Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CA215657CF11EC8B11C6B35A40D577.roa
File: 53CA215657CF11EC8B11C6B35A40D577.roa (raw, json)
Hash identifier: du4hZMg+LzU7usWRGMd/llDY4BNkeajPSKcT5Mbj9lE=
Subject key identifier: 53:38:3D:37:A9:61:46:89:9A:C2:FE:EA:72:46:74:FE:85:F8:4F:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1072
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CA215657CF11EC8B11C6B35A40D577.roa
Signing time: Wed 08 Dec 2021 02:34:12 +0000
ROA not before: Wed 08 Dec 2021 02:34:08 +0000
ROA not after: Fri 30 Dec 2022 02:34:08 +0000
asID: 9009
IP address blocks: 45.192.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4210 (0x1072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:34:08 2021 GMT
Not After : Dec 30 02:34:08 2022 GMT
Subject: CN=61b019a4-025e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:79:cf:93:ae:b2:1f:db:54:0f:92:f2:58:
ae:fa:57:b1:8d:28:54:37:d9:e3:5d:ac:22:91:a5:
fa:2a:d8:2d:e3:d8:97:ba:59:bc:37:a1:79:5c:3b:
89:9d:55:43:60:2d:c4:bb:03:77:af:66:63:db:5e:
31:a9:ea:a2:24:19:1a:77:30:d3:6a:2f:7b:a2:2c:
d7:d9:43:1d:d9:0d:4a:76:bb:55:82:96:d0:43:c5:
7b:a6:01:e6:25:d1:5e:5a:c7:aa:76:ae:f8:1d:dc:
22:6d:85:4c:ad:b6:de:07:3e:ae:f2:fc:88:71:3a:
14:f1:3a:33:0a:94:a5:15:0b:21:30:42:f4:0b:63:
9d:e2:fe:81:b0:cb:c5:88:9c:9f:68:f1:8a:78:6b:
f7:96:23:48:e4:09:ed:9a:8e:49:1a:6a:6a:38:c0:
ff:a3:a3:05:b0:47:47:67:72:47:26:c0:5b:75:22:
a9:16:5d:a4:4f:98:86:d8:42:51:e8:f0:56:0f:bf:
c7:d7:3c:1c:22:3c:d9:97:45:b3:54:3c:98:29:3c:
e2:32:8e:69:3b:0d:38:a9:47:a6:76:a4:07:91:fb:
1f:89:de:7c:a8:22:3a:f3:4d:5c:67:29:9b:16:d9:
16:e8:d6:57:36:c5:dd:69:82:80:bb:26:ec:e0:78:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:3D:37:A9:61:46:89:9A:C2:FE:EA:72:46:74:FE:85:F8:4F:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CA215657CF11EC8B11C6B35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.159.0/24
Signature Algorithm: sha256WithRSAEncryption
39:54:55:ea:81:56:01:ed:57:1f:bc:85:4d:04:07:f4:60:8d:
13:ed:3a:b3:77:9a:74:66:69:1e:4a:d3:3a:cb:d5:d8:b0:45:
d4:35:06:81:a0:1d:39:41:90:4f:11:ee:e8:5b:88:a2:99:17:
2e:ab:7a:99:7d:f9:1b:68:73:ee:29:f9:bc:46:e0:5e:2e:e7:
24:f4:2c:06:c3:a7:6d:88:c1:79:01:c6:6e:29:56:de:22:1c:
b5:3b:b7:b1:71:b0:b9:55:a4:cd:0e:11:28:27:b1:5a:aa:3a:
78:10:ab:f3:f7:b9:7f:2a:77:1a:71:61:87:08:88:00:b0:24:
f1:ad:dd:dd:be:e5:cc:f7:26:b7:51:44:9f:0d:62:ab:dc:90:
a0:70:8f:9a:8b:ec:ce:6e:ba:bd:f4:d5:f4:75:74:db:14:49:
1c:6a:92:99:1a:c8:b7:c4:1a:5b:ef:74:84:43:b9:29:c0:a8:
e8:1a:31:ef:6f:1c:5c:86:29:6e:9e:11:4d:41:e5:9a:59:80:
2c:11:bf:33:13:4c:34:3b:13:c0:bf:93:1d:45:05:ee:f4:60:
58:79:c9:b7:76:df:48:73:5c:ac:e7:1d:80:26:2d:4f:ba:9f:
42:7a:e5:49:48:09:6e:3b:43:86:89:b4:49:b3:71:e6:79:37:
74:3b:f3:4f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjM0MDhaFw0yMjEyMzAwMjM0MDhaMBgxFjAU
BgNVBAMMDTYxYjAxOWE0LTAyNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL/XnPk66yH9tUD5LyWK76V7GNKFQ32eNdrCKRpfoq2C3j2Je6Wbw3oXlc
O4mdVUNgLcS7A3evZmPbXjGp6qIkGRp3MNNqL3uiLNfZQx3ZDUp2u1WCltBDxXum
AeYl0V5ax6p2rvgd3CJthUyttt4HPq7y/IhxOhTxOjMKlKUVCyEwQvQLY53i/oGw
y8WInJ9o8Yp4a/eWI0jkCe2ajkkaamo4wP+jowWwR0dnckcmwFt1IqkWXaRPmIbY
QlHo8FYPv8fXPBwiPNmXRbNUPJgpPOIyjmk7DTipR6Z2pAeR+x+J3nyoIjrzTVxn
KZsW2Rbo1lc2xd1pgoC7JuzgeLcNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUzg9
N6lhRomawv7qckZ0/oX4T1MwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzUzQ0EyMTU2NTdDRjExRUM4QjExQzZCMzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwJ8wDQYJKoZIhvcNAQELBQAD
ggEBADlUVeqBVgHtVx+8hU0EB/RgjRPtOrN3mnRmaR5K0zrL1diwRdQ1BoGgHTlB
kE8R7uhbiKKZFy6repl9+Rtoc+4p+bxG4F4u5yT0LAbDp22IwXkBxm4pVt4iHLU7
t7FxsLlVpM0OESgnsVqqOngQq/P3uX8qdxpxYYcIiACwJPGt3d2+5cz3JrdRRJ8N
YqvckKBwj5qL7M5uur301fR1dNsUSRxqkpkayLfEGlvvdIRDuSnAqOgaMe9vHFyG
KW6eEU1B5ZpZgCwRvzMTTDQ7E8C/kx1FBe70YFh5ybd230hzXKznHYAmLU+6n0J6
5UlICW47Q4aJtEmzceZ5N3Q7808=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org