Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846B2F8651C511ECAE61966CD8A014CE.roa
File: 846B2F8651C511ECAE61966CD8A014CE.roa (raw, json)
Hash identifier: gQC1u0PxJpOa/imFswQ1th6ixoAC5s0EUdkukxZrq3A=
Subject key identifier: 4D:74:C7:07:C5:1F:08:D2:C8:3F:7F:12:86:CB:FB:D3:4F:22:E1:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0FE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846B2F8651C511ECAE61966CD8A014CE.roa
Signing time: Tue 30 Nov 2021 10:08:52 +0000
ROA not before: Tue 30 Nov 2021 10:08:48 +0000
ROA not after: Wed 30 Mar 2022 10:08:48 +0000
asID: 1239
IP address blocks: 45.205.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 10:08:48 2021 GMT
Not After : Mar 30 10:08:48 2022 GMT
Subject: CN=61a5f833-4e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:47:ef:40:bf:b8:a0:a3:77:ae:d5:ba:0d:
d3:78:01:0b:a3:ec:b4:ef:a3:b0:ba:8e:cf:1f:f5:
dc:63:2b:bc:55:1a:36:62:cd:da:51:d1:9b:74:8a:
1e:b1:8f:cf:29:46:3f:20:6f:c1:fe:5c:6e:ef:a9:
0e:01:ec:de:5d:33:ca:16:b5:93:bb:8a:d9:10:55:
65:a5:f5:f1:3c:bb:26:de:e9:4b:82:2a:22:ea:0b:
3a:32:81:82:ff:cc:db:a8:f0:ed:2c:7e:59:f0:04:
c9:13:b7:3e:50:d9:e0:84:9d:31:86:fa:15:93:90:
af:81:60:bb:f8:6d:e7:95:f4:76:6b:fc:4d:c3:c7:
0d:c5:1d:28:12:6f:b0:c3:ff:bd:ea:ad:30:6a:f5:
90:7b:f7:ab:e5:42:db:7c:a5:a4:b4:f5:44:6f:79:
d3:5d:01:1e:a3:ad:93:7b:bb:95:bd:a3:43:95:84:
19:ae:cc:b3:89:51:54:b7:0a:30:37:2f:46:43:8f:
da:bf:64:7c:28:73:a5:cc:db:d9:79:ed:74:83:cf:
db:f0:b2:46:07:12:a9:3d:39:2b:9a:67:b8:e8:75:
ee:fe:b6:aa:c5:cd:5b:fa:63:45:c9:5f:b6:48:b6:
34:f5:33:e3:9f:5b:b2:18:26:04:26:2d:06:51:ed:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:C7:07:C5:1F:08:D2:C8:3F:7F:12:86:CB:FB:D3:4F:22:E1:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846B2F8651C511ECAE61966CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.240.0/22
Signature Algorithm: sha256WithRSAEncryption
98:0e:76:6b:24:4a:f3:c7:44:c2:83:bc:4c:82:5b:09:32:f6:
4e:94:d7:4b:3b:99:58:c9:3d:00:13:6b:36:61:c7:41:54:9a:
0e:fd:ec:64:f9:58:91:ed:d9:03:f9:23:8b:8d:42:27:8e:76:
b0:f7:31:20:20:3e:9c:91:56:91:cc:b9:60:66:e3:16:fa:90:
83:a9:7c:6b:da:62:09:ec:ee:3e:8d:49:03:a6:78:ed:55:fc:
f7:9a:10:bb:cc:72:79:b4:eb:59:93:d2:ea:df:fe:36:44:ea:
ea:be:64:ad:1c:a1:a4:c6:1a:b3:d9:45:93:4d:d3:06:87:8b:
74:a8:57:00:a7:8d:03:c5:1f:da:fa:9f:8c:40:4d:ac:e5:46:
e5:e0:ca:33:2b:23:93:16:89:8b:e6:40:5d:da:13:8b:b7:ef:
84:89:e4:96:42:04:e0:81:34:d7:92:e8:f6:7c:77:89:d5:be:
e6:e4:63:1b:9f:39:b7:55:da:93:27:63:54:37:e5:29:e0:01:
46:21:13:df:4a:2b:7b:e6:2c:a7:bb:dd:96:36:a2:4d:60:75:
97:27:ea:11:b9:5c:8e:25:f8:7d:27:9e:34:be:78:94:3d:f2:
cd:2a:81:34:62:4a:f0:85:77:c7:81:58:b7:09:20:d4:7d:05:
82:18:12:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMzAxMDA4NDhaFw0yMjAzMzAxMDA4NDhaMBgxFjAU
BgNVBAMMDTYxYTVmODMzLTRlMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe/kfvQL+4oKN3rtW6DdN4AQuj7LTvo7C6js8f9dxjK7xVGjZizdpR0Zt0
ih6xj88pRj8gb8H+XG7vqQ4B7N5dM8oWtZO7itkQVWWl9fE8uybe6UuCKiLqCzoy
gYL/zNuo8O0sflnwBMkTtz5Q2eCEnTGG+hWTkK+BYLv4beeV9HZr/E3Dxw3FHSgS
b7DD/73qrTBq9ZB796vlQtt8paS09URvedNdAR6jrZN7u5W9o0OVhBmuzLOJUVS3
CjA3L0ZDj9q/ZHwoc6XM29l57XSDz9vwskYHEqk9OSuaZ7jode7+tqrFzVv6Y0XJ
X7ZItjT1M+OfW7IYJgQmLQZR7SlXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTXTH
B8UfCNLIP38Shsv7008i4QUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg0NkIyRjg2NTFDNTExRUNBRTYxOTY2Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItzfAwDQYJKoZIhvcNAQELBQAD
ggEBAJgOdmskSvPHRMKDvEyCWwky9k6U10s7mVjJPQATazZhx0FUmg797GT5WJHt
2QP5I4uNQieOdrD3MSAgPpyRVpHMuWBm4xb6kIOpfGvaYgns7j6NSQOmeO1V/Pea
ELvMcnm061mT0urf/jZE6uq+ZK0coaTGGrPZRZNN0waHi3SoVwCnjQPFH9r6n4xA
TazlRuXgyjMrI5MWiYvmQF3aE4u374SJ5JZCBOCBNNeS6PZ8d4nVvubkYxufObdV
2pMnY1Q35SngAUYhE99KK3vmLKe73ZY2ok1gdZcn6hG5XI4l+H0nnjS+eJQ98s0q
gTRiSvCFd8eBWLcJINR9BYIYEm8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org