f:b1:60:d8:32:92:bc:57:08:f2:c5:
b9:3a:23:69:4d:2b:cb:f2:86:f4:f4:67:c8:69:f9:
6f:96:5e:91:56:d8:db:a3:cd:12:e4:ad:75:70:61:
ca:5d:23:c3:fe:cd:d4:41:63:b0:07:7f:e9:f0:b4:
1a:c5:a9:2a:ce:08:26:5a:39:f1:ff:ba:82:2e:70:
87:83:48:e8:29:92:7e:a5:97:c8:36:30:b6:cd:6a:
d4:00:5d:9b:e3:b5:02:33:60:2c:35:19:98:14:01:
6d:c1:7e:c4:90:98:58:3b:a7:cb:d4:de:79:d3:35:
6f:30:98:83:00:cc:f0:2b:fa:8d:e8:7e:de:e6:e7:
d1:c3:52:d2:84:49:a2:df:f3:17:bb:68:67:a3:88:
4c:c4:d5:61:ee:38:b1:65:25:08:68:cb:2e:4e:6c:
6d:05:b7:c4:2f:c7:57:68:e3:d4:c7:7f:57:7f:05:
dd:d4:17:64:93:15:2a:68:f7:f9:13:5b:dc:89:e7:
3b:28:c3:f1:dc:79:c3:2d:fc:af:c0:1a:76:77:d6:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:F3:25:7D:C7:EA:9E:48:7D:74:1D:62:06:F1:61:3F:F6:2B:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D080A0B87611EBBB3B905FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.0.0/21
Signature Algorithm: sha256WithRSAEncryption
22:94:b2:28:a2:fd:f9:e7:7c:f1:22:c2:32:c8:ad:76:5c:7f:
d0:41:b4:7c:2f:f5:10:c4:57:8d:ca:b8:ce:96:f1:a1:19:3d:
bf:33:1a:97:5a:f4:c1:80:c7:c6:63:2d:28:a1:a5:37:7c:e8:
8d:20:6c:52:ad:08:cd:e7:b8:b3:f7:05:b6:c4:c0:16:98:48:
21:a1:b3:6c:e6:ce:df:32:0f:f1:e1:74:19:5b:85:08:85:35:
8e:35:5b:32:77:b9:3e:5b:4e:d2:95:95:79:75:d5:ca:3c:8b:
00:d4:4a:ce:b3:a9:e4:84:62:ad:51:6f:61:82:2b:6a:65:40:
77:e9:1c:98:74:8f:83:51:74:6f:b4:32:89:c5:4c:5c:3f:df:
d1:48:55:69:04:af:74:92:da:fe:05:d4:2a:cb:5d:93:71:ff:
5f:26:57:bc:d2:d0:9c:ae:e6:8e:a6:11:48:89:b7:92:2f:1d:
71:24:e5:09:65:3a:ea:1e:89:6f:a1:2c:aa:e4:1b:3c:b4:96:
dd:3a:f9:0d:5e:f4:6e:e2:e6:a4:56:fc:f5:8f:f3:70:80:80:
80:9a:c7:49:83:25:b8:31:7b:02:ed:89:a8:5a:fc:50:cb:2d:
17:ae:68:58:b0:0b:a8:bf:99:03:e8:16:1a:f9:d2:b5:ab:aa:
61:1d:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org