Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
File: 1C791C2A38BB11ED9AE873F4F1222468.roa (raw, json)
Hash identifier: /JgdvcDmFW0Y8EAEXUEHUEzg1wGWe7kjPmFRTm/f9+A=
Subject key identifier: 13:16:B4:CD:58:4F:B4:9A:5D:BC:2E:1D:3E:4C:08:22:AC:D5:BD:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 181C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
Signing time: Tue 20 Sep 2022 08:06:21 +0000
ROA not before: Tue 20 Sep 2022 08:06:15 +0000
ROA not after: Thu 31 Aug 2023 08:06:15 +0000
asID: 18233
IP address blocks: 45.195.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6172 (0x181c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 08:06:15 2022 GMT
Not After : Aug 31 08:06:15 2023 GMT
Subject: CN=6329747d-36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:09:f9:45:bc:96:46:52:60:4d:57:c2:ba:
7e:ed:e4:c2:02:28:7f:33:ad:36:5a:4b:d2:fc:2f:
86:a0:4f:a6:f0:dd:f0:da:ac:5f:95:4f:53:32:fb:
8e:5b:5e:b4:db:ee:19:8a:7a:62:59:0f:a0:5d:96:
ad:45:b9:57:40:4a:ec:ac:15:2a:d9:35:bf:5d:31:
a9:d5:7a:39:b3:a6:17:ef:1c:de:bd:f1:e7:d2:3f:
6f:9b:da:79:ca:f1:0f:3a:af:e9:e2:60:d3:c6:fe:
2a:84:6b:07:7c:f9:75:9e:1d:40:80:b8:a5:4e:26:
81:b0:f3:9c:a6:11:0d:a6:58:bf:21:30:92:d2:2c:
07:d3:93:c8:8d:1f:50:5b:d1:06:6e:54:bc:8b:70:
a2:cf:fb:39:7a:a2:62:be:89:f5:25:ff:42:d9:34:
17:cf:e2:78:c6:21:24:c7:bf:b8:1d:a7:65:f8:e7:
ec:41:ec:32:77:6c:ad:b3:a3:aa:0b:13:6d:b3:f5:
c8:54:7c:25:61:65:ff:38:40:fc:e3:09:cb:ef:3c:
98:11:54:64:28:aa:dd:25:15:aa:51:9b:ee:90:d8:
90:4f:a1:90:34:93:0e:d1:8e:e6:e7:79:68:ad:1f:
a8:e1:a2:f3:0a:36:91:f6:42:67:af:5e:1d:1d:59:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:B4:CD:58:4F:B4:9A:5D:BC:2E:1D:3E:4C:08:22:AC:D5:BD:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C791C2A38BB11ED9AE873F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:14:28:a2:76:a7:3b:cc:4e:82:13:c5:73:20:f3:21:79:0a:
b4:4e:74:4e:34:37:c4:c4:89:a8:5b:bc:90:b0:27:3a:0e:32:
b6:a9:64:b8:2f:26:fb:2f:3a:20:33:57:af:92:cc:63:58:53:
0f:b7:33:20:05:b4:b7:39:8b:96:86:47:01:92:fa:27:2b:40:
84:3d:96:fa:97:72:2c:95:ed:05:45:cc:23:cc:b7:47:21:a9:
d9:b1:fc:bb:10:20:a3:62:81:b5:eb:35:f2:d6:c3:79:ab:69:
8c:c5:f1:b6:89:91:86:0c:73:66:80:e5:f5:79:ef:62:7a:65:
f5:78:d9:79:bf:3b:71:1a:bf:fc:d0:1e:18:ce:cd:e0:3e:8c:
cf:76:b4:44:6d:c6:76:0d:6d:dd:ff:45:5b:32:ee:71:2f:ec:
39:33:7b:cd:0c:b7:91:fe:37:25:03:7b:e3:84:37:f8:b0:d2:
a7:e6:cd:54:b9:e6:03:07:b0:17:76:ec:39:a8:fe:c5:9c:a5:
68:10:f0:d3:15:84:95:a8:b8:5a:f6:06:ac:b1:2a:85:60:4e:
ca:18:db:43:f2:d4:5a:86:1a:17:90:40:28:c9:cb:7b:79:e9:
ad:cf:a1:3a:7b:80:5c:b0:81:bc:9c:40:c6:f3:e8:d0:c0:eb:
69:0c:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:15:59 2023 by rpki-client on console-fra.rpki-client.org