Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
File: 4BC8A14CE25511EC9A35C0EAF1222468.roa (raw, json)
Hash identifier: w2ZIeyJ2Qncr7OfrZV+x7GnsoET9wui6Zwx98SnwzZM=
Subject key identifier: 46:E0:0A:15:8B:F5:C0:2C:A9:F6:FF:F3:18:88:6E:A0:49:A6:6B:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 143E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
Signing time: Thu 02 Jun 2022 09:20:51 +0000
ROA not before: Thu 02 Jun 2022 09:20:48 +0000
ROA not after: Fri 30 Jun 2023 09:20:48 +0000
asID: 140224
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5182 (0x143e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 09:20:48 2022 GMT
Not After : Jun 30 09:20:48 2023 GMT
Subject: CN=629880f3-84a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:0b:de:38:67:f7:63:99:bf:11:1f:52:53:
8f:12:0b:58:72:66:39:0b:a5:4d:df:58:da:05:3c:
17:cd:77:6b:1e:78:8d:fb:38:f6:79:27:90:c5:ed:
b4:59:a5:72:3b:23:84:ef:1f:b3:b8:74:28:8a:51:
c5:ed:71:73:14:d9:ce:77:74:c8:b8:ff:20:a8:cf:
27:ea:bb:f7:00:18:cb:06:97:1c:f5:c5:75:9c:45:
61:f3:fc:b1:a3:d9:64:b1:46:69:4d:69:a7:61:69:
4b:f5:75:9a:bf:10:2c:9f:9b:82:72:5f:51:96:da:
7a:a9:8f:2a:29:94:82:7f:fa:76:7c:b5:ce:c5:47:
6a:fa:8c:c8:ef:b9:70:be:7e:26:5b:b1:a9:fe:a6:
f3:77:85:80:1f:23:d2:16:58:7c:89:8d:b1:0d:a6:
30:f5:3d:c0:0e:b4:6c:fd:fb:89:a1:33:63:49:80:
f5:80:00:55:0f:ce:02:d2:e6:f7:68:ad:d4:3d:9d:
10:dd:36:fd:36:d2:ff:ce:97:ca:f9:d3:5f:e4:6e:
f4:eb:af:a5:89:d1:61:d4:66:db:78:4c:5e:80:72:
e0:d9:f8:4f:16:a5:9e:2a:52:ec:05:be:72:25:09:
25:d7:90:19:c1:ab:bc:a3:d8:b9:1f:13:7f:b9:34:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:0A:15:8B:F5:C0:2C:A9:F6:FF:F3:18:88:6E:A0:49:A6:6B:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
36:d0:64:5b:5b:ac:88:d8:d9:92:47:ba:9d:5a:82:5f:18:6f:
e0:d5:ee:6e:e8:51:8c:09:52:a6:d7:51:25:51:69:6b:b3:d3:
33:2b:54:22:0b:f7:4b:25:91:69:4e:a4:ea:f6:a1:e7:02:90:
50:64:11:35:a9:8c:6b:45:29:6f:f4:ec:61:98:16:69:32:12:
2b:06:9e:0a:69:43:0e:e7:e0:ce:c5:75:4d:3e:09:1d:dd:9a:
06:b7:b1:29:13:37:da:12:83:80:04:e0:a9:c9:19:62:db:ee:
7c:75:0f:6d:2c:24:22:12:de:ec:ae:10:1e:6c:49:2b:d0:2c:
db:a2:45:a0:11:69:59:ad:da:ff:45:6a:d1:75:10:37:69:9c:
fb:45:29:6a:9a:e9:fd:ab:a6:63:8b:8c:91:06:a9:6f:84:16:
50:60:5b:90:11:7c:22:2e:73:7a:37:57:60:58:61:0a:d2:47:
3c:50:71:ae:68:84:9e:f9:f1:ef:63:83:55:f4:62:ca:9d:5f:
4f:12:88:30:09:25:58:83:e7:52:65:05:a8:7a:fa:e6:69:78:
20:23:2b:51:6b:ff:6f:f3:5f:68:54:61:4b:7c:be:b9:1b:c6:
92:bf:77:86:3e:19:62:de:d5:08:ce:63:e7:f4:f9:7f:ef:27:
02:ac:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org