Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8D808C064311EC98ECDA0AD8A014CE.roa
File: 4C8D808C064311EC98ECDA0AD8A014CE.roa (raw, json)
Hash identifier: UJaZybVCNZbgGxLuOC2cvKlB9qdxJ49lWl4EzA2TrN0=
Subject key identifier: BE:C9:28:FF:C2:73:23:FA:57:FB:D7:B1:8C:69:F8:31:37:67:C9:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8D808C064311EC98ECDA0AD8A014CE.roa
Signing time: Thu 26 Aug 2021 07:57:46 +0000
ROA not before: Thu 26 Aug 2021 07:57:41 +0000
ROA not after: Wed 26 Oct 2022 07:57:41 +0000
asID: 205516
IP address blocks: 45.192.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 07:57:41 2021 GMT
Not After : Oct 26 07:57:41 2022 GMT
Subject: CN=6127497a-392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:e6:f0:3c:38:18:b1:e1:8e:9d:05:76:5c:
18:84:bb:bb:6c:d5:a1:4f:63:19:02:97:4a:cb:f8:
59:96:49:17:9a:27:65:e2:87:b5:86:16:58:b3:b2:
25:0f:9b:78:7f:20:67:37:2a:7a:83:9a:58:c8:27:
86:58:7d:ee:05:5b:71:8d:ca:93:34:5e:46:77:27:
1e:78:6c:7e:fc:a2:a2:1e:e3:41:45:65:95:ae:fa:
f7:2e:8d:76:27:c8:56:68:b7:ec:fd:a3:d8:a4:88:
f5:47:de:bb:c7:5f:ac:e5:dc:b4:60:e0:50:6a:80:
0a:43:7f:ad:4d:27:65:db:2c:5c:bf:1b:8c:2c:5d:
70:d1:18:bc:0f:c1:cf:c8:76:79:7c:6c:0d:12:e9:
83:84:c8:63:4a:9a:97:f0:76:99:2f:7c:75:f3:7e:
63:2b:9b:6a:d7:69:de:22:32:92:80:f4:87:bc:22:
cd:88:82:8c:7c:62:a7:e8:da:34:b4:94:c4:57:86:
12:3c:15:8a:6a:d2:ff:e2:57:45:c5:7f:5e:4e:06:
8e:7e:fe:8e:85:2e:c1:7c:cb:01:52:3a:b7:30:77:
ab:dd:cf:75:89:81:a9:85:c7:c8:71:e5:d8:62:f7:
26:12:e2:f5:cb:89:5f:f3:77:b5:c0:c8:e3:8b:16:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:28:FF:C2:73:23:FA:57:FB:D7:B1:8C:69:F8:31:37:67:C9:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C8D808C064311EC98ECDA0AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8d:ff:a8:87:7b:57:f2:5e:94:0a:3a:d2:dd:4f:56:23:97:
13:d2:21:c5:dc:b9:47:a2:49:d4:6c:b7:5a:ee:25:90:f6:be:
12:5f:e1:f9:f2:a4:97:be:23:a7:2c:ea:56:86:24:62:31:c0:
4e:60:9c:49:ed:23:30:25:c4:47:6b:46:37:5f:1b:7c:bf:bd:
50:5e:27:5f:47:a0:5c:4f:a7:80:e3:4b:40:99:2f:40:e9:61:
09:42:c1:13:5d:79:9c:8d:47:1c:db:97:5d:f7:28:d6:ab:a9:
3f:e9:89:55:cf:cc:5f:b9:ff:f5:6d:bc:59:14:6f:7e:5b:86:
cb:16:59:a8:f8:69:e4:86:18:49:66:7d:da:ab:d8:c8:c3:3d:
4b:6b:cd:32:dd:a3:af:39:8d:c3:83:17:70:88:bb:0a:a8:8d:
79:a9:6d:e9:29:28:14:15:76:9d:4a:84:f2:22:24:78:95:43:
3a:51:4f:b6:ad:79:d9:af:d7:c4:96:b4:a2:56:bf:fd:c5:a6:
8f:69:f2:6c:24:e7:b1:73:7e:63:41:7b:9a:f3:d7:42:53:59:
4e:f5:00:be:e0:3f:ff:f0:ad:41:53:c4:e3:d0:e7:3b:9f:96:
49:cc:f9:e4:54:dc:8a:38:04:5d:dd:94:41:fa:e8:65:0e:4c:
09:2d:73:ff
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA4MjYwNzU3NDFaFw0yMjEwMjYwNzU3NDFaMBgxFjAU
BgNVBAMMDTYxMjc0OTdhLTM5MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3SubwPDgYseGOnQV2XBiEu7ts1aFPYxkCl0rL+FmWSReaJ2Xih7WGFliz
siUPm3h/IGc3KnqDmljIJ4ZYfe4FW3GNypM0XkZ3Jx54bH78oqIe40FFZZWu+vcu
jXYnyFZot+z9o9ikiPVH3rvHX6zl3LRg4FBqgApDf61NJ2XbLFy/G4wsXXDRGLwP
wc/Idnl8bA0S6YOEyGNKmpfwdpkvfHXzfmMrm2rXad4iMpKA9Ie8Is2Igox8Yqfo
2jS0lMRXhhI8FYpq0v/iV0XFf15OBo5+/o6FLsF8ywFSOrcwd6vdz3WJgamFx8hx
5dhi9yYS4vXLiV/zd7XAyOOLFjbdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvsko
/8JzI/pX+9exjGn4MTdnyRAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzRDOEQ4MDhDMDY0MzExRUM5OEVDREEwQUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwIEwDQYJKoZIhvcNAQELBQAD
ggEBAIGN/6iHe1fyXpQKOtLdT1YjlxPSIcXcuUeiSdRst1ruJZD2vhJf4fnypJe+
I6cs6laGJGIxwE5gnEntIzAlxEdrRjdfG3y/vVBeJ19HoFxPp4DjS0CZL0DpYQlC
wRNdeZyNRxzbl133KNarqT/piVXPzF+5//VtvFkUb35bhssWWaj4aeSGGElmfdqr
2MjDPUtrzTLdo685jcODF3CIuwqojXmpbekpKBQVdp1KhPIiJHiVQzpRT7atedmv
18SWtKJWv/3Fpo9p8mwk57FzfmNBe5rz10JTWU71AL7gP//wrUFTxOPQ5zuflknM
+eRU3Io4BF3dlEH66GUOTAktc/8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org