Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB444AEF9D811EBB7E39004D8A014CE.roa
File: 3EB444AEF9D811EBB7E39004D8A014CE.roa (raw, json)
Hash identifier: UajI0iysCCtwInlnXc5LWNLoxWtr36epa3iyIjUIP+o=
Subject key identifier: A9:05:6A:84:58:9C:CF:D9:D3:B1:3B:69:EB:63:6F:DC:0D:FC:F5:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0869
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB444AEF9D811EBB7E39004D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:41:52 +0000
ROA not before: Tue 10 Aug 2021 12:41:43 +0000
ROA not after: Mon 10 Oct 2022 12:41:43 +0000
asID: 9009
IP address blocks: 45.192.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:41:43 2021 GMT
Not After : Oct 10 12:41:43 2022 GMT
Subject: CN=61127410-e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:45:a5:1e:a8:18:e6:f6:77:e0:29:2d:76:
1a:e3:48:ee:ff:55:c4:5d:bb:0b:c7:12:2e:b6:f1:
60:26:d3:9f:bd:0d:8a:5d:88:30:07:7a:c4:1f:c6:
b3:2a:ee:21:b6:21:2f:a9:3a:f9:0c:ab:dd:d9:46:
48:cb:76:ef:a3:6b:32:61:72:ba:e1:d8:c5:2d:5d:
f7:11:ee:3d:10:01:03:53:44:42:48:01:01:5f:23:
cd:70:51:54:d5:43:08:8d:40:44:6e:0e:fa:43:f3:
ff:05:10:cf:d1:7b:dc:3b:e1:34:00:e4:6b:67:29:
9c:cf:a4:d0:ab:41:7f:a0:4a:50:77:da:b0:9e:4a:
99:74:4c:93:59:39:99:1d:32:46:b5:ae:08:12:6b:
5b:08:2a:bc:97:be:05:af:25:bd:9c:74:b0:f9:57:
95:63:f5:9f:fd:6c:92:83:de:b7:eb:aa:70:d0:b7:
fd:fc:6c:f5:66:f1:97:9d:32:15:66:0b:99:56:f1:
e1:07:a8:7e:83:1e:56:d6:18:d5:82:e0:3a:59:03:
d8:5f:39:dc:d0:41:40:8a:50:78:0c:c6:b5:e7:b2:
fc:fe:45:c0:ab:1b:2e:3e:5e:97:61:4a:06:6e:5c:
3c:d2:10:05:b3:46:ad:b3:24:51:e3:21:88:94:73:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:6A:84:58:9C:CF:D9:D3:B1:3B:69:EB:63:6F:DC:0D:FC:F5:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB444AEF9D811EBB7E39004D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
57:cc:ed:92:6f:14:03:eb:51:ab:50:d5:91:38:7b:6f:2d:32:
e6:d7:af:d6:8c:cf:ed:d3:9c:e5:31:e6:01:72:a4:a3:c7:4b:
fd:59:af:62:97:f6:7a:d9:23:c5:2f:34:0b:c8:76:72:8e:e1:
65:79:a1:24:56:b5:17:6e:c6:5c:8b:25:34:3e:19:eb:03:9c:
af:a5:d8:15:9f:50:b1:9e:c9:1e:82:09:8e:70:f0:53:ca:05:
a9:85:11:28:59:a5:ab:a0:5e:a0:b1:97:59:1f:81:8d:cc:79:
47:42:21:06:6e:c3:35:a1:18:34:6c:d9:83:93:cb:c8:82:f4:
48:4d:07:78:c4:d9:44:d3:9b:88:30:95:dc:32:43:f5:be:57:
7d:1c:53:cf:68:5e:b4:95:9f:c6:48:4c:b5:eb:3f:3a:65:65:
e0:39:e8:d8:8d:7f:ab:7c:04:ea:82:ca:ee:14:b7:43:b5:f0:
ff:71:91:b5:d5:11:74:b2:d8:53:de:d3:06:db:de:16:6a:3f:
2d:2a:dc:ea:2e:19:a8:da:05:65:40:eb:a2:27:97:45:72:e3:
7f:0a:29:f3:ee:a8:c4:fb:b4:1d:54:17:c0:11:f9:a0:6c:5a:
62:cb:aa:f2:85:91:f5:64:09:56:f7:14:f1:74:e2:a1:65:a8:
8b:6f:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org