Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A7CDC279311EDBCBA6AF0F1222468.roa
File: 174A7CDC279311EDBCBA6AF0F1222468.roa (raw, json)
Hash identifier: Uz596PNERgB3MT24QBtqPn5mMrzccE/dLWQsND3M3gk=
Subject key identifier: B9:54:8F:A7:E9:46:49:2A:85:2F:0D:74:CF:43:1B:DA:E4:9E:2B:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A7CDC279311EDBCBA6AF0F1222468.roa
Signing time: Mon 29 Aug 2022 12:07:02 +0000
ROA not before: Mon 29 Aug 2022 12:06:56 +0000
ROA not after: Fri 30 Dec 2022 12:06:56 +0000
asID: 328608
IP address blocks: 45.199.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5957 (0x1745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 12:06:56 2022 GMT
Not After : Dec 30 12:06:56 2022 GMT
Subject: CN=630cabe6-e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:95:2a:47:33:c8:41:6c:83:f3:5f:03:e8:
f2:4c:37:1f:31:07:66:c5:d7:d6:80:0a:06:26:7f:
b1:a8:6d:c6:08:9c:d0:03:7d:f3:4c:ff:d0:a8:05:
f2:29:3f:36:04:d5:a1:29:59:88:6e:ff:f0:36:7d:
38:99:db:d5:6b:94:3d:fe:b1:0a:4f:99:a4:62:fe:
c5:02:92:d6:48:25:ed:7f:b3:27:b0:2a:28:e1:a3:
5a:4c:2a:08:cd:47:cd:e5:ec:0a:aa:fd:bd:42:5d:
7c:86:d6:54:30:12:54:83:04:65:08:a0:a3:41:32:
96:e6:70:1c:05:0c:56:4d:40:2d:ed:49:ad:ed:1a:
c5:24:34:c2:06:3b:ea:c8:66:c5:95:31:a7:c2:9a:
06:c7:9f:e7:3c:c5:21:53:41:45:e8:38:2c:d0:7c:
79:58:af:3a:65:82:11:75:04:69:10:26:c0:31:ca:
0c:da:f0:ab:6c:d2:f6:ce:9a:db:15:84:35:43:85:
0d:c1:c4:8b:eb:2a:6b:1f:10:66:0c:0f:9c:db:7a:
de:02:ae:eb:e5:ca:e2:f6:b2:5c:12:cb:0c:a8:bf:
b3:cc:4a:40:ec:07:d9:38:bc:e8:d2:d6:ac:38:2c:
0c:a9:7b:57:4e:1e:78:70:67:69:05:82:ce:bd:28:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:8F:A7:E9:46:49:2A:85:2F:0D:74:CF:43:1B:DA:E4:9E:2B:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A7CDC279311EDBCBA6AF0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.191.0/24
Signature Algorithm: sha256WithRSAEncryption
86:27:0c:51:b7:6e:26:b7:95:a3:6b:ba:79:f3:9a:c8:fa:91:
a2:a4:cf:6e:14:27:05:d5:7e:06:6e:61:ff:71:44:a7:d5:69:
f8:7b:a4:ca:2c:9b:75:fa:fe:d1:c9:e1:e3:07:af:b4:55:65:
a3:14:95:7d:3f:f6:bb:bb:c2:7d:6b:c6:64:02:1e:d7:a7:23:
20:b1:df:db:45:dc:7e:23:c5:2f:b1:18:97:a4:19:e8:a2:f1:
53:0b:83:dd:18:58:99:bb:0d:54:4a:2b:b7:2f:6f:45:ad:9f:
f9:23:00:6e:46:8a:ba:25:44:6e:10:14:8f:9d:29:bb:f7:24:
be:09:e9:90:63:71:db:cb:59:b5:a4:c3:05:80:26:4c:dd:73:
fb:7e:6b:1c:8e:9b:12:f4:f3:bc:9a:c4:f2:9e:89:ac:7a:cf:
64:1f:79:58:b4:c2:cd:47:07:f5:9b:2d:93:fa:7f:b5:b7:af:
92:c7:36:47:da:c5:b6:6a:02:dd:af:a1:00:1a:f0:f0:78:78:
4a:a8:0f:11:3b:8f:d9:dc:95:93:60:e3:88:6d:23:e2:49:b0:
3e:37:ce:55:4f:40:d8:05:52:62:dc:1b:66:6b:db:05:6b:f7:
5f:4d:95:68:90:82:19:03:61:9a:d4:c6:5b:52:46:b5:1f:63:
5c:e9:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org