Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45036BDC57CF11ECAD9C8CB35A40D577.roa
File: 45036BDC57CF11ECAD9C8CB35A40D577.roa (raw, json)
Hash identifier: KdSCHub0rBzftAkbua+Z6E2/lKF5ErhaLY091tjaKhw=
Subject key identifier: B0:67:4E:11:6F:E7:32:B9:6A:19:82:0E:10:1E:F2:5B:A5:3B:F3:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1070
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45036BDC57CF11ECAD9C8CB35A40D577.roa
Signing time: Wed 08 Dec 2021 02:33:47 +0000
ROA not before: Wed 08 Dec 2021 02:33:44 +0000
ROA not after: Fri 30 Dec 2022 02:33:44 +0000
asID: 9009
IP address blocks: 45.192.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4208 (0x1070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:33:44 2021 GMT
Not After : Dec 30 02:33:44 2022 GMT
Subject: CN=61b0198b-1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:29:56:db:f0:52:7b:78:76:b6:71:e8:c7:
a9:96:6f:c6:58:61:1f:c4:d1:be:16:0e:d1:e5:82:
62:31:40:30:5f:a8:2e:7d:b2:0c:53:29:46:cc:d3:
9c:92:ce:4e:75:0d:b7:6d:f6:0d:ce:b1:88:a1:65:
de:a7:47:86:43:df:40:33:e1:da:4a:fd:fe:63:dc:
1f:de:00:6e:93:bd:4e:d4:f6:49:e0:d9:b2:21:53:
87:0e:97:5a:71:25:40:92:9d:06:0d:a2:aa:97:e2:
69:4b:01:5d:2e:eb:8b:db:2e:3e:ed:8a:53:63:7d:
bd:50:49:98:8d:40:5a:a6:50:8f:56:1b:e2:8f:f6:
8a:95:18:1c:0d:35:dc:ce:65:2b:6d:87:3a:a1:39:
01:b6:b8:02:75:bd:6f:64:ff:d3:fc:62:0e:45:51:
d6:7c:a3:ad:e8:af:34:4d:69:16:dd:c6:d8:57:f2:
1e:d5:01:20:27:be:3e:a6:66:8e:98:ac:66:c1:40:
d5:8c:b8:44:67:bb:ae:0d:00:18:95:f1:62:46:66:
11:e8:79:f0:c0:ec:7f:7c:c9:fe:b8:4d:27:35:84:
ed:85:17:cc:6e:aa:50:c0:4e:d2:1b:10:2d:fc:30:
7c:d2:6d:b1:0b:fd:79:01:bf:6f:60:68:f8:8b:ab:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:4E:11:6F:E7:32:B9:6A:19:82:0E:10:1E:F2:5B:A5:3B:F3:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45036BDC57CF11ECAD9C8CB35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b5:c8:63:f9:60:f1:b7:1a:7f:e4:1e:4d:1f:e1:54:bc:17:
45:05:cb:54:22:2d:b2:52:48:e5:22:0a:10:7a:58:e3:1a:d1:
eb:9d:81:66:be:83:80:53:e4:cb:27:83:b4:9b:88:ba:62:43:
0f:7a:f9:9c:e3:52:23:9d:84:a7:93:62:d1:e4:dc:74:02:09:
95:79:f7:b5:72:e9:a6:c5:bd:7b:fe:e2:fc:80:11:03:b6:1a:
4c:4d:78:2b:a5:d7:a2:2b:1a:cd:75:b1:cd:83:63:26:8a:07:
cf:2a:38:a3:a7:15:c5:60:55:e7:22:49:dd:84:4b:55:dd:2f:
9b:7b:14:2d:dc:a0:b3:99:50:49:6c:d9:da:50:4b:46:ba:35:
ab:5c:99:5b:24:9c:fe:b5:12:e2:a5:f3:9b:1b:e6:ac:f7:7f:
dd:3a:2f:08:4a:ec:26:35:99:62:c8:bc:eb:dc:c0:b3:db:cf:
e6:f0:ff:57:13:b3:ff:fd:a2:d3:84:17:87:b3:ce:c2:08:07:
1b:14:bf:71:0b:d6:3c:bf:78:e9:77:15:19:56:04:62:28:ea:
92:3d:1c:82:30:f7:a2:e6:67:85:d8:2c:90:ea:d5:14:13:cb:
ff:10:ee:97:9b:48:dd:ef:c5:49:57:06:b4:19:60:3c:8d:b4:
36:18:34:69
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEHAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjMzNDRaFw0yMjEyMzAwMjMzNDRaMBgxFjAU
BgNVBAMMDTYxYjAxOThiLTE0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCupilW2/BSe3h2tnHox6mWb8ZYYR/E0b4WDtHlgmIxQDBfqC59sgxTKUbM
05ySzk51Dbdt9g3OsYihZd6nR4ZD30Az4dpK/f5j3B/eAG6TvU7U9kng2bIhU4cO
l1pxJUCSnQYNoqqX4mlLAV0u64vbLj7tilNjfb1QSZiNQFqmUI9WG+KP9oqVGBwN
NdzOZStthzqhOQG2uAJ1vW9k/9P8Yg5FUdZ8o63orzRNaRbdxthX8h7VASAnvj6m
Zo6YrGbBQNWMuERnu64NABiV8WJGZhHoefDA7H98yf64TSc1hO2FF8xuqlDATtIb
EC38MHzSbbEL/XkBv29gaPiLqzGJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUsGdO
EW/nMrlqGYIOEB7yW6U7818wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQ1MDM2QkRDNTdDRjExRUNBRDlDOENCMzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwJ0wDQYJKoZIhvcNAQELBQAD
ggEBAKe1yGP5YPG3Gn/kHk0f4VS8F0UFy1QiLbJSSOUiChB6WOMa0eudgWa+g4BT
5Msng7SbiLpiQw96+ZzjUiOdhKeTYtHk3HQCCZV597Vy6abFvXv+4vyAEQO2GkxN
eCul16IrGs11sc2DYyaKB88qOKOnFcVgVeciSd2ES1XdL5t7FC3coLOZUEls2dpQ
S0a6NatcmVsknP61EuKl85sb5qz3f906LwhK7CY1mWLIvOvcwLPbz+bw/1cTs//9
otOEF4ezzsIIBxsUv3EL1jy/eOl3FRlWBGIo6pI9HIIw96LmZ4XYLJDq1RQTy/8Q
7pebSN3vxUlXBrQZYDyNtDYYNGk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org