Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74153A7CF9D811EBB483EC04D8A014CE.roa
File: 74153A7CF9D811EBB483EC04D8A014CE.roa (raw, json)
Hash identifier: FRqLMrJhsXB7Rq4j1pbCd9wU510hO84CSoStGqen1FM=
Subject key identifier: 94:78:22:26:F6:9E:67:31:81:57:54:6E:A0:CA:6A:4B:4F:87:60:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 086F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74153A7CF9D811EBB483EC04D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:43:21 +0000
ROA not before: Tue 10 Aug 2021 12:43:08 +0000
ROA not after: Mon 10 Oct 2022 12:43:08 +0000
asID: 9009
IP address blocks: 45.192.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:43:08 2021 GMT
Not After : Oct 10 12:43:08 2022 GMT
Subject: CN=61127469-8e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:5e:8a:50:80:80:72:35:f2:72:89:f2:11:
f5:e8:d3:35:c9:2d:e9:3a:87:23:21:d3:75:d4:18:
b0:81:a8:d5:d6:2f:ae:d5:45:1b:1b:2c:37:70:9d:
dc:75:5f:60:2f:c2:0b:b5:44:76:94:41:65:5e:74:
8c:fc:1f:be:46:44:f2:8d:5d:62:25:28:ab:81:70:
f5:27:91:fa:84:ad:5d:91:19:2c:6f:43:fd:79:a5:
31:9c:b9:58:b0:cf:db:96:58:f2:93:c4:c3:b8:f1:
81:de:50:b5:7c:68:ac:02:25:ad:66:b7:86:48:94:
be:b9:a3:51:8d:1d:07:04:14:e4:e8:c9:29:a7:cf:
81:f8:9d:d8:69:ef:2f:fe:ca:2f:33:20:dc:fd:7b:
af:32:da:1a:96:c1:90:6f:0d:71:a2:c2:a3:2c:f4:
cb:45:c9:c2:c6:a8:4e:92:70:15:48:66:e8:cd:f3:
68:d0:e3:95:46:01:61:12:6c:ce:e9:93:fa:1b:66:
f1:d4:d3:25:34:95:fa:5c:e1:86:24:d1:1b:06:31:
3b:6a:94:83:6e:a5:b8:c2:a6:0b:21:77:ca:71:94:
ee:9e:cc:8c:1f:8e:cf:52:2f:fa:d9:69:d4:0c:4b:
a1:dd:22:88:57:8d:01:6d:5c:8f:7c:4f:7e:6b:62:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:78:22:26:F6:9E:67:31:81:57:54:6E:A0:CA:6A:4B:4F:87:60:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74153A7CF9D811EBB483EC04D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:53:7d:31:be:59:5b:aa:39:3d:63:48:f4:a5:57:52:6a:79:
ad:91:34:bd:43:a3:ee:2a:c2:7a:fe:4f:16:08:2d:6a:22:39:
25:65:c0:49:30:29:e4:cc:3a:f9:a6:5e:fa:14:87:7b:49:c1:
1d:70:75:d1:60:5b:f9:a0:55:bb:ed:63:b7:a3:8a:0f:2a:41:
42:d5:8d:65:4f:a2:d5:a5:b0:d2:b5:a2:bb:09:fe:5d:22:5b:
17:f9:c2:55:00:6a:9f:43:dc:cb:ee:13:c9:a2:23:13:e6:74:
a7:2e:24:68:3b:ab:4e:de:ad:92:f8:e5:f2:4b:26:4c:db:a3:
ed:8f:b4:b2:ec:16:4c:f6:6e:4d:c8:57:5e:45:68:22:2f:4b:
36:d9:28:f2:cf:b3:5b:b2:d6:45:01:1b:67:37:9f:9f:90:36:
bc:5b:28:55:10:b9:de:c8:89:0a:69:f5:34:f7:99:b7:40:06:
d7:af:df:3b:b7:a6:04:c5:aa:59:d0:fe:88:c6:2e:39:b3:cd:
ff:1b:3a:b7:9d:75:a7:46:25:8c:19:be:00:aa:b0:2d:66:05:
b3:0c:6e:de:22:5c:7b:7b:31:b6:63:1f:d1:05:54:f2:e5:45:
30:0a:e9:25:03:4d:44:7e:98:18:d3:dd:cc:b0:3a:15:76:f2:
be:e9:2e:49
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA4MTAxMjQzMDhaFw0yMjEwMTAxMjQzMDhaMBgxFjAU
BgNVBAMMDTYxMTI3NDY5LThlOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu816KUICAcjXyconyEfXo0zXJLek6hyMh03XUGLCBqNXWL67VRRsbLDdw
ndx1X2Avwgu1RHaUQWVedIz8H75GRPKNXWIlKKuBcPUnkfqErV2RGSxvQ/15pTGc
uViwz9uWWPKTxMO48YHeULV8aKwCJa1mt4ZIlL65o1GNHQcEFOToySmnz4H4ndhp
7y/+yi8zINz9e68y2hqWwZBvDXGiwqMs9MtFycLGqE6ScBVIZujN82jQ45VGAWES
bM7pk/obZvHU0yU0lfpc4YYk0RsGMTtqlINupbjCpgshd8pxlO6ezIwfjs9SL/rZ
adQMS6HdIohXjQFtXI98T35rYtxfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUlHgi
JvaeZzGBV1RuoMpqS0+HYA8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzc0MTUzQTdDRjlEODExRUJCNDgzRUMwNEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItwIQwDQYJKoZIhvcNAQELBQAD
ggEBABpTfTG+WVuqOT1jSPSlV1Jqea2RNL1Do+4qwnr+TxYILWoiOSVlwEkwKeTM
OvmmXvoUh3tJwR1wddFgW/mgVbvtY7ejig8qQULVjWVPotWlsNK1orsJ/l0iWxf5
wlUAap9D3MvuE8miIxPmdKcuJGg7q07erZL45fJLJkzbo+2PtLLsFkz2bk3IV15F
aCIvSzbZKPLPs1uy1kUBG2c3n5+QNrxbKFUQud7IiQpp9TT3mbdABtev3zu3pgTF
qlnQ/ojGLjmzzf8bOreddadGJYwZvgCqsC1mBbMMbt4iXHt7MbZjH9EFVPLlRTAK
6SUDTUR+mBjT3cywOhV28r7pLkk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org