Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/465EAE1234DB11EDA12F8DBBF1222468.roa
File: 465EAE1234DB11EDA12F8DBBF1222468.roa (raw, json)
Hash identifier: aBcegXHIiY6PuU6+y1qNFAmKohW3xGBLJMTPsliKHXE=
Subject key identifier: B8:23:77:D0:55:67:F2:02:37:3F:B0:94:9E:94:C6:95:F1:84:12:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/465EAE1234DB11EDA12F8DBBF1222468.roa
Signing time: Thu 15 Sep 2022 09:46:30 +0000
ROA not before: Thu 15 Sep 2022 09:46:26 +0000
ROA not after: Wed 31 May 2023 09:46:26 +0000
asID: 1239
IP address blocks: 45.197.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6097 (0x17d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:46:26 2022 GMT
Not After : May 31 09:46:26 2023 GMT
Subject: CN=6322f476-60eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:ec:50:ed:bc:74:f6:ff:a5:89:d5:31:82:
8e:cb:9f:f6:43:82:74:67:01:23:54:cd:32:8a:a1:
41:f7:e8:f5:50:a6:aa:72:5e:f0:3f:7b:e9:43:44:
f3:66:46:17:96:03:08:63:ca:15:2e:99:43:0e:98:
78:73:71:71:2c:cc:af:c4:74:db:1b:e8:c6:f2:a8:
cc:99:64:be:72:02:a8:f4:00:de:33:89:85:f5:7c:
11:84:6b:45:34:8b:38:a2:f7:e2:87:6f:a8:01:81:
0a:9a:53:ad:00:61:0d:08:5c:2d:21:51:93:a4:92:
2d:07:94:b5:eb:2b:99:a9:43:c3:f6:45:7c:83:fb:
1d:47:6c:e8:5c:61:5c:2a:35:86:d2:08:7d:7d:d0:
0b:ce:ca:6e:e7:a8:28:02:12:ee:ff:d5:88:a1:1f:
f0:46:6b:3d:f3:8b:fd:18:ae:81:b3:d9:0d:a1:05:
7c:d0:78:ce:92:49:d5:87:e6:28:0b:36:c5:9c:57:
c2:67:be:b4:52:fd:4f:96:a6:37:6e:c2:b5:b0:b4:
89:b1:0f:1a:aa:bd:62:89:39:79:f6:1f:18:d7:ed:
9e:2b:e9:df:d2:76:3d:83:34:9f:35:d0:71:4b:3a:
2c:1b:99:ae:3d:f9:fa:94:3a:40:3b:d0:5a:54:f5:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:77:D0:55:67:F2:02:37:3F:B0:94:9E:94:C6:95:F1:84:12:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/465EAE1234DB11EDA12F8DBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:b2:de:53:d1:c0:25:f3:87:f4:0a:61:ad:ef:13:cf:e7:6c:
ae:9d:93:39:60:47:89:72:dc:87:86:60:e5:fd:53:98:0a:d6:
85:95:54:e0:e3:9a:c3:6c:9d:79:db:83:3c:2b:fd:ca:ad:bb:
71:d9:d4:4c:18:20:51:0b:3d:37:6e:38:b0:ff:d9:37:5a:a3:
dc:e4:2d:e3:4e:76:71:65:ec:9e:8c:99:7a:74:24:80:a4:19:
28:0e:24:86:4e:26:7e:de:53:f2:a0:4a:9f:94:2d:5c:ed:1a:
f4:f6:87:0b:e5:43:42:57:85:79:6f:81:ee:d0:1d:3f:41:aa:
c6:32:70:03:7b:88:05:02:5f:7a:f1:e9:3f:84:c3:8e:a0:49:
74:21:d3:63:66:07:5f:10:71:c1:cf:e6:c9:42:60:a5:1f:9d:
57:97:43:da:dd:04:a9:42:7a:b1:34:f9:c7:95:0a:a6:c4:2b:
c4:36:16:11:6b:0c:40:89:2d:51:31:ee:44:00:a2:8e:44:e2:
8a:91:08:64:b1:9a:de:03:4a:a3:6f:d8:eb:3a:b8:08:9c:6c:
14:e2:f8:bf:27:d9:cf:1d:62:0a:7d:00:28:cb:93:33:d3:4f:
23:6e:74:29:d3:68:a6:cb:38:32:35:44:b4:a5:8d:3a:51:11:
b2:bc:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org