Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C42B50457CC11ECADC7DAAA5A40D577.roa
File: 4C42B50457CC11ECADC7DAAA5A40D577.roa (raw, json)
Hash identifier: W68RgLwwJ0MZ07mL3B34B2kiabn4CBoHThqrIrQ4Uxk=
Subject key identifier: D4:F4:84:DD:E1:15:45:6B:17:49:DC:6F:C1:EC:28:01:D2:69:FE:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1058
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C42B50457CC11ECADC7DAAA5A40D577.roa
Signing time: Wed 08 Dec 2021 02:12:31 +0000
ROA not before: Wed 08 Dec 2021 02:12:27 +0000
ROA not after: Fri 30 Dec 2022 02:12:27 +0000
asID: 9009
IP address blocks: 45.192.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4184 (0x1058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:12:27 2021 GMT
Not After : Dec 30 02:12:27 2022 GMT
Subject: CN=61b0148e-c909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:70:18:32:50:b7:ee:ec:ba:2e:85:8e:e7:
98:2f:79:fe:32:16:0c:4b:fe:40:b9:d5:b4:50:60:
a9:2a:61:36:ed:67:fd:fc:10:c6:f7:10:e4:40:28:
b5:57:1f:44:e6:74:7b:6a:82:b2:e7:12:d9:2f:28:
ad:1b:b7:a8:6c:28:4a:8d:f3:1b:ec:b2:54:87:48:
ac:2a:01:88:6d:39:9b:0f:f7:db:94:57:ee:ab:7b:
46:da:ca:79:1a:f5:04:13:71:40:d0:95:e9:a2:f9:
13:46:b5:d6:36:55:04:b6:36:5c:93:be:25:00:c6:
fa:bd:51:4d:25:ad:72:c9:7a:aa:12:c2:0d:45:e3:
bc:78:50:76:d0:eb:6b:c9:a1:6e:38:a9:41:aa:d9:
53:b0:dd:67:0a:71:0d:66:6b:67:b1:d2:42:7d:f3:
26:71:41:5d:a9:0b:09:bc:5b:c6:96:8f:a4:84:87:
6e:4f:33:49:62:a8:c5:06:5e:58:7a:0b:72:c6:06:
8b:51:1f:33:38:0b:2e:64:56:13:2e:c0:83:42:11:
4b:e7:e8:91:36:a5:a3:4a:91:03:d3:38:0e:a2:3f:
34:69:e5:de:fc:d8:be:6e:e1:d2:29:e2:83:f4:b9:
ea:05:0c:ab:0f:61:15:05:2e:22:da:7b:71:74:37:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:84:DD:E1:15:45:6B:17:49:DC:6F:C1:EC:28:01:D2:69:FE:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C42B50457CC11ECADC7DAAA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f8:84:ea:1e:68:e0:d8:72:2a:e7:d4:67:7c:de:5d:97:9a:
86:95:4f:72:2c:95:d1:11:27:c1:cc:34:eb:4b:36:5e:bd:03:
38:29:7b:db:24:1a:5a:0c:cf:27:2c:32:bb:a3:0e:5a:36:63:
91:30:24:cb:f9:f7:ed:23:89:db:03:b5:a4:56:c7:dd:5a:85:
ff:16:e9:d5:1d:5f:ab:8b:3e:d3:01:6f:88:4b:4c:46:23:aa:
46:e1:79:07:b6:58:26:e7:f2:f3:73:26:38:07:ec:07:44:18:
8f:f3:80:33:2f:ae:f6:21:93:b2:95:fc:30:db:08:e3:6c:21:
1c:e4:92:8f:b4:4b:92:30:e0:66:45:a3:8b:36:68:4d:27:1a:
aa:26:8c:cc:eb:2d:d3:7e:b3:63:be:e2:0f:4f:01:a4:60:e2:
2f:62:e0:c8:41:52:79:71:37:0e:a5:e1:83:7e:41:3d:e6:39:
a5:e9:a6:c7:64:43:61:d2:0a:19:31:f3:78:04:5d:3f:c4:6b:
c8:61:45:4f:04:dc:d9:5d:de:f8:40:d4:c8:45:4c:4b:a8:bf:
36:ac:0f:fe:9c:3e:6c:94:69:61:62:f1:1d:b5:d1:e3:e1:00:
8b:35:4c:7f:a3:3a:5d:7b:04:58:28:a9:6c:43:80:c4:e1:f9:
36:da:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org