Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF6460C03EE11EC8B40985AD8A014CE.roa
File: 4AF6460C03EE11EC8B40985AD8A014CE.roa (raw, json)
Hash identifier: 2m3M9/1HH5iNRdWVkH8I+VZXb1mtKH1xNvUKYhdYuvQ=
Subject key identifier: 9E:E5:4D:54:76:D2:4F:2D:BC:B0:6E:46:1C:FD:E2:34:29:DD:41:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF6460C03EE11EC8B40985AD8A014CE.roa
Signing time: Mon 23 Aug 2021 08:45:12 +0000
ROA not before: Mon 23 Aug 2021 08:45:09 +0000
ROA not after: Sun 23 Oct 2022 08:45:09 +0000
asID: 135097
IP address blocks: 45.192.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 08:45:09 2021 GMT
Not After : Oct 23 08:45:09 2022 GMT
Subject: CN=61236018-9c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:cf:9f:1d:5e:33:25:e6:f2:17:8a:14:6b:
46:82:83:3c:a9:91:64:bf:35:cb:fc:50:f1:74:bc:
82:05:64:c7:72:cf:96:e6:15:b5:4b:7c:49:45:c5:
7b:10:6c:75:8f:a7:6c:44:da:46:8c:49:3b:cb:1e:
6e:12:d1:17:da:c0:eb:cb:e1:7d:82:f6:04:f5:4c:
64:2b:97:b8:97:b0:f2:da:df:84:09:41:8c:91:ce:
73:a9:40:77:2d:54:29:b9:a6:d5:07:a6:32:ea:d9:
2d:f8:b9:1c:eb:1c:05:69:ac:47:4a:68:de:d0:ca:
73:c7:bb:fb:e6:7a:eb:93:85:44:10:64:b8:07:68:
0a:36:1a:af:46:1c:53:ad:24:d1:a0:11:5f:ff:c3:
76:17:69:e3:d4:31:ae:98:06:b9:28:36:f4:1d:fe:
fb:eb:9b:ef:a5:57:ee:b7:90:aa:f6:71:c0:9e:43:
aa:9e:f1:53:9e:f6:26:38:7e:b2:6c:63:61:73:d7:
cb:27:43:4e:38:d7:f8:52:dc:5e:d3:74:49:7d:31:
e4:58:6f:e6:f6:57:cb:fe:a3:ac:b2:9d:69:d8:2c:
ba:40:8e:5a:0f:56:0e:70:1e:64:e8:98:e0:a5:c4:
a2:b7:0a:8c:78:68:ad:60:62:30:75:44:64:9f:cf:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:4D:54:76:D2:4F:2D:BC:B0:6E:46:1C:FD:E2:34:29:DD:41:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF6460C03EE11EC8B40985AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:81:97:52:c8:fe:90:7c:5c:d0:54:37:e0:0d:25:b7:e6:fd:
c6:9b:68:26:81:a2:3c:b1:22:02:ce:4d:8f:d1:76:20:df:7c:
bd:47:43:ae:02:6a:70:5d:f1:16:b3:0f:49:6d:e4:f8:24:fc:
b8:6b:88:df:88:9f:2b:21:4a:07:8f:4d:b9:e9:8f:ca:00:e5:
4e:55:14:90:12:8c:cb:8b:5e:22:ac:3b:8e:a9:ea:40:97:ee:
20:bb:85:2d:6b:c2:ef:c1:2f:04:90:d9:04:a3:3d:66:5f:ba:
5b:31:48:f2:be:34:17:2a:bc:7e:cd:32:29:4c:4a:56:5a:cc:
10:82:9d:15:cf:56:d7:96:36:1b:30:93:13:f6:7c:6c:0f:40:
86:94:2b:71:21:0a:4d:a4:5c:33:31:a7:71:0e:3e:96:9c:ce:
cf:3d:12:56:67:a9:76:be:14:70:0e:ce:4b:31:20:c6:7f:1d:
9e:a7:c1:6a:1d:3e:c1:b7:16:f1:48:79:ce:e5:24:9c:fd:c6:
5a:c2:26:d7:52:37:29:b7:c0:b1:ce:1d:e5:51:bc:a6:01:b9:
ba:11:75:d3:02:d6:9b:09:ed:1f:59:69:fe:09:a6:b3:9a:ea:
71:b1:f4:a0:4e:1b:76:60:92:7a:d8:cc:55:30:81:e2:9f:3b:
70:f2:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org