Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F1BF2EAE7C111EC9D0B51A0F1222468.roa
File: 1F1BF2EAE7C111EC9D0B51A0F1222468.roa (raw, json)
Hash identifier: OPNhnLIpQg6HPOeYhvhrICIvBt+valYrJhGuEgGlty0=
Subject key identifier: 05:57:D2:FC:94:91:B4:4C:71:48:A3:20:C9:F4:A2:9D:7D:35:38:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1454
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F1BF2EAE7C111EC9D0B51A0F1222468.roa
Signing time: Thu 09 Jun 2022 06:55:18 +0000
ROA not before: Thu 09 Jun 2022 06:55:14 +0000
ROA not after: Fri 30 Jun 2023 06:55:14 +0000
asID: 133199
IP address blocks: 45.204.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 06:55:14 2022 GMT
Not After : Jun 30 06:55:14 2023 GMT
Subject: CN=62a19956-a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:f2:d1:09:e3:ae:af:0a:4c:db:29:2b:1e:
6f:8a:ed:ca:7e:5a:8e:46:e3:c6:c8:6b:da:db:b7:
bd:a2:c6:97:9e:ae:2c:99:fc:d4:e7:90:f5:2e:b7:
aa:d9:e5:d2:56:f7:ae:bf:0d:7d:3d:f9:33:bb:95:
5e:06:43:a2:57:18:82:fd:ba:08:15:77:55:d2:40:
d9:6b:68:34:dc:37:77:d8:55:d7:89:51:01:5e:ce:
e8:b8:12:cf:00:6a:f6:f0:2a:90:26:c6:54:96:b3:
c4:52:22:52:48:d1:67:64:2b:7a:96:8a:b0:f5:09:
f1:39:31:c4:8e:7e:ed:7e:53:4c:2a:cd:8f:14:ee:
39:5c:9d:73:68:dc:f1:cf:51:17:19:1a:9d:3f:94:
49:5e:db:50:99:bf:19:4d:2b:84:2f:51:ff:ff:3b:
c2:2a:30:39:ab:c9:69:4c:0c:e0:09:39:19:68:e3:
0d:6a:f8:3f:77:2c:76:27:14:ec:dd:2b:6c:e7:6d:
65:ea:2d:c5:c6:c2:90:23:37:aa:29:d4:5f:86:f7:
39:0f:8c:4b:6c:f7:90:f9:62:1f:96:0b:b0:d8:5a:
26:0b:ad:8c:0f:10:b1:9e:eb:93:43:9a:dc:7f:9b:
a2:8f:9e:cd:4b:17:2f:08:82:55:1d:4e:a2:d0:e2:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:D2:FC:94:91:B4:4C:71:48:A3:20:C9:F4:A2:9D:7D:35:38:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F1BF2EAE7C111EC9D0B51A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5f:46:4f:62:5c:a2:69:68:82:97:3f:5e:77:81:08:84:ca:
e3:e7:cf:2a:8a:62:6c:b7:de:41:fe:10:d4:5b:95:d0:bc:b0:
ae:6f:7d:d6:2e:4d:0a:78:d8:71:90:f9:e5:47:14:3c:21:43:
49:e5:c5:1f:04:72:de:2a:22:a7:ac:bc:6d:82:0c:8c:5e:6c:
89:c3:5d:86:44:e1:55:d9:5e:47:06:6d:82:0d:8b:e1:65:82:
0f:14:a5:8b:d1:6d:44:b7:51:b7:5f:87:c3:a7:93:ec:6f:54:
ca:73:33:8d:aa:cd:72:f6:95:ab:a5:41:76:04:57:93:19:84:
fd:37:5d:2d:e2:06:7f:40:c9:e7:60:1e:d8:c6:f4:9e:96:52:
1b:bb:14:90:e4:18:94:d6:49:a4:e0:83:26:79:55:49:0f:86:
7f:fe:b4:8b:a5:64:15:00:38:62:07:21:79:b5:12:1a:11:c1:
db:8c:1a:4e:3f:c4:16:07:2c:c1:b4:73:16:89:a5:c9:85:6a:
7b:cf:c0:07:93:08:67:8d:c8:e2:c0:34:13:6a:91:e0:84:74:
d5:19:94:51:d3:df:4d:94:3e:4c:5d:e4:7e:57:bf:64:d7:bb:
20:58:a3:82:9d:39:f4:88:54:fa:06:b2:95:3c:5a:42:d4:c2:
28:b6:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org