Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486F022480AF11EB9911A315F8AEA228.roa
File: 486F022480AF11EB9911A315F8AEA228.roa (raw, json)
Hash identifier: jTHaeO55Xelk+JE0o1xcdepujipAH0mIhDf/FQ1y6g4=
Subject key identifier: B8:98:DC:D0:E0:3B:A8:0E:D3:A9:79:FC:B4:5A:8F:9D:F7:FE:35:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486F022480AF11EB9911A315F8AEA228.roa
Signing time: Tue 09 Mar 2021 08:13:09 +0000
ROA not before: Tue 09 Mar 2021 08:13:03 +0000
ROA not after: Thu 17 Mar 2022 08:13:03 +0000
asID: 141190
IP address blocks: 45.200.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 08:13:03 2021 GMT
Not After : Mar 17 08:13:03 2022 GMT
Subject: CN=60472e15-cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:76:b0:6e:d3:5a:7e:e6:43:a4:07:df:0b:
62:66:ff:95:db:5b:1c:cc:a8:47:c3:dd:61:d7:3d:
d6:f6:d6:f2:2e:90:48:5c:26:f2:42:ff:d3:48:50:
2a:a4:68:f2:d5:49:98:72:4e:58:b7:ef:f4:5d:d3:
68:8c:6b:31:36:b5:f1:9d:e3:c5:bf:f8:44:60:4a:
b9:45:cb:85:62:7a:dd:39:c7:f2:db:13:9a:4e:90:
a7:1a:9b:2d:af:8a:f6:61:44:50:e2:ef:2c:5f:0c:
d3:c4:72:c2:c6:47:48:f8:a4:24:3b:63:fa:04:f6:
71:3a:65:3d:03:86:8e:04:6a:7f:dd:94:6d:58:8e:
b2:4d:46:00:08:0e:43:a9:a3:fd:a9:05:cd:fa:d7:
09:04:d0:93:2e:fa:c1:b1:12:a6:28:03:04:7c:21:
be:08:ee:84:d2:ed:a1:24:7e:4b:6b:1a:14:ab:19:
e4:b7:ab:c3:4a:e5:08:3a:1b:43:3f:68:6d:96:93:
54:9c:97:14:35:80:40:7f:4a:4d:0f:b3:ca:db:f9:
e3:87:d7:eb:cc:fd:eb:aa:52:c4:82:8d:d9:10:3e:
b6:35:b3:23:ee:96:2a:65:08:0b:9b:3e:1f:24:b5:
e0:36:44:5a:ce:bc:8d:b7:0a:76:7f:74:4f:9f:45:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:DC:D0:E0:3B:A8:0E:D3:A9:79:FC:B4:5A:8F:9D:F7:FE:35:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486F022480AF11EB9911A315F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.112.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:ea:67:c4:97:cf:8f:1f:20:25:13:fc:46:b1:bc:2b:7f:61:
60:2a:e0:bf:4c:65:6f:55:2c:ec:c7:b8:5f:f0:62:8d:c6:63:
27:f2:3b:86:d2:a6:80:f5:7c:37:89:48:fa:58:3d:2a:bc:9d:
26:70:0d:9a:ed:b2:4d:a0:dd:4c:e8:23:45:e4:b8:a2:2d:2b:
8f:ad:2b:2f:af:f3:81:31:ae:5e:01:03:5a:ca:4a:5a:20:98:
3e:d9:6f:99:d1:40:29:26:72:47:68:0c:8b:de:ee:ab:4f:d0:
1f:68:15:4d:a3:23:07:70:bb:67:50:41:ba:46:cb:52:97:e3:
5c:2e:84:e4:53:e6:d6:3a:c3:30:cc:fe:48:1f:05:8b:10:fe:
04:b7:3b:7b:20:e7:10:6c:17:5f:2a:bc:90:fa:57:05:1c:76:
71:ad:89:37:0e:0b:5b:67:2a:5d:62:85:4b:1c:b3:e5:3a:7b:
e7:a8:dc:5f:4a:b7:24:ce:4c:b6:12:ea:c5:e5:e0:88:4e:46:
b7:dd:6d:b6:0e:b3:1f:16:88:dc:61:61:c1:34:6c:92:04:73:
15:e6:68:0b:ac:79:20:ae:e3:cc:4e:c7:6b:75:43:50:2e:45:
cb:f3:ca:94:eb:9c:e9:eb:ed:58:0f:54:d9:d2:56:5d:c4:13:
8b:cf:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org