Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
File: 699E0C16C6BC11EC879CBBA0F1222468.roa (raw, json)
Hash identifier: Pgld4v/nvmgZTEGH8/pSzDw2koxrV5wN4qkLvx2o+vE=
Subject key identifier: 63:18:59:D0:C2:4E:F5:15:5F:23:BB:74:C8:14:24:13:05:67:51:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
Signing time: Thu 28 Apr 2022 06:28:27 +0000
ROA not before: Thu 28 Apr 2022 06:28:23 +0000
ROA not after: Fri 30 Dec 2022 06:28:23 +0000
asID: 35916
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5033 (0x13a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 06:28:23 2022 GMT
Not After : Dec 30 06:28:23 2022 GMT
Subject: CN=626a340b-e334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:67:d1:6b:cc:a9:5f:71:f5:b0:cc:db:55:
e9:94:9f:26:94:89:66:21:d7:5d:12:cc:2e:ec:45:
a9:87:dc:75:b8:5f:e2:cc:a8:11:62:46:05:9f:95:
b6:02:d9:67:1a:93:33:15:ee:22:d2:9d:4c:58:91:
a3:9a:44:8d:45:7d:da:12:4f:c0:eb:33:e6:18:d1:
66:8a:55:f5:f0:9d:2f:17:82:51:16:fc:cf:c5:f0:
99:93:53:3f:27:fc:a2:fc:11:ad:5b:af:a0:2e:22:
36:8e:b3:c0:60:cf:d0:fd:3d:bc:a1:fd:3a:5f:6b:
82:94:73:2e:d2:67:c1:1e:d1:c5:0a:20:d7:d1:ad:
97:04:9b:4b:70:9a:7c:20:45:5c:01:36:ba:ac:78:
53:b6:4d:c4:12:73:23:03:51:f3:bd:e7:27:e1:8f:
52:6e:cf:2b:78:f1:da:56:2c:c3:32:13:d0:3f:b3:
ce:ca:5d:4d:35:79:12:46:26:81:36:70:33:f1:46:
43:b4:5d:a2:9a:18:71:15:ad:45:9e:bb:c4:ff:08:
26:d9:d9:69:9c:bd:8c:fe:a5:11:f4:30:8a:c6:2b:
28:bc:88:ca:69:a3:9f:19:c4:6f:08:5d:67:3a:79:
c6:e6:e7:43:fe:79:18:69:66:dc:b7:48:b7:1b:7a:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:59:D0:C2:4E:F5:15:5F:23:BB:74:C8:14:24:13:05:67:51:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/699E0C16C6BC11EC879CBBA0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:86:73:98:f6:98:df:5b:de:85:f8:24:62:0f:f8:ad:01:84:
3f:60:42:29:f2:ec:0b:51:0f:38:14:67:1c:dd:cb:e6:f6:75:
14:55:33:f7:72:5b:75:8f:23:d9:37:62:96:d5:f4:cf:66:03:
92:cf:37:5f:1c:9c:ee:fc:95:cc:4a:73:27:d9:64:69:7f:6b:
98:40:c0:02:2e:57:76:44:0c:56:7c:01:db:11:bd:7a:56:a7:
ea:fc:0e:9b:ec:b1:9b:96:11:d3:31:99:c2:60:ab:d9:7b:f9:
c0:82:5f:90:f8:4d:38:47:79:b0:3b:12:f4:be:9a:2f:4f:0a:
39:0f:e5:d6:30:aa:6a:bc:e9:80:8a:52:a2:5e:c8:97:86:5f:
ac:7b:16:d8:34:5f:a8:09:9b:3e:65:49:64:88:aa:7b:22:95:
61:10:11:4f:b8:fe:1c:e1:26:ac:56:85:ab:77:76:a9:18:a2:
6c:4d:fa:8b:d3:0e:d1:f4:f6:0d:fe:ff:6d:ec:d3:a1:9e:29:
2a:5a:a3:2c:b0:25:97:e2:15:53:f8:73:58:e7:38:a3:f0:d1:
52:20:95:6a:da:c2:fd:24:b8:54:45:c3:53:b7:f7:69:93:4d:
33:71:c0:3b:14:76:5a:f9:01:71:ae:30:f9:df:3a:ed:35:fa:
46:66:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org