Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2016906E987111EC989BEA945A40D577.roa
File: 2016906E987111EC989BEA945A40D577.roa (raw, json)
Hash identifier: HBuC3k4/p5a4rabKZtYc3kLK6tTRRLaAdOFbxx78chk=
Subject key identifier: B7:19:A6:38:92:41:C0:3F:2E:D8:3E:D1:FA:21:1E:B8:80:E2:39:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1216
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2016906E987111EC989BEA945A40D577.roa
Signing time: Mon 28 Feb 2022 08:33:38 +0000
ROA not before: Mon 28 Feb 2022 08:33:33 +0000
ROA not after: Fri 30 Dec 2022 08:33:33 +0000
asID: 328608
IP address blocks: 45.196.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4630 (0x1216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 08:33:33 2022 GMT
Not After : Dec 30 08:33:33 2022 GMT
Subject: CN=621c88e2-a7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:99:74:ac:71:a0:80:c5:72:d5:a3:39:a6:
78:b4:5a:4c:3c:ab:21:50:a7:5c:8b:8e:5a:ad:0c:
db:3b:8e:88:27:23:d2:4d:b6:77:bf:b6:ce:c8:44:
d5:89:e7:b2:1d:56:f0:c4:c4:59:5f:51:d0:b5:2d:
56:8f:a1:64:c8:88:5b:e3:cd:56:58:73:7e:21:cd:
b9:92:ff:50:74:df:cc:14:72:8a:59:b9:10:e5:c4:
b0:9f:16:04:9d:65:bb:93:98:29:8b:0f:5e:c4:3e:
78:d7:a3:b0:f0:e3:0d:ec:8e:45:46:7a:8a:ae:72:
c4:c2:c8:20:c4:fb:47:c5:ea:07:0a:6f:3e:11:90:
fe:45:4b:2d:cf:5c:e7:d9:17:f6:5b:75:7e:cf:bf:
1d:df:76:37:db:65:70:9e:0b:9c:90:d0:51:ec:0f:
0f:a5:96:da:f7:6a:59:18:a8:0a:b8:4e:76:9a:02:
5c:a3:73:43:28:04:1e:63:4c:63:93:88:bd:ce:f3:
f0:d2:f6:b6:2d:0b:c2:aa:65:9a:7f:0d:85:cd:a5:
01:c9:d4:ae:a5:f7:e4:dd:ed:14:41:12:21:54:b0:
29:47:e9:66:a2:8f:8b:81:b7:89:24:23:06:0a:12:
30:2b:a4:12:9b:4d:ba:e1:52:6b:77:9b:51:42:fa:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:A6:38:92:41:C0:3F:2E:D8:3E:D1:FA:21:1E:B8:80:E2:39:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2016906E987111EC989BEA945A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:77:8c:2c:e5:f6:eb:f5:5d:86:e1:97:80:88:fb:45:57:1d:
a4:85:76:45:02:09:53:95:dc:b5:3b:b5:44:e3:4d:f6:c1:29:
11:d6:26:2e:77:70:f2:22:8c:0c:b0:95:c0:17:ac:9e:7f:52:
5a:45:82:31:da:36:0f:4b:bf:6c:ed:aa:1f:53:cb:b4:58:cd:
ed:e2:69:0f:54:2b:f9:1d:a1:ea:f0:21:7f:b3:b4:8e:d3:b8:
65:d5:44:a5:31:c4:d5:ce:47:77:e3:8d:ae:a2:07:0f:f4:19:
b1:e8:93:ed:9c:2a:21:a8:50:ae:dc:ca:55:ab:23:15:71:60:
d3:d9:d9:37:ea:b8:75:52:4f:23:8e:69:ac:f8:c2:d1:9f:01:
e5:f2:9b:e6:f4:ba:8a:bc:37:e5:2a:77:04:39:3e:2e:a3:9e:
85:76:6a:68:7b:90:d0:9d:20:c9:62:63:88:f6:f9:ce:51:85:
3e:ad:d5:6b:0b:8b:01:8d:27:a9:b8:5a:a1:e6:1b:f0:44:fa:
34:ea:39:84:47:d4:5c:26:80:b4:1d:6d:df:7a:11:73:c0:ac:
10:2d:59:a0:7b:1f:4c:b3:d5:21:ba:ce:9a:c8:b0:9e:38:09:
5b:7b:43:71:20:a4:cd:2e:17:78:43:a8:0b:46:1f:ef:73:fc:
f9:08:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org