Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8AAA40599A11ECBEAFE5835A40D577.roa
File: 4E8AAA40599A11ECBEAFE5835A40D577.roa (raw, json)
Hash identifier: UKUO9EnlckZj2BmX7Hich64NAe7TTQxANGRzibQdtR4=
Subject key identifier: 70:53:EA:FD:1B:CA:E4:B2:B0:63:CD:15:6B:54:AD:04:0E:E7:7C:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8AAA40599A11ECBEAFE5835A40D577.roa
Signing time: Fri 10 Dec 2021 09:19:42 +0000
ROA not before: Fri 10 Dec 2021 09:19:38 +0000
ROA not after: Fri 30 Dec 2022 09:19:38 +0000
asID: 42286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4306 (0x10d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 10 09:19:38 2021 GMT
Not After : Dec 30 09:19:38 2022 GMT
Subject: CN=61b31bae-1dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:5c:47:8e:25:4a:4d:93:20:13:ce:be:12:
e6:18:bb:27:aa:ea:bb:2c:77:b6:52:56:8f:2d:ae:
c3:42:3a:50:b2:10:68:23:f6:45:33:a9:3b:98:c4:
15:0c:f8:0d:ce:a3:c7:77:b2:79:44:31:89:a2:61:
09:02:c8:04:d7:57:33:d5:4b:bc:64:6a:ec:33:f2:
96:19:43:f7:4a:09:53:19:e3:69:65:5c:2c:0f:c4:
74:5c:fd:63:bc:60:fc:0e:fd:e3:cc:44:41:c0:65:
7c:87:6e:4f:f5:b2:75:73:5e:7e:f5:25:ba:e5:54:
69:49:4b:6f:d3:e9:b4:95:9c:f9:42:2b:6b:84:64:
9b:a4:b0:43:4e:25:c7:1c:1e:41:6a:70:56:86:85:
18:1d:22:0f:c4:94:d0:f0:fa:71:40:d7:6c:b6:d3:
4f:82:e1:e9:6a:99:2c:6e:d0:67:66:5f:6a:7a:60:
c2:ef:fd:0b:7b:a3:f2:fd:8c:02:ab:63:26:84:49:
01:2e:d0:f9:46:0c:ff:06:83:49:28:77:ed:51:10:
dd:97:ed:bc:57:02:bd:5c:b0:fa:d9:f0:4b:d9:c0:
cc:ed:9c:dd:01:66:d3:b2:b1:76:a1:1f:2d:03:a0:
bb:52:76:3b:70:47:e9:f6:e4:4c:62:85:bb:ef:5b:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:EA:FD:1B:CA:E4:B2:B0:63:CD:15:6B:54:AD:04:0E:E7:7C:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E8AAA40599A11ECBEAFE5835A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
89:99:25:37:1f:44:5a:c7:d9:60:1a:da:d5:04:49:b3:15:8c:
3f:af:0c:50:c4:80:0e:1a:56:26:cd:e7:90:a8:95:e9:f8:5f:
5c:da:8d:00:20:25:47:c1:f9:c7:58:0d:5c:4c:0e:b3:ca:82:
58:23:e6:89:7b:bc:31:b2:c7:b3:bd:33:42:02:d3:87:16:5e:
35:21:70:70:da:72:a6:b1:e4:62:c4:b6:88:72:3f:d4:01:25:
82:48:b2:fa:2f:3e:00:c4:1d:b1:4a:30:af:0f:32:4d:fb:24:
33:3c:32:c0:1d:1a:1d:c0:c6:e1:6e:34:8c:29:b9:5b:93:62:
16:7e:de:cb:6d:23:a0:25:87:6c:5c:af:2c:46:0b:57:26:6a:
28:75:1c:76:44:d9:4f:63:9e:de:c2:f6:d8:a8:d6:91:e2:47:
61:36:2b:7c:c4:ea:c9:d1:1a:c6:85:e2:39:ac:a1:3c:34:00:
f0:59:cf:11:6f:7b:82:1a:69:3c:56:86:40:c0:18:e2:a1:17:
09:21:b2:06:10:0c:aa:29:b6:b9:d3:5f:7a:eb:97:73:a8:76:
a8:11:02:b0:d8:9c:8f:96:3c:68:11:4b:03:79:7c:53:69:61:
f1:ed:46:8b:c9:81:ff:4d:20:e6:11:48:a8:f1:96:c8:49:70:
f0:b9:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org