Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8349B484FA11EC88BDE5E35A40D577.roa
File: 3E8349B484FA11EC88BDE5E35A40D577.roa (raw, json)
Hash identifier: rnGcN9e/ZW1KMPpp4nU9nQC5huq6gTuO1ZML4c1K1b8=
Subject key identifier: 6D:FA:64:32:08:96:FA:1B:67:7C:3C:E9:D6:3F:E1:47:D8:8E:80:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 11C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8349B484FA11EC88BDE5E35A40D577.roa
Signing time: Thu 03 Feb 2022 14:04:47 +0000
ROA not before: Thu 03 Feb 2022 14:04:43 +0000
ROA not after: Mon 28 Mar 2022 14:04:43 +0000
asID: 212238
IP address blocks: 45.199.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4550 (0x11c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 14:04:43 2022 GMT
Not After : Mar 28 14:04:43 2022 GMT
Subject: CN=61fbe0ff-6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:cf:d4:15:79:ce:23:ad:46:45:d6:db:77:
c2:27:fc:7c:41:6d:4b:a4:61:9b:f2:d8:c2:94:c1:
cd:35:bb:b8:80:33:3b:72:64:6c:ac:d8:0b:3b:bf:
56:85:b4:5a:55:44:42:17:87:e4:7a:b4:14:9c:90:
42:c7:a5:d0:7c:6a:09:5a:70:a6:95:ad:d7:ea:af:
c2:7d:53:6a:40:3c:2e:bb:77:de:da:c3:00:e8:d6:
d2:f4:42:8e:18:03:88:99:d6:7e:01:c5:cb:de:31:
85:2f:5c:ea:ba:a7:0a:25:02:3b:d6:4a:23:8f:a3:
a4:1f:2d:80:5a:e7:f8:a0:aa:93:a3:23:6d:4b:ae:
9d:09:a3:92:3a:75:94:58:9e:e8:5d:d3:04:b8:f0:
d5:9f:90:6f:a6:fd:71:b2:27:3e:fa:6a:40:9f:c2:
2a:e5:59:2e:27:29:ef:48:e1:29:ef:c7:ec:c1:11:
8d:dd:7d:88:11:34:09:23:03:12:2d:80:eb:7e:59:
34:63:05:51:21:59:11:75:67:1e:7d:c5:2b:9c:96:
1a:df:bb:02:28:0d:38:2e:46:61:a9:4f:4e:68:62:
1b:5f:19:2c:7a:55:5b:17:2f:65:bf:2e:7a:b5:e7:
fd:ee:ce:c2:75:88:d8:71:a6:f3:54:8d:25:3c:cb:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:64:32:08:96:FA:1B:67:7C:3C:E9:D6:3F:E1:47:D8:8E:80:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E8349B484FA11EC88BDE5E35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0a:5a:4c:37:2d:1f:49:fc:f3:19:cb:7c:eb:65:53:58:bc:
ed:2e:58:e7:58:89:ef:15:e4:fb:f3:f2:4a:be:7e:ae:a2:51:
39:db:c2:11:5a:1d:09:4b:f3:fe:4e:9c:e5:f4:95:43:d6:9b:
6e:53:c4:e2:8d:34:09:e9:9b:99:13:0d:e5:d9:b7:30:27:be:
0d:e8:ee:77:d6:98:94:18:9d:0d:a0:03:42:c0:a2:4c:ea:da:
ec:c8:4f:6f:40:a0:e5:9d:11:88:b0:34:20:a8:bc:3b:6a:6e:
64:b7:3a:d7:ad:dc:07:87:22:a8:0f:5d:9f:79:95:a2:03:06:
03:5f:a5:01:f9:2a:97:59:53:bd:2c:4b:a9:0b:c9:e3:fa:7e:
1a:c1:7f:a0:96:f2:e5:56:f6:31:3c:62:94:56:88:81:64:b3:
a3:22:87:c8:4a:19:c9:f6:fd:ff:19:b1:20:50:c7:9e:b4:3a:
28:e6:4d:e6:d7:f4:8a:61:9c:11:97:01:91:31:ee:3b:ed:85:
a8:8d:9a:17:c2:09:30:7e:7e:f5:3f:32:97:4b:60:ec:2e:51:
76:4c:4e:22:cb:98:5e:6b:d1:e2:12:0d:e9:d7:9c:b9:59:9e:
ee:e9:4e:8d:08:e7:b4:1d:db:86:50:d1:9a:d5:ae:e1:a5:97:
69:d5:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org