Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A58221057CE11EC88534BB05A40D577.roa
File: 2A58221057CE11EC88534BB05A40D577.roa (raw, json)
Hash identifier: /zRwTZGHcVcW43oxWtL4tc1vuL9k4xhKqWUvNJ+Y1RI=
Subject key identifier: 04:FF:72:DE:9B:22:8A:C8:C5:C9:94:15:0E:31:00:31:DC:4D:25:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1066
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A58221057CE11EC88534BB05A40D577.roa
Signing time: Wed 08 Dec 2021 02:25:53 +0000
ROA not before: Wed 08 Dec 2021 02:25:49 +0000
ROA not after: Fri 30 Dec 2022 02:25:49 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:25:49 2021 GMT
Not After : Dec 30 02:25:49 2022 GMT
Subject: CN=61b017b1-d8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:cf:24:f8:e6:a3:7f:6b:c2:ef:2a:17:3f:
38:5d:5b:69:f8:d5:dd:56:64:23:f2:9f:07:17:61:
19:73:92:38:f6:bb:1f:e1:bc:31:fd:8b:d6:90:94:
fb:84:a1:76:45:c7:25:da:b6:51:86:62:a0:55:62:
f9:a8:b3:04:a9:a3:d1:4d:ad:8e:e2:55:65:30:37:
e0:4f:3c:54:5d:b4:0a:64:60:79:b7:d6:17:1e:db:
01:d5:a7:a5:1b:69:58:99:2c:45:aa:be:ff:36:06:
53:b9:f9:5f:ea:00:33:98:1f:9e:47:eb:24:b6:27:
f5:b7:14:53:90:2d:b8:fc:3c:0a:64:89:ad:43:93:
a2:16:93:4c:13:09:c9:3d:c7:f3:6f:d0:2e:b3:c9:
c0:63:19:a1:f4:ca:6d:9f:10:a0:ca:38:b4:cc:2d:
f8:7f:22:9c:cc:ff:4f:c6:55:a1:f2:36:3d:89:74:
6f:10:61:ce:0f:25:fb:b1:ed:8d:db:89:b4:1c:a5:
cf:c3:fe:e6:79:33:41:a5:2d:8d:e1:0d:7c:94:47:
95:9d:31:0e:19:07:01:c7:d0:eb:2c:ac:72:b9:a4:
11:fc:d0:b1:72:d0:f5:c8:df:5a:3f:ec:a0:e1:88:
5f:34:98:8f:0e:ce:f3:8b:86:bc:73:4c:69:0b:6b:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:72:DE:9B:22:8A:C8:C5:C9:94:15:0E:31:00:31:DC:4D:25:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A58221057CE11EC88534BB05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:03:53:24:35:3f:e8:da:7f:d4:98:df:37:e2:66:c7:4f:
67:b0:50:d7:85:79:df:0b:42:e4:90:36:ac:4f:48:49:2a:1e:
ef:f1:21:5a:6c:b6:96:ad:a1:85:87:94:8c:5f:ed:04:e4:81:
86:cc:a9:25:13:4e:6d:22:c7:5f:f5:30:34:49:80:a1:e0:04:
61:3a:0a:67:f1:46:17:de:96:1d:9f:e3:75:50:5c:87:20:2a:
c9:60:15:46:e5:56:45:bd:bc:a3:9a:b7:2d:12:ce:2e:15:a6:
47:88:0d:92:0b:f9:6e:b3:b9:3f:3f:b4:58:85:6e:44:a1:c7:
2e:a8:21:18:2e:fa:7e:e7:6b:ac:18:f1:4d:e8:0f:fb:52:dc:
71:47:ec:8c:54:8a:a3:eb:45:db:9c:a4:91:f6:06:2b:92:80:
cb:06:5c:69:90:54:dd:f4:03:2a:48:ba:bf:fb:ee:d0:7f:99:
17:62:1f:09:d4:09:bb:fe:23:73:91:cd:01:9d:8d:93:f7:12:
7d:e8:58:9a:86:94:c5:39:fd:40:0f:c8:2d:8b:41:72:e0:84:
4c:4e:4c:01:c4:f8:f8:cd:30:de:d9:3d:31:60:89:c6:88:3f:
18:06:0e:8e:26:0c:17:5c:c2:bb:51:a5:74:ba:d8:0b:8d:0e:
5e:8f:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org