Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D591057CE11ECAF27CFAF5A40D577.roa
File: 075D591057CE11ECAF27CFAF5A40D577.roa (raw, json)
Hash identifier: zThOAm9M/hWZ/CvjPgo+p7Cf+OYCCiNFgPBcAX7zcBA=
Subject key identifier: 93:17:AC:E8:06:F9:CE:39:24:BC:1A:2A:23:BA:10:11:60:97:96:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1062
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D591057CE11ECAF27CFAF5A40D577.roa
Signing time: Wed 08 Dec 2021 02:24:54 +0000
ROA not before: Wed 08 Dec 2021 02:24:51 +0000
ROA not after: Fri 30 Dec 2022 02:24:51 +0000
asID: 9009
IP address blocks: 45.192.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:24:51 2021 GMT
Not After : Dec 30 02:24:51 2022 GMT
Subject: CN=61b01776-6a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:98:03:b5:ee:a7:2d:73:a9:d9:f5:02:c0:
4c:d4:64:e8:de:64:5e:da:7b:86:2e:41:12:04:5f:
81:59:74:24:9a:49:28:a4:b0:3d:2c:f1:80:c0:c2:
0e:3e:d7:19:3d:9a:81:fc:c2:50:79:2e:f8:1d:fb:
c8:c8:e7:58:2a:9d:fd:ea:05:3b:de:09:62:37:c4:
c3:4e:64:41:ae:d7:73:82:57:07:e6:75:dc:59:25:
10:63:af:aa:da:f0:1a:aa:6b:c3:2e:78:57:65:68:
4d:30:98:22:93:f9:49:54:88:b8:37:48:78:d0:8b:
e6:ac:a0:d4:e9:5b:46:cb:e1:c0:24:b6:d7:96:45:
74:df:fe:83:e7:4e:f3:71:93:3c:3f:98:44:16:26:
0c:fe:d2:b2:43:e6:0f:a1:2d:ad:cd:63:ca:fd:98:
9a:22:8a:a0:26:40:33:43:2d:ef:26:26:bc:a4:50:
32:96:54:b0:1f:56:9a:17:7f:b7:04:2d:98:15:9b:
8c:7b:b1:b9:90:ce:79:85:b1:e7:ff:b2:85:71:7c:
82:28:e7:a9:0a:9c:90:bf:d7:0c:19:ef:21:3e:c6:
a8:72:0b:c5:9f:2c:c5:0f:2d:cb:50:b1:be:a9:f3:
3e:78:dc:8b:dd:c5:5d:f5:b6:4f:df:aa:3b:f3:95:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:AC:E8:06:F9:CE:39:24:BC:1A:2A:23:BA:10:11:60:97:96:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D591057CE11ECAF27CFAF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4e:8b:5b:7c:fe:f8:b1:fa:98:c2:e6:7c:16:39:af:d3:54:
8a:37:45:c8:79:60:c2:2f:cb:2a:9d:24:85:f0:26:49:79:0e:
82:c2:a6:7b:e3:be:76:86:e8:09:7b:fd:0e:92:e7:1c:c6:90:
0d:71:5c:22:01:e1:37:e1:81:72:a8:a0:f7:46:54:08:13:68:
b2:5e:41:74:a7:f7:bf:ba:64:9a:43:ac:0a:50:f5:d6:bf:a7:
ac:71:28:66:85:9d:bb:75:84:bb:ed:e6:d2:6a:ab:bb:9d:28:
17:cb:95:60:1f:6a:57:92:de:2b:27:91:0c:83:77:35:59:c2:
5b:62:61:90:06:16:2c:9d:36:85:92:b5:87:63:73:bc:38:32:
1a:2e:fe:1e:fe:1f:0a:a5:7a:0f:bc:d3:7a:0d:60:cc:8c:8a:
b1:22:3f:9e:1b:3d:56:f4:5e:3a:ea:73:12:10:bb:92:20:01:
89:8a:c9:72:b8:0e:2c:49:11:e4:2b:0b:23:f8:35:a4:b9:80:
49:be:8b:62:06:cf:ef:25:29:3d:33:8b:7f:57:af:d0:d9:88:
09:a2:f0:78:d0:ee:1b:22:c7:a7:6d:18:c7:36:18:c2:47:54:
d2:f3:6f:5d:45:b4:07:48:1d:c3:32:cf:71:72:05:85:bb:3b:
4e:38:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org