Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74BDFAF457CF11EC955038B45A40D577.roa
File: 74BDFAF457CF11EC955038B45A40D577.roa (raw, json)
Hash identifier: exyTukPTZ+hpbpOUacgrV1ZaRfRS2FzAxPkiWKH2B6s=
Subject key identifier: 05:35:F1:77:FE:F3:7F:45:AD:B0:39:03:27:74:DC:AE:30:5B:CA:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1076
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74BDFAF457CF11EC955038B45A40D577.roa
Signing time: Wed 08 Dec 2021 02:35:07 +0000
ROA not before: Wed 08 Dec 2021 02:35:04 +0000
ROA not after: Fri 30 Dec 2022 02:35:04 +0000
asID: 9009
IP address blocks: 45.192.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4214 (0x1076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:35:04 2021 GMT
Not After : Dec 30 02:35:04 2022 GMT
Subject: CN=61b019db-83df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:0f:24:85:98:6e:80:5d:c9:0d:c0:7f:73:
8a:99:89:e9:a0:c7:f3:ee:0f:73:f0:eb:f7:77:fb:
82:99:41:ce:d4:ba:b8:04:be:92:89:b2:21:3b:27:
a7:ec:dd:cc:f6:ba:2b:8d:1f:82:88:95:c7:d4:33:
19:2b:29:24:c8:28:63:4a:ec:0d:5e:81:4d:81:36:
76:8e:96:26:4e:05:7b:39:3b:b8:5a:88:e8:0f:41:
11:2c:05:9e:6e:36:2e:46:35:a0:ee:90:e9:ce:0d:
a6:e8:21:4c:1a:16:4e:2f:2d:4a:a5:f0:b1:ea:9b:
a7:1e:4f:c8:a3:51:6d:df:f6:45:65:d6:00:46:07:
57:09:48:0c:ae:48:93:02:94:d6:e1:c7:9f:ee:73:
b3:e7:4d:40:f5:4b:b2:3f:7b:5a:7b:33:62:0b:57:
4c:a6:b2:1a:28:b3:1e:d0:a9:bf:cf:57:f3:51:d0:
5b:4f:ac:bc:ee:4d:7d:4d:88:9a:cd:12:6b:14:5f:
50:f7:f9:89:5b:ba:cb:a6:33:da:e8:75:dc:18:40:
ab:29:f2:ac:00:f4:26:3b:4a:96:dd:1e:2c:0f:c7:
b7:26:32:9b:f4:0e:61:91:1b:9e:87:37:3b:41:98:
67:f6:df:ca:9e:d4:a8:b4:f9:fc:80:da:e3:23:85:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:F1:77:FE:F3:7F:45:AD:B0:39:03:27:74:DC:AE:30:5B:CA:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74BDFAF457CF11EC955038B45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ce:42:f5:bd:d1:b5:59:9b:ee:63:a7:0b:d9:5e:11:4c:09:
9f:ec:11:55:dd:a7:d8:a5:78:91:d1:53:fb:01:b1:7c:c7:ed:
6a:ef:a4:4a:3a:25:81:20:e5:e9:04:4d:bd:a0:ff:06:7a:74:
48:8f:8f:c4:79:dd:32:05:cb:1b:f4:41:d5:10:67:3a:8c:c4:
37:0a:95:a3:47:6b:b0:d8:bd:aa:d7:da:fc:4a:f1:d3:2d:81:
d6:9c:57:ca:59:90:80:80:13:32:9c:eb:c2:1a:44:ed:55:81:
6c:85:28:e7:a7:05:33:c2:28:f9:07:72:b5:3c:1f:11:7a:14:
ef:9a:ed:1f:93:a3:9e:1b:94:1f:81:ed:20:17:46:2a:fb:62:
72:5a:66:1d:84:02:1a:08:15:fa:56:50:2b:85:60:3d:92:b6:
47:c8:f7:af:2e:26:3b:e8:08:e7:54:e4:2f:ef:ef:a2:dc:0a:
a1:7f:c3:93:e9:61:f9:5a:e9:67:de:0c:6f:56:7b:ec:ce:27:
ba:41:b9:d7:4e:33:18:1b:1e:ed:3a:75:cb:60:b4:9c:a3:2d:
49:6c:dc:9f:07:45:c4:16:21:26:b2:87:68:b6:ee:30:40:87:
dc:2a:69:7e:be:68:5a:16:10:4e:67:2b:2d:29:7b:96:01:51:
e9:b5:d0:76
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjM1MDRaFw0yMjEyMzAwMjM1MDRaMBgxFjAU
BgNVBAMMDTYxYjAxOWRiLTgzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNHw8khZhugF3JDcB/c4qZiemgx/PuD3Pw6/d3+4KZQc7UurgEvpKJsiE7
J6fs3cz2uiuNH4KIlcfUMxkrKSTIKGNK7A1egU2BNnaOliZOBXs5O7haiOgPQREs
BZ5uNi5GNaDukOnODaboIUwaFk4vLUql8LHqm6ceT8ijUW3f9kVl1gBGB1cJSAyu
SJMClNbhx5/uc7PnTUD1S7I/e1p7M2ILV0ymshoosx7Qqb/PV/NR0FtPrLzuTX1N
iJrNEmsUX1D3+YlbusumM9roddwYQKsp8qwA9CY7SpbdHiwPx7cmMpv0DmGRG56H
NztBmGf238qe1Ki0+fyA2uMjhU5PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUBTXx
d/7zf0WtsDkDJ3TcrjBbynkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzc0QkRGQUY0NTdDRjExRUM5NTUwMzhCNDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwJcwDQYJKoZIhvcNAQELBQAD
ggEBAIrOQvW90bVZm+5jpwvZXhFMCZ/sEVXdp9ileJHRU/sBsXzH7WrvpEo6JYEg
5ekETb2g/wZ6dEiPj8R53TIFyxv0QdUQZzqMxDcKlaNHa7DYvarX2vxK8dMtgdac
V8pZkICAEzKc68IaRO1VgWyFKOenBTPCKPkHcrU8HxF6FO+a7R+To54blB+B7SAX
Rir7YnJaZh2EAhoIFfpWUCuFYD2StkfI968uJjvoCOdU5C/v76LcCqF/w5PpYfla
6WfeDG9We+zOJ7pBuddOMxgbHu06dctgtJyjLUls3J8HRcQWISayh2i27jBAh9wq
aX6+aFoWEE5nKy0pe5YBUem10HY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org