Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841B1A7E13D411ED9F72B4AFF1222468.roa
File: 841B1A7E13D411ED9F72B4AFF1222468.roa (raw, json)
Hash identifier: RrZoaCFnWRphLl1BkRZvOsIJy0SLO/0zrb38SYCpmuQ=
Subject key identifier: 2F:AF:0F:5E:36:DE:2B:14:4B:4F:19:82:3D:0A:33:91:3C:AB:65:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1672
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841B1A7E13D411ED9F72B4AFF1222468.roa
Signing time: Thu 04 Aug 2022 09:04:59 +0000
ROA not before: Thu 04 Aug 2022 09:04:55 +0000
ROA not after: Fri 10 Feb 2023 09:04:55 +0000
asID: 133861
IP address blocks: 45.207.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5746 (0x1672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 09:04:55 2022 GMT
Not After : Feb 10 09:04:55 2023 GMT
Subject: CN=62eb8bbb-6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:7b:2e:68:cf:c9:de:35:13:3a:b7:2e:5e:
f1:57:d6:f3:c5:9c:d8:23:bc:79:c1:51:21:e2:b5:
7d:23:58:81:ad:a0:00:ff:ab:fd:24:a4:52:e6:8c:
7d:23:c7:90:d0:27:84:d9:d5:45:f5:6b:4a:17:7b:
a2:c9:4d:da:dc:8a:f7:fc:34:9a:e2:45:ae:35:31:
0a:30:5b:0b:3f:98:64:4b:c2:a1:9f:3e:aa:d4:8f:
93:ed:d2:4d:88:f9:94:0d:c2:38:85:53:60:dd:21:
e7:ae:fc:bf:e3:2c:48:a6:ad:ca:14:1d:2d:30:62:
d7:f7:06:e1:2d:d1:2b:5d:4c:48:20:7b:d8:c4:ac:
2b:3c:4b:74:33:6c:3a:df:ba:e5:45:cb:d9:8d:f6:
18:88:71:13:e9:35:5d:e9:06:07:42:92:03:34:16:
75:20:fb:f2:5e:5b:53:49:48:70:3e:18:40:ae:0f:
57:de:ce:72:30:69:73:2d:be:06:76:57:8c:89:6c:
ef:c1:09:d9:62:33:85:db:02:bf:39:34:ef:1d:eb:
b1:aa:34:f8:d8:d0:9b:98:ca:27:c1:16:6f:85:17:
fb:12:b1:d5:9a:c5:c1:5a:27:a0:a2:5e:24:68:69:
02:ed:7d:da:34:e0:35:6b:d9:36:5a:d3:43:a6:90:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:0F:5E:36:DE:2B:14:4B:4F:19:82:3D:0A:33:91:3C:AB:65:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841B1A7E13D411ED9F72B4AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.60.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a5:08:80:b9:aa:79:02:82:3b:f2:78:bf:31:31:63:a2:fd:
85:50:39:45:98:36:d0:15:93:2b:24:4a:ec:e6:78:4e:aa:00:
ac:b1:88:14:a3:1b:99:36:bf:b6:dc:ab:e7:a4:5b:8b:a8:2c:
62:41:a4:2b:c8:ad:53:04:d2:62:57:b4:5b:27:47:12:2e:30:
2f:37:56:0f:72:8f:14:cc:af:7b:36:bd:6f:24:cb:9d:e5:ef:
b5:22:0b:44:02:b3:ce:85:18:ae:1a:56:39:4d:cc:75:c7:79:
cb:0f:21:9c:15:0c:54:de:8f:0f:30:61:ee:02:f8:64:f5:b6:
8f:ab:63:33:16:ef:2c:dd:1f:52:cf:bd:aa:d6:9f:ec:09:20:
ee:97:6b:90:dd:4d:c2:f1:a2:66:3f:ef:1b:99:74:de:3f:98:
1b:d2:b3:14:c9:1c:60:20:fc:eb:5c:7d:c8:29:dd:25:04:61:
42:ad:df:df:b3:04:b6:00:85:43:f9:fe:26:ec:16:89:dc:55:
1f:50:93:97:1f:5b:88:5a:32:dc:7a:2e:74:da:b1:22:53:b3:
4e:fa:4b:56:a6:d7:a5:5e:0b:5d:50:be:a8:62:97:c8:76:54:
2a:dc:33:d2:e1:9b:3b:c9:a5:ed:9a:f3:63:6c:57:83:06:e5:
ff:ec:02:72
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwOTA0NTVaFw0yMzAyMTAwOTA0NTVaMBgxFjAU
BgNVBAMMDTYyZWI4YmJiLTYyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCe3suaM/J3jUTOrcuXvFX1vPFnNgjvHnBUSHitX0jWIGtoAD/q/0kpFLm
jH0jx5DQJ4TZ1UX1a0oXe6LJTdrcivf8NJriRa41MQowWws/mGRLwqGfPqrUj5Pt
0k2I+ZQNwjiFU2DdIeeu/L/jLEimrcoUHS0wYtf3BuEt0StdTEgge9jErCs8S3Qz
bDrfuuVFy9mN9hiIcRPpNV3pBgdCkgM0FnUg+/JeW1NJSHA+GECuD1feznIwaXMt
vgZ2V4yJbO/BCdliM4XbAr85NO8d67GqNPjY0JuYyifBFm+FF/sSsdWaxcFaJ6Ci
XiRoaQLtfdo04DVr2TZa00OmkDwTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUL68P
XjbeKxRLTxmCPQozkTyrZfQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg0MUIxQTdFMTNENDExRUQ5RjcyQjRBRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzwwDQYJKoZIhvcNAQELBQAD
ggEBAJelCIC5qnkCgjvyeL8xMWOi/YVQOUWYNtAVkyskSuzmeE6qAKyxiBSjG5k2
v7bcq+ekW4uoLGJBpCvIrVME0mJXtFsnRxIuMC83Vg9yjxTMr3s2vW8ky53l77Ui
C0QCs86FGK4aVjlNzHXHecsPIZwVDFTejw8wYe4C+GT1to+rYzMW7yzdH1LPvarW
n+wJIO6Xa5DdTcLxomY/7xuZdN4/mBvSsxTJHGAg/Otcfcgp3SUEYUKt39+zBLYA
hUP5/ibsFoncVR9Qk5cfW4haMtx6LnTasSJTs076S1am16VeC11Qvqhil8h2VCrc
M9LhmzvJpe2a82NsV4MG5f/sAnI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org