Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B795DE200E11ECBDBD0B05D8A014CE.roa
File: 80B795DE200E11ECBDBD0B05D8A014CE.roa (raw, json)
Hash identifier: WbJ00fzUussUFwbibgHZ22sQPDKQjdNfxE/VivDGEjc=
Subject key identifier: E4:33:2D:D0:BA:DD:D5:46:44:DF:34:68:7B:E4:D3:4C:04:42:EA:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B795DE200E11ECBDBD0B05D8A014CE.roa
Signing time: Tue 28 Sep 2021 03:45:20 +0000
ROA not before: Tue 28 Sep 2021 03:45:17 +0000
ROA not after: Wed 28 Sep 2022 03:45:17 +0000
asID: 140547
IP address blocks: 45.207.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:45:17 2021 GMT
Not After : Sep 28 03:45:17 2022 GMT
Subject: CN=61528fd0-0f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:a1:3f:77:8d:03:c5:4a:b5:00:27:d7:8c:
a5:56:56:c8:5e:2f:9a:81:4c:0f:bf:62:9f:de:b6:
ab:0d:f3:a7:85:6e:7a:52:90:8d:a2:1b:eb:43:a4:
84:2e:15:81:27:3f:40:4a:0f:0c:f0:75:84:e7:b0:
61:bf:2d:e6:e9:f6:b3:7f:d3:e9:6b:89:b7:e2:f9:
79:2d:a3:fb:ac:c2:98:f5:d1:a9:fe:99:f0:ae:f3:
96:24:dd:4e:0f:ec:b2:ba:2d:82:37:95:40:8e:93:
45:4c:fc:bc:77:2e:89:57:d6:70:6c:17:11:d6:96:
1a:4a:73:ae:8b:6b:19:e7:02:2a:26:b3:8a:b9:fe:
da:ff:9d:80:70:d7:a8:f9:dc:cc:27:e6:87:e7:54:
b8:6d:eb:5a:9a:6a:20:53:e8:44:de:42:cd:f1:6a:
0b:51:d0:83:83:94:5c:2e:40:c2:79:8d:3f:ad:e4:
65:bc:73:3f:16:d8:26:fa:d9:c1:e0:1d:18:bf:e7:
42:b5:45:dc:40:0b:e8:8a:8b:65:0f:fb:51:54:49:
21:89:e8:be:7f:a0:69:63:9a:4d:52:ba:da:83:a0:
6b:94:8e:85:1a:d9:55:76:eb:6a:1d:c9:34:c2:0d:
dc:5a:be:c7:31:fc:fe:bb:14:5f:22:5d:4c:f6:23:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:2D:D0:BA:DD:D5:46:44:DF:34:68:7B:E4:D3:4C:04:42:EA:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B795DE200E11ECBDBD0B05D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.170.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:cc:38:4a:35:17:04:1a:6c:a2:93:48:90:ad:58:93:4b:fd:
c9:38:c1:e3:3b:02:3b:c0:c8:f8:bd:e9:ba:fb:86:e9:8f:15:
8a:32:f2:98:c2:7b:c1:28:bc:1c:91:ec:1d:0a:83:2f:a0:90:
f9:a6:79:c0:6d:4d:a6:99:ad:ea:eb:9b:d6:77:a6:c9:b0:26:
88:bf:a6:54:5f:f3:a6:26:6b:d3:8d:1a:fe:14:80:29:21:a2:
ef:44:27:ff:17:8e:c2:3c:94:af:07:8d:cc:f3:2a:7f:1e:98:
0b:66:bc:db:f3:42:8a:13:85:7e:14:f9:6d:10:b6:d7:ad:54:
e5:96:2e:50:8f:4b:67:d8:10:9b:14:f8:27:5c:39:18:20:27:
22:39:0f:1c:d6:c9:37:04:a9:2c:67:5e:c6:5d:e5:98:75:5a:
3e:e5:33:a1:bf:1c:ae:35:ae:60:10:fa:c8:5c:30:f1:ca:f3:
01:d9:53:1b:96:03:92:04:79:78:fb:10:6c:0b:5f:f8:be:e4:
57:86:4f:2e:34:c5:ce:11:d1:46:3d:c1:a5:e2:0e:3c:f0:df:
bc:d1:e9:dc:5a:17:fa:84:66:49:65:6d:67:62:5e:76:92:40:
18:f7:15:44:2b:8e:72:19:4f:e9:85:20:41:57:23:71:45:16:
78:17:ff:d2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA5MjgwMzQ1MTdaFw0yMjA5MjgwMzQ1MTdaMBgxFjAU
BgNVBAMMDTYxNTI4ZmQwLTBmODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0FKE/d40DxUq1ACfXjKVWVsheL5qBTA+/Yp/etqsN86eFbnpSkI2iG+tD
pIQuFYEnP0BKDwzwdYTnsGG/Lebp9rN/0+lribfi+Xkto/uswpj10an+mfCu85Yk
3U4P7LK6LYI3lUCOk0VM/Lx3LolX1nBsFxHWlhpKc66LaxnnAioms4q5/tr/nYBw
16j53Mwn5ofnVLht61qaaiBT6ETeQs3xagtR0IODlFwuQMJ5jT+t5GW8cz8W2Cb6
2cHgHRi/50K1RdxAC+iKi2UP+1FUSSGJ6L5/oGljmk1SutqDoGuUjoUa2VV262od
yTTCDdxavscx/P67FF8iXUz2I+unAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5DMt
0Lrd1UZE3zRoe+TTTARC6o4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzgwQjc5NURFMjAwRTExRUNCREJEMEIwNUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtz6owDQYJKoZIhvcNAQELBQAD
ggEBADvMOEo1FwQabKKTSJCtWJNL/ck4weM7AjvAyPi96br7humPFYoy8pjCe8Eo
vByR7B0Kgy+gkPmmecBtTaaZrerrm9Z3psmwJoi/plRf86Yma9ONGv4UgCkhou9E
J/8XjsI8lK8HjczzKn8emAtmvNvzQooThX4U+W0QttetVOWWLlCPS2fYEJsU+Cdc
ORggJyI5DxzWyTcEqSxnXsZd5Zh1Wj7lM6G/HK41rmAQ+shcMPHK8wHZUxuWA5IE
eXj7EGwLX/i+5FeGTy40xc4R0UY9waXiDjzw37zR6dxaF/qEZkllbWdiXnaSQBj3
FUQrjnIZT+mFIEFXI3FFFngX/9I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org