Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B0DA420D59211EB9B0A4C43F8AEA228.roa
File: 0B0DA420D59211EB9B0A4C43F8AEA228.roa (raw, json)
Hash identifier: yWFWy2yR3OS5+xYzFyUEmknn3Ti12pM0Um9d+6Y5rcI=
Subject key identifier: F8:29:4F:C8:8F:9B:87:59:12:38:33:2E:1D:82:58:4C:04:53:20:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 069C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B0DA420D59211EB9B0A4C43F8AEA228.roa
Signing time: Fri 25 Jun 2021 08:47:59 +0000
ROA not before: Fri 25 Jun 2021 08:47:54 +0000
ROA not after: Thu 25 Aug 2022 08:47:54 +0000
asID: 399626
IP address blocks: 45.204.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:47:54 2021 GMT
Not After : Aug 25 08:47:54 2022 GMT
Subject: CN=60d5983f-a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:4e:06:28:fb:db:87:31:4e:55:67:69:59:
29:57:f9:7c:08:b7:4d:1d:b9:97:33:21:fa:da:71:
72:fc:59:aa:21:6d:08:8a:52:c2:ff:1e:c0:1e:b5:
ae:c7:38:0f:4b:ac:be:1e:58:94:31:5d:0a:f3:a4:
c6:d4:0f:f4:0c:fd:49:a4:58:f5:af:0c:64:d5:85:
ae:c5:2a:6f:4d:72:a5:ea:7e:9b:45:83:ed:18:b9:
63:2a:bf:e4:a5:bd:c3:77:d1:c3:8f:30:09:0e:19:
11:21:46:ad:9f:5d:f7:e4:ff:a7:26:e0:a5:c2:5d:
6c:17:f2:58:93:05:d0:74:05:80:f3:5d:f9:f8:a7:
37:6b:84:b3:55:b0:04:5b:d8:3f:57:58:d9:e1:82:
1a:cb:d2:d4:48:78:4c:89:58:80:f3:59:95:cb:11:
68:aa:ab:77:2e:14:60:91:ce:ae:cd:32:1f:34:47:
c2:65:d0:71:20:2e:1f:74:cc:b2:ec:ae:81:17:59:
b0:c2:7a:df:3e:50:70:0a:cd:c6:d1:e3:f5:6a:cc:
d5:b4:e5:20:6a:b8:55:45:3b:35:b3:2b:ee:b1:78:
9b:2f:df:ae:bc:ec:2e:76:2f:76:40:4b:49:ff:43:
52:ed:66:21:ab:0b:b1:1d:31:a6:08:fe:59:dc:2d:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:4F:C8:8F:9B:87:59:12:38:33:2E:1D:82:58:4C:04:53:20:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B0DA420D59211EB9B0A4C43F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.96.0/19
Signature Algorithm: sha256WithRSAEncryption
26:54:4e:17:d2:f8:73:08:93:f8:80:ef:78:4e:e3:c4:b9:1c:
dd:a4:84:44:1e:e8:7e:4e:83:be:11:07:9c:ab:8c:2d:7e:ec:
89:6e:3c:83:65:eb:bb:bf:7b:18:f8:b0:8b:05:36:0a:ee:50:
c6:96:5d:3c:93:9f:58:7e:38:95:44:88:d1:37:65:ac:63:9b:
09:f9:3f:18:d4:9c:85:4f:be:a2:f4:c2:c3:34:77:49:da:9a:
0b:27:4c:1c:0b:f0:8b:07:07:ec:fa:06:74:c4:29:c7:63:f6:
7c:41:0b:04:cf:cf:42:49:11:f2:5d:2e:cd:c0:83:12:25:03:
62:7e:cf:ce:43:17:96:c1:c9:e5:77:04:8f:39:6a:93:4a:15:
1e:f3:3e:f5:80:ac:1a:17:54:c7:7d:e9:c2:81:71:8a:16:81:
a0:49:7f:78:d8:bd:83:9a:21:91:cf:4c:a9:4b:14:50:a9:27:
4a:ad:eb:c7:08:e8:9b:a0:3a:ed:1c:7d:d0:c2:b5:41:97:6f:
b9:d1:f1:29:01:e8:af:90:26:e3:a6:57:3b:56:74:07:00:94:
99:08:6b:5b:0d:62:d7:30:f3:20:f5:1f:05:dc:59:58:cf:92:
2f:46:d2:69:45:d3:31:53:6c:3a:87:16:30:70:15:33:ad:ae:
e3:71:5b:bd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA2MjUwODQ3NTRaFw0yMjA4MjUwODQ3NTRaMBgxFjAU
BgNVBAMTDTYwZDU5ODNmLWE4ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS+04GKPvbhzFOVWdpWSlX+XwIt00duZczIfracXL8WaohbQiKUsL/HsAe
ta7HOA9LrL4eWJQxXQrzpMbUD/QM/UmkWPWvDGTVha7FKm9NcqXqfptFg+0YuWMq
v+SlvcN30cOPMAkOGREhRq2fXffk/6cm4KXCXWwX8liTBdB0BYDzXfn4pzdrhLNV
sARb2D9XWNnhghrL0tRIeEyJWIDzWZXLEWiqq3cuFGCRzq7NMh80R8Jl0HEgLh90
zLLsroEXWbDCet8+UHAKzcbR4/VqzNW05SBquFVFOzWzK+6xeJsv36687C52L3ZA
S0n/Q1LtZiGrC7EdMaYI/lncLVCpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+ClP
yI+bh1kSODMuHYJYTARTIL0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzBCMERBNDIwRDU5MjExRUI5QjBBNEM0M0Y4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUtzGAwDQYJKoZIhvcNAQELBQAD
ggEBACZUThfS+HMIk/iA73hO48S5HN2khEQe6H5Og74RB5yrjC1+7IluPINl67u/
exj4sIsFNgruUMaWXTyTn1h+OJVEiNE3Zaxjmwn5PxjUnIVPvqL0wsM0d0namgsn
TBwL8IsHB+z6BnTEKcdj9nxBCwTPz0JJEfJdLs3AgxIlA2J+z85DF5bByeV3BI85
apNKFR7zPvWArBoXVMd96cKBcYoWgaBJf3jYvYOaIZHPTKlLFFCpJ0qt68cI6Jug
Ou0cfdDCtUGXb7nR8SkB6K+QJuOmVztWdAcAlJkIa1sNYtcw8yD1HwXcWVjPki9G
0mlF0zFTbDqHFjBwFTOtruNxW70=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org