Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81E75DC057EC11ECB75E2B8D5A40D577.roa
File: 81E75DC057EC11ECB75E2B8D5A40D577.roa (raw, json)
Hash identifier: xXa6CbN0M3XJs1pcbx1RBVvkRHV+aUSEIN+zV9XcqrY=
Subject key identifier: B5:05:9C:47:91:4C:88:A1:D5:48:A9:72:32:2D:9E:2E:02:3E:C9:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81E75DC057EC11ECB75E2B8D5A40D577.roa
Signing time: Wed 08 Dec 2021 06:03:05 +0000
ROA not before: Wed 08 Dec 2021 06:03:01 +0000
ROA not after: Sun 30 Oct 2022 06:03:01 +0000
asID: 135386
IP address blocks: 45.204.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4277 (0x10b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 06:03:01 2021 GMT
Not After : Oct 30 06:03:01 2022 GMT
Subject: CN=61b04a98-824a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:07:34:0c:31:ec:07:07:df:75:50:9f:1a:
68:21:62:e2:f7:ae:39:fa:2d:8f:d7:ee:4c:db:e8:
fb:4a:09:45:d3:6f:57:48:68:d6:8f:ef:71:09:a1:
cb:91:91:a1:05:5a:d7:0e:fb:d6:4c:63:03:3b:f4:
f8:5b:95:2c:95:49:d9:89:23:b7:50:81:1d:76:66:
5e:03:92:aa:ce:b3:0b:4e:a6:eb:b5:fc:83:22:3c:
dc:7f:e2:25:2d:90:23:33:55:5c:64:73:96:b8:c6:
78:7d:50:17:25:93:8d:ee:fb:88:8d:ab:83:ec:a3:
3a:63:8b:2e:73:6c:03:95:57:21:1c:6a:c6:cd:05:
ab:1a:15:c4:9e:19:d7:e9:c2:49:1e:e8:b6:49:76:
10:53:7d:13:6f:60:b4:c5:0e:94:26:e0:90:df:44:
69:35:bd:65:9f:b1:66:7d:ea:b9:7d:c8:c3:ac:a0:
2c:f2:30:32:e1:df:84:2c:12:ee:05:74:10:b0:8e:
69:aa:c2:a6:07:f4:a0:3e:cb:1f:41:a7:71:e6:0d:
91:1e:d5:01:b5:e5:35:7a:60:08:bf:bc:6d:b6:50:
4e:90:5b:73:96:fc:fb:2e:41:a8:b4:6b:c9:78:0c:
46:77:67:1e:d6:b2:ab:86:8a:b3:ab:80:1c:40:46:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:9C:47:91:4C:88:A1:D5:48:A9:72:32:2D:9E:2E:02:3E:C9:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81E75DC057EC11ECB75E2B8D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.32.0/19
Signature Algorithm: sha256WithRSAEncryption
95:ed:78:f6:8b:32:2c:c6:84:5a:ca:9a:17:00:78:74:53:11:
b1:b1:2e:3e:78:e0:c6:cd:fc:e4:7a:de:46:fa:cd:a6:7d:ae:
7e:69:35:69:ee:64:e0:d8:0c:18:0b:2c:d9:3e:f1:12:af:2c:
28:eb:44:45:97:ea:3d:93:69:a7:e2:9b:27:d5:ae:23:bd:35:
d3:88:53:87:ce:91:20:02:f8:13:c6:89:6f:0a:37:4b:c0:f0:
97:42:2c:bd:fd:ef:0b:b2:30:2d:56:93:ff:00:fe:31:55:8d:
3e:0a:da:ee:ab:0b:e8:d9:00:99:0f:a7:a4:fb:f4:7a:9d:72:
4d:60:ab:82:76:fe:89:b8:0f:d9:d8:b9:a4:7b:aa:f1:9c:58:
5d:a9:0d:f8:2c:dc:0a:20:29:2f:ee:bf:31:52:38:d2:d8:42:
28:83:2a:f5:1e:50:f7:aa:01:00:53:50:89:dd:c7:a6:3f:9e:
58:75:30:29:78:bb:2f:ad:50:b8:1d:96:73:bb:b9:be:b8:66:
8f:6b:5d:3d:c2:2f:c7:78:1f:61:a5:b5:11:5d:8e:ff:64:b3:
9d:5c:bb:1e:76:8d:d9:7a:07:6a:d3:c8:d0:67:d6:46:b2:48:
72:fa:4e:b8:36:b9:4d:eb:48:ba:7e:fc:cf:0b:b6:76:dc:d6:
a3:5c:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org