Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6F7FF8738411ECA19F40B75A40D577.roa
File: 3C6F7FF8738411ECA19F40B75A40D577.roa (raw, json)
Hash identifier: XVAYw/IXwvlcB5aNVuizpPeDUYu+omGkzvPbMUSlKJI=
Subject key identifier: AE:DE:51:00:04:16:89:27:9C:0D:3C:99:7F:E2:12:95:DF:D9:32:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1163
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6F7FF8738411ECA19F40B75A40D577.roa
Signing time: Wed 12 Jan 2022 08:47:13 +0000
ROA not before: Wed 12 Jan 2022 08:47:10 +0000
ROA not after: Fri 30 Dec 2022 08:47:10 +0000
asID: 328608
IP address blocks: 45.199.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4451 (0x1163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 12 08:47:10 2022 GMT
Not After : Dec 30 08:47:10 2022 GMT
Subject: CN=61de9591-f238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:ab:2e:a0:e1:03:ed:95:ab:16:a8:83:90:
bb:39:8f:2a:27:d1:29:c5:0f:70:b5:e5:1f:6f:67:
a9:3c:f7:c1:6a:6d:57:7e:38:45:d7:1a:48:af:0a:
e1:44:f0:94:d9:06:31:e9:d2:14:eb:24:5e:b8:65:
04:f2:ef:a7:58:5b:7f:7c:51:bd:e2:45:71:ae:98:
55:bc:42:dc:6e:c7:75:7b:20:5f:0d:24:2e:d7:3b:
8e:c3:ac:52:f6:58:9f:f7:28:d4:c1:29:1a:1e:13:
6d:09:63:e8:32:48:84:90:41:3f:79:55:d9:3c:54:
b4:ad:84:4c:c5:79:db:56:1b:05:9b:0d:12:4e:0a:
0b:15:66:bc:57:e8:4b:c0:44:48:1c:b8:7f:04:f1:
8d:6c:d0:1c:20:0c:bc:37:c9:8c:10:43:56:9c:f6:
14:a9:e4:56:49:57:df:99:36:a4:53:59:f8:15:3a:
01:e3:e1:2e:1c:e5:57:6d:31:88:61:bc:c4:25:24:
18:d6:e2:5a:3a:50:a8:db:79:1f:7e:37:c9:64:01:
cd:db:e4:75:ab:4e:24:fc:11:0b:e3:f0:36:55:d9:
e0:98:8c:16:a9:09:16:4c:15:c3:19:61:93:46:53:
43:fb:62:38:50:00:c9:67:64:f7:3c:85:c9:bd:b5:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:51:00:04:16:89:27:9C:0D:3C:99:7F:E2:12:95:DF:D9:32:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6F7FF8738411ECA19F40B75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:db:cb:23:d2:12:41:b1:ac:17:90:4c:3d:1b:02:53:6f:31:
0f:07:c1:bb:43:a6:f7:e7:ce:68:cc:b8:48:c8:2b:17:e5:78:
0c:71:55:2f:70:51:4c:0e:2e:9d:73:df:19:54:fd:e6:48:fc:
6c:f7:ff:d8:ec:f5:da:78:67:20:c7:62:35:8e:19:f0:8a:b1:
0c:56:45:5b:9e:8a:e5:f6:68:6c:4f:c0:9e:be:a7:66:7c:85:
25:95:16:b5:85:08:3f:e0:66:48:10:a8:7c:92:74:59:c9:cb:
95:87:4c:a4:24:46:ac:6d:a3:74:70:96:d5:7a:da:b8:e9:92:
25:34:55:f6:87:93:89:49:0f:8b:61:ba:06:e4:82:4b:88:9a:
5a:64:cb:83:dc:f0:81:40:fc:31:27:d5:cd:a0:6e:ba:53:de:
6e:b2:d4:ac:32:0f:bb:43:b2:7e:34:83:cf:3d:71:b2:2d:83:
74:87:2c:03:06:11:2b:f2:1d:f4:d5:bb:71:ef:fa:82:3a:ec:
78:dd:37:34:29:8e:ba:be:50:83:7b:fc:1a:6f:be:7f:4c:dd:
fa:5a:14:79:d1:2e:c7:64:71:84:eb:fc:a6:d6:16:11:8f:80:
79:fc:8e:32:b9:c0:b5:7f:c2:23:e8:3f:f1:62:01:f1:16:60:
1e:fe:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org