Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D24BB0E90D11EB9BCF026AD8A014CE.roa
File: 48D24BB0E90D11EB9BCF026AD8A014CE.roa (raw, json)
Hash identifier: SVNpOJYK+ssSIxoLJkjxTHQx4VI2TQ3WOasL3/KMtL4=
Subject key identifier: A9:C9:48:02:D5:63:B3:90:CC:11:9C:86:01:0C:C8:88:68:96:F1:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D24BB0E90D11EB9BCF026AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:48:10 +0000
ROA not before: Tue 20 Jul 2021 03:48:07 +0000
ROA not after: Thu 15 Sep 2022 03:48:07 +0000
asID: 1239
IP address blocks: 45.197.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:48:07 2021 GMT
Not After : Sep 15 03:48:07 2022 GMT
Subject: CN=60f6477a-6423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:93:51:62:7c:24:d8:59:e3:b6:ac:11:b8:
62:3e:80:82:fb:22:7c:27:bd:33:89:29:7d:b1:a7:
43:ab:0e:55:0e:08:ae:06:58:57:ca:74:a4:e6:72:
65:92:7b:d3:f8:f4:15:db:e9:d0:40:c7:9d:72:48:
ca:cf:31:a6:1c:d2:90:3f:92:ab:96:00:cc:68:9e:
a6:47:29:b3:1e:8e:b2:f9:3d:0a:fe:13:f1:7c:e4:
bd:fb:00:09:09:41:cd:f2:30:cd:5e:46:21:8a:06:
17:8a:9e:ac:16:e5:db:8d:7b:95:bb:ca:53:de:b0:
b1:45:7a:06:71:8d:35:06:78:fb:a3:5b:0e:2c:89:
63:fd:c2:8d:73:2b:fc:ff:59:3e:78:cb:0a:5a:26:
b1:8e:86:f7:73:d6:5d:70:6c:c3:bf:fd:d7:16:11:
38:86:e9:5d:a1:2e:23:7c:73:2a:e5:3e:1a:2f:6c:
78:d7:85:27:a9:40:06:5d:d5:19:48:2d:bc:fc:c1:
c6:34:ae:9d:a7:22:9c:84:f2:2c:1f:f9:11:0a:c1:
96:d0:7d:0c:7f:dc:61:fd:ba:b5:57:89:a0:09:be:
28:e4:fa:a7:d4:20:d2:87:21:b3:a7:f4:80:a1:cd:
a9:b7:81:eb:e8:4a:c9:89:d2:b6:6e:4b:c0:ab:86:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:48:02:D5:63:B3:90:CC:11:9C:86:01:0C:C8:88:68:96:F1:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48D24BB0E90D11EB9BCF026AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:03:5f:cc:4e:3a:17:43:59:80:80:5e:55:0b:5c:7c:f5:a1:
8f:2b:fb:d0:93:5f:ec:06:b8:a8:3d:bc:ae:0d:9a:23:ae:55:
67:29:5e:dd:de:cc:de:f4:61:26:b3:0d:25:0c:16:1e:eb:3f:
fb:ec:ae:0c:93:d4:36:80:62:93:21:e3:90:ad:52:50:ee:23:
97:7e:bf:21:c6:a0:ea:43:c1:fb:20:ac:90:f1:63:79:db:81:
2d:e5:43:02:5a:c0:27:54:49:09:89:1a:42:c2:eb:30:c1:1d:
63:47:d6:a0:89:00:19:21:69:d6:eb:97:c6:d3:ff:b9:f7:19:
ae:e2:0e:b7:c8:0a:cf:88:d2:af:42:40:2a:61:0c:4d:d1:ae:
2c:68:7e:7f:06:19:41:a3:f4:4c:6d:87:07:02:ed:09:27:37:
f9:86:ce:ca:4a:cb:ad:9a:06:11:27:ca:b5:21:7e:86:ae:67:
6e:61:b4:61:3b:06:bf:a8:0c:a8:c0:4c:43:67:29:58:21:5e:
dc:6a:2d:c6:d7:b4:84:37:28:bd:ec:f4:bf:69:b8:cc:f4:a2:
cf:75:a7:19:61:66:36:ce:bb:a9:38:56:75:84:46:22:4a:8a:
12:6e:3f:73:06:3b:26:d2:94:5e:a0:af:df:64:09:c6:65:87:
7b:57:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org