Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C251C30F9D811EBB7169904D8A014CE.roa
File: 4C251C30F9D811EBB7169904D8A014CE.roa (raw, json)
Hash identifier: vZte8s8RzJtUPU4aCmICcui3owKy9U+JQe+Fx1cWjZU=
Subject key identifier: 5C:01:78:2E:27:07:6C:03:09:A2:05:FE:53:EC:2C:3E:69:48:82:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 086B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C251C30F9D811EBB7169904D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:42:14 +0000
ROA not before: Tue 10 Aug 2021 12:42:10 +0000
ROA not after: Mon 10 Oct 2022 12:42:10 +0000
asID: 9009
IP address blocks: 45.192.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:42:10 2021 GMT
Not After : Oct 10 12:42:10 2022 GMT
Subject: CN=61127426-be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:f1:cc:a6:0e:92:b7:7f:2a:ae:ad:e8:69:
56:0f:7e:88:2d:08:a5:8a:93:1b:ce:04:f0:a5:40:
2b:9d:4b:d7:33:02:10:b0:d7:11:bc:f7:ca:6c:11:
4f:24:19:fa:1b:33:a8:4f:d3:f8:68:ed:dd:bf:c3:
d8:e3:5b:5d:d4:3e:86:8f:83:13:26:b0:9f:0a:97:
b2:b1:8a:bc:e0:bc:15:8b:72:e5:4f:3a:b5:4e:fc:
ef:c0:fa:2c:5a:ea:3e:4a:63:0a:a8:7e:91:8e:99:
69:a6:75:bb:41:37:ad:fc:a8:94:d4:36:03:ac:41:
aa:75:ba:cb:aa:cf:68:ce:87:41:af:fe:60:55:8a:
ea:80:72:fd:87:af:07:27:c6:0b:9f:74:a5:64:51:
1e:06:75:b5:ce:48:20:21:2e:41:7f:d4:d3:0d:dc:
6d:74:b4:8b:5e:3e:90:3a:9e:a7:56:13:e2:c4:cc:
86:70:e7:9d:66:e4:75:00:cc:ec:3a:80:48:0d:ee:
80:3c:ee:7f:66:14:9c:03:04:b1:f6:ef:2f:ca:85:
dc:72:fb:64:11:cd:00:c9:b4:13:23:c6:4b:9a:32:
30:49:01:42:46:c4:64:69:d1:e6:73:80:4b:50:dc:
fa:cb:ba:82:83:4d:1a:91:2a:62:d5:00:c7:e5:e8:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:78:2E:27:07:6C:03:09:A2:05:FE:53:EC:2C:3E:69:48:82:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C251C30F9D811EBB7169904D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.136.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:85:05:fb:82:68:db:92:dc:d5:84:60:5d:2b:82:dd:10:be:
02:9b:35:5f:ec:7f:96:9a:b4:1e:82:a8:9b:0a:a8:31:aa:a0:
b6:a9:8b:0e:33:eb:86:8a:d0:83:58:5c:cb:84:d8:82:ec:2f:
4b:64:8b:47:dc:de:fa:92:57:98:1f:e0:7a:1e:51:8a:38:6e:
a2:b9:2b:c5:e4:46:99:5c:f0:f9:ea:35:0d:74:86:c8:a9:c0:
14:b6:85:e4:d3:82:0b:b8:b2:85:ce:e7:ec:c5:7b:65:2d:f3:
c6:6f:20:43:4b:4e:cd:49:af:35:5b:87:5b:96:25:2d:4a:8b:
04:29:40:f0:0f:d5:09:3a:be:22:bd:70:88:dd:f4:2b:e2:7d:
c5:29:8c:24:3b:dd:4c:0e:87:58:5e:1f:e4:c6:a9:63:ef:1a:
61:fe:67:73:85:6c:ed:45:2c:54:cf:b1:c4:85:f9:af:6f:d4:
68:38:05:ef:c0:84:35:e2:02:90:75:4a:7f:18:a9:2d:94:ef:
52:31:f7:03:81:83:33:37:f0:2b:a7:83:31:0f:ce:f8:f0:4d:
18:aa:59:4c:2a:7d:6f:1f:a9:54:01:91:26:2f:67:b8:79:f3:
d8:68:e7:a2:7e:bf:4a:08:91:7a:ac:47:46:2e:7d:03:73:2b:
f1:b1:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org