Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DEBF340E90D11EB8E5CDF69D8A014CE.roa
File: 3DEBF340E90D11EB8E5CDF69D8A014CE.roa (raw, json)
Hash identifier: Oj2GmwG/ABTSi+6VgiMjqSSD+mULfwPKTjn2l1guLDo=
Subject key identifier: 65:50:17:0D:B5:AC:C8:B6:B5:1F:AE:CB:C9:D8:0F:36:53:53:F8:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0782
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DEBF340E90D11EB8E5CDF69D8A014CE.roa
Signing time: Tue 20 Jul 2021 03:47:52 +0000
ROA not before: Tue 20 Jul 2021 03:47:40 +0000
ROA not after: Thu 15 Sep 2022 03:47:40 +0000
asID: 1239
IP address blocks: 45.194.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:47:40 2021 GMT
Not After : Sep 15 03:47:40 2022 GMT
Subject: CN=60f64768-e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:72:17:74:c0:bc:c7:da:c9:5c:bf:db:dc:
10:4d:c3:1c:de:bf:27:9f:46:fd:db:38:3e:eb:f7:
32:2e:39:7c:f6:d1:9a:a4:76:92:28:a5:3f:25:e0:
6a:b0:7e:86:f9:0f:b5:8b:18:2f:b5:83:11:aa:44:
b7:c2:92:10:90:91:e6:5a:ad:14:82:e1:df:2f:0b:
05:44:b4:4e:69:dc:00:05:fb:f7:18:47:13:8d:9f:
98:10:78:c6:2c:3d:17:a3:a4:83:eb:7d:4a:df:3a:
f6:b1:b4:9a:c9:14:f9:c7:0b:ff:19:4d:1b:0e:74:
49:a6:3a:eb:33:4d:df:3c:e3:86:f2:bd:41:11:3e:
7f:51:6f:25:f4:46:af:45:4b:23:c3:4f:8e:f7:20:
ce:42:d0:6d:ec:97:6e:16:74:83:60:00:0f:88:36:
1a:0d:18:c6:51:99:8a:c0:64:fd:56:a6:aa:e6:d6:
74:ce:28:77:01:b1:69:92:45:e9:ca:bc:ec:86:1e:
fa:00:12:ef:68:0a:3f:8e:44:d6:7b:66:a2:81:e9:
20:e5:6a:46:28:d9:28:5e:38:21:b2:22:55:19:f8:
64:0e:49:75:2c:ef:de:04:2e:7e:49:09:2b:74:9b:
38:2b:2d:af:a0:56:fa:a1:14:17:80:da:bd:84:1a:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:17:0D:B5:AC:C8:B6:B5:1F:AE:CB:C9:D8:0F:36:53:53:F8:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DEBF340E90D11EB8E5CDF69D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:24:f7:83:2a:61:2f:bb:03:af:3e:29:eb:21:6d:59:65:16:
cd:52:91:51:d2:67:ef:56:27:f3:0d:c4:0d:bf:55:b7:8f:f7:
30:34:60:67:f6:c0:52:ca:f9:a8:b6:19:6b:55:1e:72:b9:29:
06:15:3c:a0:4b:70:de:cd:c6:14:f2:37:df:89:40:93:1c:c8:
e6:0d:59:9f:c5:5b:72:6b:d0:80:08:f3:55:bd:6f:ae:f0:9f:
e5:38:b8:f6:ea:8d:bb:03:e6:db:72:86:d1:66:cf:07:d0:80:
23:08:de:f3:40:cd:71:1d:cf:71:34:42:92:8c:43:ec:2f:0d:
6a:39:29:3c:d0:31:51:3a:57:38:ca:f9:01:df:b1:ff:f8:c4:
40:45:d1:80:8d:6b:0e:83:ad:ee:31:f7:ce:16:d1:24:3f:f8:
5b:59:f8:d9:d0:19:6e:a3:3d:4d:a1:3f:0e:6b:23:c1:66:e1:
59:ff:19:00:92:e4:92:c1:81:59:bd:0c:eb:de:52:e3:d6:b1:
44:2e:f9:50:66:85:86:b9:ee:2a:2b:f9:bb:65:3b:a3:c6:c6:
83:fe:fe:ca:16:b7:ee:e7:d8:d7:41:a4:aa:88:e4:fc:7d:7a:
51:98:f1:cd:49:54:dc:52:b0:d4:35:be:66:2a:50:76:ea:86:
50:b7:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org