Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334CA5DE356511EC9CC48F13D8A014CE.roa
File: 334CA5DE356511EC9CC48F13D8A014CE.roa (raw, json)
Hash identifier: tjCFY/uLq6+16u6EVXt/W8mhYb1vig9D4PIcqTtppE4=
Subject key identifier: 41:57:E7:D0:84:B1:33:AD:11:90:B7:1E:5A:BB:82:08:D3:90:D9:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334CA5DE356511EC9CC48F13D8A014CE.roa
Signing time: Mon 25 Oct 2021 07:28:51 +0000
ROA not before: Mon 25 Oct 2021 07:28:47 +0000
ROA not after: Sat 25 Jun 2022 07:28:47 +0000
asID: 328957
IP address blocks: 45.200.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 25 07:28:47 2021 GMT
Not After : Jun 25 07:28:47 2022 GMT
Subject: CN=61765cb3-7b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:a9:9a:15:38:4b:b4:85:d2:71:01:92:eb:
13:47:f6:6a:e0:bd:63:75:1c:ba:39:46:bd:f0:6e:
8d:37:f4:48:4f:a5:d4:d0:2d:f2:bc:bf:fe:82:b9:
46:cf:d4:3f:22:c1:74:8f:3e:b1:e3:cc:20:cd:c2:
21:a8:62:26:d8:a7:15:da:e7:18:d2:eb:51:99:ea:
63:4f:9e:38:b9:be:c0:38:2a:65:8c:ea:a0:87:45:
a3:d6:d5:5b:3f:ab:9d:c0:ea:60:9d:9d:7d:0a:91:
6c:e0:56:71:55:27:8d:7e:1a:0a:88:8a:f8:68:63:
d3:87:b9:b5:00:db:6b:3c:2c:0a:0a:5e:70:2c:7a:
f6:e9:c3:7e:b4:26:42:cd:63:52:fd:4b:1b:28:05:
e7:47:1e:c0:b4:33:a3:b2:12:c8:c6:1a:01:5c:f5:
86:00:69:69:04:1c:ea:1b:94:d0:89:35:42:d7:e0:
69:c7:17:c2:5a:b3:8a:4d:6a:af:55:b6:6b:9b:49:
ed:36:be:0f:b1:97:35:da:80:13:f8:d5:48:64:f5:
b2:d5:87:be:23:c3:50:66:81:11:85:6d:8e:0d:58:
81:76:84:7b:9f:4e:21:cc:70:9a:2c:a2:19:4c:21:
c1:24:44:46:20:3b:bc:ee:da:37:94:8b:41:09:8c:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:E7:D0:84:B1:33:AD:11:90:B7:1E:5A:BB:82:08:D3:90:D9:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334CA5DE356511EC9CC48F13D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:98:b1:66:f3:f5:d1:2f:50:81:68:45:a6:61:2c:aa:06:5a:
c6:a3:93:29:08:6f:32:30:91:b9:9a:63:de:25:61:de:b4:0a:
45:e7:d7:b7:ab:06:f4:8a:ad:0c:26:37:70:e3:4f:b1:60:e7:
74:85:f8:8b:05:62:b3:69:d4:41:dd:09:8f:3b:95:a6:a1:91:
99:65:e1:17:0d:09:d5:20:20:3b:d1:93:9e:f0:c6:df:70:69:
a0:24:21:2a:d6:25:3a:55:e6:c0:4c:37:9a:b7:9e:56:08:ac:
af:12:9e:e6:a3:97:03:4f:86:e9:e3:eb:17:f3:00:6d:70:df:
22:f3:20:9b:27:98:4a:cf:d6:e8:0c:e5:2a:4a:5d:66:1e:fe:
04:69:62:99:50:a4:80:70:54:88:97:d9:c3:91:89:ed:de:d0:
9a:dd:ca:c9:0b:b4:5c:3c:4e:68:f1:59:e2:0e:47:b9:fe:d5:
94:5f:13:6e:88:76:15:a1:7d:f8:8a:c0:90:4f:16:11:53:a2:
4d:0b:11:be:75:77:6f:ba:b9:57:8f:ae:b9:23:22:42:68:28:
3e:fc:32:51:0c:36:87:1c:1e:47:13:7f:fc:35:a5:a8:08:1f:
98:0c:0c:17:ca:04:15:bf:03:2a:cd:30:e6:d8:0b:6c:ac:14:
ff:04:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org