Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D9763C03EE11ECB2F36F5AD8A014CE.roa
File: 39D9763C03EE11ECB2F36F5AD8A014CE.roa (raw, json)
Hash identifier: vL0vycKmJux/BGxc4L/XwCgS1x9BHglreQXfcH1hQ+w=
Subject key identifier: A5:C1:FA:51:39:1F:FC:DB:E9:83:EB:DE:8F:37:B4:7B:7B:D8:BA:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D9763C03EE11ECB2F36F5AD8A014CE.roa
Signing time: Mon 23 Aug 2021 08:44:43 +0000
ROA not before: Mon 23 Aug 2021 08:44:38 +0000
ROA not after: Sun 23 Oct 2022 08:44:38 +0000
asID: 133201
IP address blocks: 45.192.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 08:44:38 2021 GMT
Not After : Oct 23 08:44:38 2022 GMT
Subject: CN=61235ffb-0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:67:19:f9:db:8c:03:72:28:4c:03:f7:04:
08:1b:c2:a2:3b:ef:3e:a2:08:1c:d2:17:e4:f0:51:
82:06:1c:3e:b2:ac:0a:49:4d:54:a8:98:7d:aa:25:
6c:45:7f:61:a8:48:2b:0b:a3:f8:72:75:33:5c:b4:
a8:af:c5:5c:73:83:7d:2e:63:61:e2:25:fb:a9:2a:
d9:37:72:df:69:53:fb:48:87:bd:07:c1:42:44:2c:
bd:71:71:69:ab:55:2d:a3:e9:63:0d:67:70:81:4e:
2b:af:05:c6:70:73:74:20:c8:a9:9d:d8:b6:cf:db:
e1:c9:a0:f8:a4:7b:af:76:24:11:60:9a:6c:77:33:
0c:3b:db:7a:2b:8e:0c:02:3e:99:67:1e:37:8d:4f:
32:93:bb:05:07:6e:89:06:52:82:3f:de:5c:ef:a0:
3c:03:88:4f:80:25:86:eb:80:c0:f4:1a:29:1f:ed:
ba:aa:60:dc:9d:5b:cb:24:57:51:d6:52:0b:30:3d:
38:94:36:5f:94:2c:d3:22:66:5a:e8:d8:34:39:93:
3d:b2:ec:19:4a:7f:cc:ee:82:25:0f:6f:10:11:78:
73:d8:87:87:0b:f9:60:96:ac:cf:3f:63:01:3e:c0:
d7:d5:17:a5:83:d6:34:9d:44:0a:ea:ac:aa:e4:c0:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:FA:51:39:1F:FC:DB:E9:83:EB:DE:8F:37:B4:7B:7B:D8:BA:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D9763C03EE11ECB2F36F5AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/18
Signature Algorithm: sha256WithRSAEncryption
88:14:3b:2e:da:e9:ec:46:ac:f1:02:c4:94:28:db:fd:5d:14:
04:94:53:87:f5:7b:c7:83:7c:e2:68:0c:63:ac:e9:b1:3e:d6:
de:ed:fa:99:77:26:34:73:04:54:0b:e4:a5:26:e3:8d:12:08:
bb:ac:5f:15:33:6f:46:b5:06:90:b2:82:f4:59:80:eb:92:9f:
ae:6d:27:c3:d5:a7:79:55:c3:8e:47:e8:fe:3a:8f:87:ee:55:
5b:5a:b6:50:45:b4:c0:4d:84:47:46:ef:02:06:74:53:bf:f5:
e3:b8:5b:cb:1a:fe:1c:a4:33:e7:ce:f3:4c:c9:84:f7:4b:8a:
be:d0:6e:ed:6c:ed:fe:62:be:e2:8a:d4:87:1f:da:ef:57:67:
c6:fa:d7:ab:0c:20:eb:5b:71:a3:33:76:8c:9c:cd:12:eb:62:
b5:06:a6:fc:4f:fc:81:89:76:81:60:b3:81:95:b3:31:93:17:
5a:12:94:45:8b:1b:fa:43:db:d7:37:30:11:e7:0c:9e:da:64:
ca:f4:3e:f3:a9:ab:63:a9:d3:17:c3:a9:8a:b1:82:73:95:c1:
da:9c:f4:2a:d7:1e:e4:96:92:6f:35:76:92:35:38:ba:45:a5:
ba:2c:ac:68:97:5f:52:92:59:6c:4d:a1:19:5d:44:7a:03:d5:
26:63:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org