Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242F6D78DCEC11EC923E23E4F1222468.roa
File: 242F6D78DCEC11EC923E23E4F1222468.roa (raw, json)
Hash identifier: Yjd7V8kHcdmFGp1vKMZAJyb09mUq02s+orzNyxRHpnU=
Subject key identifier: 53:20:0F:33:C3:4F:97:87:49:5C:F4:8F:CA:F7:61:5D:EA:C6:70:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1418
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242F6D78DCEC11EC923E23E4F1222468.roa
Signing time: Thu 26 May 2022 12:05:32 +0000
ROA not before: Thu 26 May 2022 12:05:28 +0000
ROA not after: Thu 30 Jun 2022 12:05:28 +0000
asID: 328608
IP address blocks: 45.192.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5144 (0x1418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 12:05:28 2022 GMT
Not After : Jun 30 12:05:28 2022 GMT
Subject: CN=628f6d0c-16c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:e7:84:7f:9a:bb:0a:67:d4:49:b8:a9:91:
f3:a6:62:21:4e:71:ef:39:a9:16:29:4e:34:d0:7f:
6b:d7:ec:24:ec:ba:c7:64:62:1d:e3:88:0c:9d:79:
26:e7:c2:cc:84:e7:75:a1:15:25:57:8f:81:4f:57:
4a:8b:fc:d6:88:3d:81:c4:14:20:7b:75:64:90:f7:
1b:bb:7b:0f:c2:f6:46:2e:47:e7:f6:99:26:97:cd:
10:e4:c7:bb:07:2b:8b:a0:5b:f9:d4:f3:44:45:bf:
5a:6e:9b:61:b4:cc:80:fd:b7:b8:ee:49:7f:b4:e2:
cd:0e:f6:a3:e2:f2:ca:09:90:1e:72:1e:28:d6:0f:
e1:b9:ec:6d:73:6f:44:57:f2:03:e7:9e:c1:29:47:
b4:17:27:a4:ec:58:f9:f3:27:6c:1f:9c:27:68:be:
ad:a7:dc:22:ea:63:57:77:34:e3:f8:56:f7:6d:0d:
e4:c6:28:55:8d:d2:b4:c9:7b:e8:0a:46:cd:9d:43:
65:c6:47:64:e5:70:c2:d0:5c:cd:79:c9:bb:84:dd:
1e:65:c6:97:ef:73:ff:3d:20:f8:6c:a3:b5:ed:ee:
ed:61:2f:b9:5b:cf:11:e5:e4:5e:0c:63:d4:aa:a0:
00:4a:f6:c9:83:37:e7:eb:82:d2:e4:5b:fb:0d:34:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:0F:33:C3:4F:97:87:49:5C:F4:8F:CA:F7:61:5D:EA:C6:70:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242F6D78DCEC11EC923E23E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:21:96:5e:69:fd:d0:48:18:b9:8a:0e:99:54:f9:d4:08:66:
5a:15:f6:29:fe:5c:e2:75:d4:48:be:5d:3f:0d:f5:10:b4:53:
47:a7:61:d9:a2:9d:79:6f:2e:a5:45:60:77:49:79:44:de:cf:
dd:01:92:7d:a3:59:a8:0f:1a:95:7c:fc:e1:39:31:28:37:20:
c1:ee:43:49:95:c3:de:e8:01:d3:24:e6:81:db:8f:d0:d8:14:
8c:9d:85:78:ae:ea:a9:d4:ae:c3:31:0f:c2:23:d2:16:69:85:
eb:94:16:67:20:88:33:61:5e:ac:38:62:89:0c:e4:22:55:63:
ef:86:4b:ff:62:dc:9e:b2:e9:50:37:ae:03:be:bc:f0:2e:9c:
64:fa:c7:66:2a:cd:b8:e0:18:e6:69:9d:c4:9a:a8:26:a2:f2:
70:1c:3d:04:41:72:43:43:0a:81:dd:b9:b9:4a:1c:56:08:02:
3a:f6:52:23:be:70:21:b7:81:bb:18:14:dd:e4:69:c8:e0:a5:
39:e4:33:0b:34:94:f6:94:c6:65:26:5a:e9:d2:1a:6e:60:17:
bb:df:55:52:18:0d:fd:2a:29:8b:98:d9:a8:70:34:83:5e:15:
a6:e4:84:53:22:c9:d1:b3:c2:36:30:57:fe:8d:2a:d7:1f:49:
a2:f4:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org