Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D95BCC284FA11ECA2C4B7E35A40D577.roa
File: 2D95BCC284FA11ECA2C4B7E35A40D577.roa (raw, json)
Hash identifier: EYS7RCfxK7EqT9KWBRSJqoPljqTawo5Ioj9gt8ppWZ0=
Subject key identifier: 72:A6:0A:07:DB:19:28:85:1B:9C:7A:4E:BA:E3:C3:94:E8:59:1D:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 11C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D95BCC284FA11ECA2C4B7E35A40D577.roa
Signing time: Thu 03 Feb 2022 14:04:18 +0000
ROA not before: Thu 03 Feb 2022 14:04:14 +0000
ROA not after: Tue 28 Feb 2023 14:04:14 +0000
asID: 212238
IP address blocks: 45.195.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 14:04:14 2022 GMT
Not After : Feb 28 14:04:14 2023 GMT
Subject: CN=61fbe0e2-03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:b1:07:75:d1:f1:fd:ce:1c:44:77:b1:8a:
c4:e3:36:56:46:2d:da:ee:db:b3:2a:11:ee:4b:aa:
5b:98:c8:0a:59:6f:aa:46:3f:ab:42:23:d6:8f:66:
f9:d1:20:dc:57:31:1c:47:91:57:f7:f5:40:75:d4:
89:a5:3f:c9:c0:2f:7a:e5:6c:88:70:16:33:b7:e1:
55:6a:7b:a6:48:d1:68:06:82:4e:ee:17:48:93:c3:
7b:d8:6a:f2:20:fb:5e:3b:1a:29:fa:3d:82:ca:55:
37:69:7d:26:a6:fa:38:c2:f6:dc:34:2a:1e:c2:95:
c6:33:a3:d8:9a:f3:55:7a:67:4e:5c:e6:44:a2:08:
04:5e:5f:62:f0:71:9b:3a:e2:c1:ac:cc:fd:7b:3b:
b4:91:77:5d:b6:59:6b:fe:80:5f:20:b8:af:91:79:
6d:41:8a:f6:26:a6:a0:36:4b:ee:ba:b2:63:60:d5:
db:15:21:9c:b6:4c:4f:57:66:3a:47:d0:b6:de:01:
eb:dd:3d:f1:d8:46:68:39:d6:1e:df:e3:ce:7c:e5:
6c:5d:e9:96:fc:f4:31:d0:ef:71:fb:d5:4b:d8:4a:
37:4a:3f:f9:a5:3d:78:6a:21:9c:91:76:40:42:84:
8d:3f:91:8e:dc:68:c6:a2:f6:a5:15:e1:cf:10:2e:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:0A:07:DB:19:28:85:1B:9C:7A:4E:BA:E3:C3:94:E8:59:1D:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D95BCC284FA11ECA2C4B7E35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
18:03:33:63:5b:85:2c:68:26:ab:4b:28:de:fe:e4:a1:5c:0d:
b6:70:86:8c:9e:e5:75:62:06:ac:3b:1e:15:78:de:29:64:25:
83:98:b7:2d:b2:8d:7b:82:a3:9a:0a:89:cc:44:d2:9a:2b:7d:
fd:b7:ab:58:dc:c9:22:a8:7c:fa:dc:23:98:10:f3:3e:7b:a6:
57:8b:24:de:b7:5f:a6:5a:80:df:0d:c6:71:13:0c:1e:3e:4c:
8c:66:3f:ca:3c:d0:f8:fb:2c:01:f9:96:f9:16:91:49:a1:67:
99:a1:e4:18:bd:e7:4a:f6:5f:4f:46:51:f5:ed:c4:32:34:aa:
bb:ca:9c:45:94:55:6d:82:b4:11:60:c8:c5:55:79:f0:31:c3:
34:f4:65:38:b5:9f:7c:5a:6f:2c:2e:cf:31:43:44:13:eb:79:
a0:84:61:2c:7f:83:12:4a:1a:97:a5:6d:48:8d:80:1f:cc:4f:
95:40:ef:06:e0:5d:d1:07:8c:16:98:48:3e:1e:00:0a:d3:68:
a9:44:ee:3d:bc:c9:a1:41:4e:fc:be:9e:13:80:98:27:96:54:
97:23:dd:86:1c:70:f1:3b:c2:d1:b1:0b:2e:0e:ec:fd:61:6f:
87:ca:80:81:55:a8:a9:86:6f:f8:1e:fb:ce:b0:34:f7:32:d5:
a2:02:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org