Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8FC65057DA11ECA622A2D55A40D577.roa
File: 0C8FC65057DA11ECA622A2D55A40D577.roa (raw, json)
Hash identifier: OdFjL0OsBEZKbqdUk0/GCW0/qfVrTCkmvTJedoLo8eU=
Subject key identifier: 72:0B:81:34:3B:E8:16:72:71:7D:B4:B1:03:06:86:84:A6:78:EF:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8FC65057DA11ECA622A2D55A40D577.roa
Signing time: Wed 08 Dec 2021 03:50:57 +0000
ROA not before: Wed 08 Dec 2021 03:50:53 +0000
ROA not after: Fri 30 Dec 2022 03:50:53 +0000
asID: 17539
IP address blocks: 45.206.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 03:50:53 2021 GMT
Not After : Dec 30 03:50:53 2022 GMT
Subject: CN=61b02ba1-091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:50:c0:3b:d7:13:ba:3f:09:54:b5:4d:b9:
c6:81:ef:48:2e:1d:d6:18:11:62:03:c1:19:0e:58:
c5:f7:dd:b1:09:06:04:04:b3:22:c7:1a:ee:ea:52:
76:57:48:fe:ac:59:be:11:84:a4:95:e4:f8:83:cf:
be:83:ac:29:51:20:1b:7b:02:db:7a:0f:29:6f:f2:
27:dd:30:1b:c6:15:a8:ac:71:27:a1:9d:4e:fa:74:
00:3c:13:23:9e:db:88:11:bd:32:7e:dc:53:f5:3a:
9c:5d:f0:74:96:be:41:73:c1:c8:7a:9a:e7:de:7d:
13:30:a9:32:e7:46:89:5d:1d:5e:35:c2:c7:b4:45:
eb:be:91:e2:ba:9a:48:3f:92:f0:b4:83:9e:9b:8f:
5c:ec:1e:46:03:f2:dc:17:59:99:db:07:59:fd:46:
19:97:8c:93:b6:b0:01:5e:c1:3b:6a:bb:2d:96:bb:
e7:99:47:4d:1d:cb:a3:fc:da:a1:6c:e8:8f:7b:eb:
a3:f2:3c:c8:8a:8c:e4:00:18:0c:de:c5:b4:12:d0:
b6:b8:bd:83:33:a8:76:2a:96:f5:3c:b7:9d:e6:b0:
f7:27:ca:52:e8:99:14:80:1e:6c:a1:d1:9a:c2:5a:
23:bf:08:d7:da:bf:15:12:05:1f:60:43:c1:28:ac:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:81:34:3B:E8:16:72:71:7D:B4:B1:03:06:86:84:A6:78:EF:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8FC65057DA11ECA622A2D55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.22.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3e:cc:d1:6d:9c:f2:b3:6a:dd:65:d7:51:28:cf:2e:2c:18:
8d:4f:7b:b4:cc:f2:97:4f:d7:c4:c6:5e:cc:13:2e:03:9f:c6:
34:6f:27:43:28:36:cf:91:65:bb:4d:23:b4:89:c0:c1:65:35:
78:11:13:ca:b5:86:7a:9d:f9:f8:68:7d:e0:5e:35:38:b1:0a:
c8:73:de:54:95:30:c5:43:44:82:a5:fa:68:a2:38:b3:8d:e9:
9b:eb:b8:7d:cf:5a:3c:d8:8c:06:f8:24:89:66:60:82:06:29:
45:06:19:b8:60:c7:d2:1b:ed:47:06:ee:97:75:2d:db:ec:9d:
7d:aa:ad:f7:0b:57:56:63:8c:ea:f7:99:1c:5a:34:b8:05:ca:
35:72:6e:9e:7e:f0:ea:65:0f:51:b1:c5:df:01:cd:88:cc:73:
86:0b:76:4f:c7:da:bc:55:64:04:57:d3:75:3a:2d:e4:91:e9:
5a:46:4a:63:cc:d5:b2:2e:c9:fd:f4:00:86:b4:f0:85:68:6b:
c3:5a:9c:f6:58:a8:37:7c:44:e7:2b:a1:39:85:97:d2:ae:b0:
79:d8:e4:79:46:9a:d6:4a:0e:2d:df:e1:c8:6c:7d:d5:09:3d:
cd:33:31:72:af:55:ab:4f:91:74:3c:cf:4f:53:7a:a4:1c:cc:
d3:74:53:7f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMzUwNTNaFw0yMjEyMzAwMzUwNTNaMBgxFjAU
BgNVBAMMDTYxYjAyYmExLTA5MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf61DAO9cTuj8JVLVNucaB70guHdYYEWIDwRkOWMX33bEJBgQEsyLHGu7q
UnZXSP6sWb4RhKSV5PiDz76DrClRIBt7Att6Dylv8ifdMBvGFaiscSehnU76dAA8
EyOe24gRvTJ+3FP1Opxd8HSWvkFzwch6mufefRMwqTLnRoldHV41wse0Reu+keK6
mkg/kvC0g56bj1zsHkYD8twXWZnbB1n9RhmXjJO2sAFewTtquy2Wu+eZR00dy6P8
2qFs6I9766PyPMiKjOQAGAzexbQS0La4vYMzqHYqlvU8t53msPcnylLomRSAHmyh
0ZrCWiO/CNfavxUSBR9gQ8EorLIrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUcguB
NDvoFnJxfbSxAwaGhKZ474owHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzBDOEZDNjUwNTdEQTExRUNBNjIyQTJENTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzhYwDQYJKoZIhvcNAQELBQAD
ggEBAGU+zNFtnPKzat1l11Eozy4sGI1Pe7TM8pdP18TGXswTLgOfxjRvJ0MoNs+R
ZbtNI7SJwMFlNXgRE8q1hnqd+fhofeBeNTixCshz3lSVMMVDRIKl+miiOLON6Zvr
uH3PWjzYjAb4JIlmYIIGKUUGGbhgx9Ib7UcG7pd1LdvsnX2qrfcLV1ZjjOr3mRxa
NLgFyjVybp5+8OplD1Gxxd8BzYjMc4YLdk/H2rxVZARX03U6LeSR6VpGSmPM1bIu
yf30AIa08IVoa8NanPZYqDd8ROcroTmFl9KusHnY5HlGmtZKDi3f4chsfdUJPc0z
MXKvVatPkXQ8z09TeqQczNN0U38=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org