Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA0FAF0D0F611EC996FA8C9F1222468.roa
File: 3BA0FAF0D0F611EC996FA8C9F1222468.roa (raw, json)
Hash identifier: nt58aBn9hg2JfBFThSM6HYapJyYkTvMTGi6XbbIdisk=
Subject key identifier: 2A:3D:22:57:1D:FC:11:C7:08:4E:BE:63:EC:28:F4:7D:BD:A6:FE:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA0FAF0D0F611EC996FA8C9F1222468.roa
Signing time: Wed 11 May 2022 06:47:32 +0000
ROA not before: Wed 11 May 2022 06:47:28 +0000
ROA not after: Fri 30 Jun 2023 06:47:28 +0000
asID: 149790
IP address blocks: 45.195.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5060 (0x13c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 06:47:28 2022 GMT
Not After : Jun 30 06:47:28 2023 GMT
Subject: CN=627b5c04-605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:4e:99:90:04:bd:d8:32:4a:d8:d7:5d:c3:
32:4f:1d:1e:3b:9a:c6:82:5d:11:5d:34:ce:4b:2d:
95:9c:5a:eb:3e:a4:ad:70:2f:09:be:06:8a:4f:e9:
38:5b:e7:65:91:6e:ab:d9:21:fc:0e:8e:61:64:21:
75:52:8b:73:8e:b7:1f:bd:57:c8:ca:bb:68:a1:08:
d3:ae:22:e1:3f:fe:c3:4a:63:84:cb:fd:77:1f:13:
87:55:13:84:f0:38:e1:f9:ba:9b:f1:27:3d:56:8a:
91:ff:d4:96:c7:5e:22:14:c8:9c:c0:db:ea:ab:a6:
b8:95:d2:6b:cf:c6:d2:04:a7:86:88:d0:57:60:13:
23:c0:c3:6c:24:7e:10:36:d1:8e:15:7d:51:fb:bd:
2b:e7:d3:e1:32:ed:4b:b3:b5:6b:69:13:71:32:9c:
d2:ad:19:46:77:2f:08:30:7a:4e:ff:50:27:73:75:
63:38:e5:6d:db:00:6f:ae:33:12:b9:30:ab:16:0e:
88:70:f9:bc:1a:2b:a9:62:67:e4:f2:44:0d:1a:86:
8f:77:5e:3c:c6:80:15:ec:b3:25:81:91:d3:b1:87:
9d:f7:8a:b9:b3:f2:7f:37:54:4d:1b:5d:30:e4:87:
9d:a8:a4:82:da:a8:0d:ed:d7:87:4a:c9:01:c1:8e:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:22:57:1D:FC:11:C7:08:4E:BE:63:EC:28:F4:7D:BD:A6:FE:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA0FAF0D0F611EC996FA8C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/22
Signature Algorithm: sha256WithRSAEncryption
22:94:5b:93:68:39:cb:6d:ad:c7:46:c4:de:c4:b1:f6:5e:b5:
4c:b1:50:d1:5b:49:5b:5e:07:61:3d:b9:32:3c:12:06:8b:bf:
a1:a6:56:f5:32:9b:4a:9d:24:79:2d:f5:13:e1:e5:2f:d9:59:
63:a9:9d:34:b0:7a:64:23:88:dc:50:0a:f4:0b:2a:b9:b6:f2:
4a:80:9c:d3:55:3f:44:7d:05:f5:f1:44:8f:83:a1:6b:92:83:
bd:72:2d:0d:b6:01:ee:85:12:2a:c4:25:2e:e9:8a:c3:26:b4:
5a:88:ca:0d:41:42:72:07:3a:e1:47:67:2c:37:96:27:c5:d4:
6a:01:25:d0:cd:d5:e4:c8:ec:10:aa:78:e6:7f:af:e6:25:fb:
2a:41:57:4c:b0:36:a8:83:4f:35:59:0f:eb:4f:a9:cf:e8:7e:
b1:64:4b:03:0b:2f:c0:66:4c:e1:4b:98:aa:b0:50:ae:47:49:
63:1c:df:7c:2e:3f:82:22:f2:4b:3e:b8:8f:55:94:2a:86:f4:
88:a9:00:ea:b8:8b:24:02:db:f2:a9:82:c3:88:ce:0e:ec:92:
a6:cf:c1:fc:ca:e6:9d:4a:1d:93:5e:3d:38:50:a1:6c:09:9b:
78:cf:87:73:14:08:be:31:6d:a8:8f:3c:d7:70:c6:27:56:47:
4f:eb:39:29
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICE8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MTEwNjQ3MjhaFw0yMzA2MzAwNjQ3MjhaMBgxFjAU
BgNVBAMMDTYyN2I1YzA0LTYwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG6U6ZkAS92DJK2NddwzJPHR47msaCXRFdNM5LLZWcWus+pK1wLwm+BopP
6Thb52WRbqvZIfwOjmFkIXVSi3OOtx+9V8jKu2ihCNOuIuE//sNKY4TL/XcfE4dV
E4TwOOH5upvxJz1WipH/1JbHXiIUyJzA2+qrpriV0mvPxtIEp4aI0FdgEyPAw2wk
fhA20Y4VfVH7vSvn0+Ey7UuztWtpE3EynNKtGUZ3Lwgwek7/UCdzdWM45W3bAG+u
MxK5MKsWDohw+bwaK6liZ+TyRA0aho93XjzGgBXssyWBkdOxh533irmz8n83VE0b
XTDkh52opILaqA3t14dKyQHBjtR5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKj0i
Vx38EccITr5j7Cj0fb2m/tgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzNCQTBGQUYwRDBGNjExRUM5OTZGQThDOUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItw/QwDQYJKoZIhvcNAQELBQAD
ggEBACKUW5NoOcttrcdGxN7EsfZetUyxUNFbSVteB2E9uTI8EgaLv6GmVvUym0qd
JHkt9RPh5S/ZWWOpnTSwemQjiNxQCvQLKrm28kqAnNNVP0R9BfXxRI+DoWuSg71y
LQ22Ae6FEirEJS7pisMmtFqIyg1BQnIHOuFHZyw3lifF1GoBJdDN1eTI7BCqeOZ/
r+Yl+ypBV0ywNqiDTzVZD+tPqc/ofrFkSwMLL8BmTOFLmKqwUK5HSWMc33wuP4Ii
8ks+uI9VlCqG9IipAOq4iyQC2/KpgsOIzg7skqbPwfzK5p1KHZNePThQoWwJm3jP
h3MUCL4xbaiPPNdwxidWR0/rOSk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org