Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1567C8CAE7A111ECAB6E65B9F1222468.roa
File: 1567C8CAE7A111ECAB6E65B9F1222468.roa (raw, json)
Hash identifier: gcUxVXMeycEIfKDkarmbPEZhl+3OSiEfGv6Qf8o8ems=
Subject key identifier: 82:C8:06:1F:20:F5:6A:67:30:FA:5E:74:4D:BD:8E:FF:51:DB:4F:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 144E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1567C8CAE7A111ECAB6E65B9F1222468.roa
Signing time: Thu 09 Jun 2022 03:05:58 +0000
ROA not before: Thu 09 Jun 2022 03:05:52 +0000
ROA not after: Fri 30 Jun 2023 03:05:52 +0000
asID: 140403
IP address blocks: 45.195.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5198 (0x144e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 03:05:52 2022 GMT
Not After : Jun 30 03:05:52 2023 GMT
Subject: CN=62a16396-f0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:45:26:f4:fc:3b:a9:e7:df:dd:b9:a3:1d:
b5:b1:42:cc:18:1e:fb:41:4e:81:ff:8f:ef:07:07:
e8:93:25:ea:87:3f:71:93:32:4c:5e:12:b1:76:ca:
aa:89:7e:9e:c9:6e:f3:68:98:72:4c:b2:6b:09:a7:
b0:fb:a5:d8:7c:e6:de:e5:64:94:b0:0f:0c:e9:48:
f8:77:0f:ed:18:ed:72:13:3b:9c:9d:ca:93:ce:d1:
65:31:78:50:78:2a:95:08:11:c8:de:84:42:2b:3b:
ff:8d:c1:2b:77:a1:85:e9:35:e6:34:0b:c9:23:80:
bf:8c:4b:37:a8:86:74:26:7f:9d:d6:87:bf:87:c0:
40:bc:2b:21:96:fc:0e:23:cd:99:a1:76:64:1e:07:
1e:53:c7:dc:66:8f:67:1b:11:c6:12:a4:a7:b2:ce:
be:26:67:7d:f4:7b:7b:50:8a:72:25:58:4a:bd:06:
e6:4b:a2:92:1c:b4:19:5e:34:45:ea:45:db:4a:07:
02:14:7c:7d:58:cf:e2:b1:53:60:b3:f7:6b:d2:cc:
5a:68:55:d9:19:7f:d2:33:48:88:78:00:26:fd:69:
a5:a1:4c:4e:c6:6e:47:a6:3c:5c:3a:5a:04:21:01:
23:e7:d4:27:ed:cb:be:f6:36:30:95:2f:5e:09:7e:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:06:1F:20:F5:6A:67:30:FA:5E:74:4D:BD:8E:FF:51:DB:4F:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1567C8CAE7A111ECAB6E65B9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:68:e4:b4:50:7e:46:62:74:0c:c2:44:f8:16:cf:af:b8:8a:
81:43:14:f1:ef:cb:fd:b6:8d:aa:49:cc:d4:85:73:05:60:c9:
69:1a:92:94:2c:1f:e0:b6:84:2b:f8:22:41:e1:72:19:b0:f8:
9a:ba:ab:76:42:ab:1d:d6:e3:f9:e1:34:55:33:4b:ce:e3:a9:
a7:f1:bc:0d:ea:09:d1:57:68:7e:85:6e:8e:4b:42:e3:02:9b:
8f:de:e6:a0:8c:35:f1:66:0c:5c:1b:7a:5c:3b:43:56:5d:1e:
d9:b7:5a:90:f0:be:8f:8a:6d:37:ff:8c:9f:91:df:64:21:97:
2d:d9:2e:83:95:19:3d:48:ca:58:66:6d:2f:7f:70:c0:3a:41:
a2:21:a4:90:68:93:a5:32:28:b0:53:2b:f4:df:4b:94:c0:38:
b3:a9:76:5b:5a:51:be:90:c4:5e:24:3c:f5:d3:72:1e:17:19:
a1:74:4e:d3:b7:52:bb:18:0d:32:66:8a:8b:9d:0c:3d:99:73:
18:aa:35:24:24:85:ee:20:71:9d:ca:bd:51:16:d4:38:c5:32:
a3:c7:b9:ab:fc:4a:e4:88:9e:79:05:47:e4:93:61:eb:b1:ae:
7b:81:0f:9c:16:b9:c5:2d:ec:ab:3a:4d:ce:8a:f9:d5:e6:43:
63:7b:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org