Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60CBE43AAF1211EC973C4F915A40D577.roa
File: 60CBE43AAF1211EC973C4F915A40D577.roa (raw, json)
Hash identifier: ywQ5+02bDIK2qW339a7D8to/HHrK5lGzsgzHMj0aXnU=
Subject key identifier: 5C:21:67:9D:1A:61:AE:09:88:2F:23:B6:2B:F8:1A:C6:40:D5:A7:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60CBE43AAF1211EC973C4F915A40D577.roa
Signing time: Tue 29 Mar 2022 03:43:21 +0000
ROA not before: Tue 29 Mar 2022 03:43:18 +0000
ROA not after: Wed 30 Nov 2022 03:43:18 +0000
asID: 142647
IP address blocks: 45.206.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4788 (0x12b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 03:43:18 2022 GMT
Not After : Nov 30 03:43:18 2022 GMT
Subject: CN=62428059-1f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:80:de:eb:40:82:dd:fb:b6:4a:66:cb:96:
44:10:8c:6e:7d:83:01:7b:ab:a5:12:47:3d:0a:5d:
f5:1d:bb:e1:4a:e9:66:c6:e3:75:33:85:ab:a8:74:
7f:d8:2f:f0:21:9b:78:01:ca:74:00:bd:01:0d:f3:
38:6f:7e:68:f1:76:7a:8b:04:43:48:9b:d4:c2:0a:
78:b2:63:4b:0c:fd:7d:60:14:b7:90:81:ea:60:70:
4d:6b:3a:51:6d:b9:f4:22:4a:b8:83:d5:d5:74:59:
d9:b1:aa:0d:43:ea:53:ee:a2:ff:da:a2:5a:58:fc:
ca:1f:d3:ca:37:af:57:1b:25:d3:83:a9:94:95:f0:
de:72:64:18:ac:8f:35:aa:07:ae:05:7c:bb:21:23:
18:a0:00:b8:f6:66:cf:59:a4:97:01:67:54:35:ea:
c7:ee:5a:3c:24:a5:d5:72:72:28:e3:e8:9e:14:16:
dd:dd:1c:fa:38:b3:34:17:98:7b:48:7a:d8:c6:57:
ba:6b:dd:96:b8:1b:7a:15:c9:47:56:0e:d0:8a:b5:
7d:a0:6d:12:94:07:3c:0a:ab:13:5d:a5:db:27:e6:
1a:28:f1:3f:c1:9c:8e:f2:68:39:3f:b4:48:36:52:
44:dc:20:87:60:34:a1:25:1e:e0:20:63:eb:11:4a:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:67:9D:1A:61:AE:09:88:2F:23:B6:2B:F8:1A:C6:40:D5:A7:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60CBE43AAF1211EC973C4F915A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:84:c5:b6:52:d2:8e:ee:e3:7d:82:97:e8:c7:e2:a3:90:b1:
fe:bb:f2:3c:3c:e0:71:8c:63:df:91:b0:3e:df:c4:ad:1d:ff:
0a:4c:03:0c:fc:6a:b1:69:5e:5f:d9:1d:84:5f:88:77:25:24:
c7:69:8a:c3:89:85:24:56:b3:a1:54:f1:ea:1a:fe:48:1a:95:
16:fb:01:6e:0a:ff:d4:4c:4b:f9:d9:96:42:46:b7:0e:93:24:
a8:47:43:71:f9:d5:92:48:93:27:c5:0b:59:9f:bf:2a:ba:7a:
43:e6:24:72:58:9d:10:fc:41:04:50:b6:fb:45:06:00:b7:8a:
53:24:82:71:71:aa:91:2d:2c:57:21:aa:b3:6a:75:03:27:95:
81:7d:34:35:bd:2a:f6:f4:b5:83:e7:fd:ff:cb:91:81:4c:31:
8a:b9:38:93:6c:8b:49:ac:fb:c8:4b:3d:3a:db:ed:5f:d7:ef:
ad:80:28:ab:cb:82:b6:b0:bd:50:0a:a5:a7:13:fd:25:96:01:
1f:bd:36:68:84:87:1c:ea:59:7e:e4:33:40:52:13:28:94:be:
66:0d:bd:85:a5:3c:76:0a:12:a8:88:d7:fb:40:49:07:dc:bf:
a5:12:b2:ce:3f:29:90:5c:5a:ee:0b:67:94:dd:17:e7:13:a8:
82:21:67:83
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICErQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMjkwMzQzMThaFw0yMjExMzAwMzQzMThaMBgxFjAU
BgNVBAMMDTYyNDI4MDU5LTFmOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD0oDe60CC3fu2SmbLlkQQjG59gwF7q6USRz0KXfUdu+FK6WbG43Uzhauo
dH/YL/Ahm3gBynQAvQEN8zhvfmjxdnqLBENIm9TCCniyY0sM/X1gFLeQgepgcE1r
OlFtufQiSriD1dV0Wdmxqg1D6lPuov/aolpY/Mof08o3r1cbJdODqZSV8N5yZBis
jzWqB64FfLshIxigALj2Zs9ZpJcBZ1Q16sfuWjwkpdVycijj6J4UFt3dHPo4szQX
mHtIetjGV7pr3Za4G3oVyUdWDtCKtX2gbRKUBzwKqxNdpdsn5hoo8T/BnI7yaDk/
tEg2UkTcIIdgNKElHuAgY+sRSl3FAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXCFn
nRphrgmILyO2K/gaxkDVp9QwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYwQ0JFNDNBQUYxMjExRUM5NzNDNEY5MTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtziIwDQYJKoZIhvcNAQELBQAD
ggEBAC6ExbZS0o7u432Cl+jH4qOQsf678jw84HGMY9+RsD7fxK0d/wpMAwz8arFp
Xl/ZHYRfiHclJMdpisOJhSRWs6FU8eoa/kgalRb7AW4K/9RMS/nZlkJGtw6TJKhH
Q3H51ZJIkyfFC1mfvyq6ekPmJHJYnRD8QQRQtvtFBgC3ilMkgnFxqpEtLFchqrNq
dQMnlYF9NDW9Kvb0tYPn/f/LkYFMMYq5OJNsi0ms+8hLPTrb7V/X762AKKvLgraw
vVAKpacT/SWWAR+9NmiEhxzqWX7kM0BSEyiUvmYNvYWlPHYKEqiI1/tASQfcv6US
ss4/KZBcWu4LZ5TdF+cTqIIhZ4M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org