Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86FB47B2074711ED840D67C7F1222468.roa
File: 86FB47B2074711ED840D67C7F1222468.roa (raw, json)
Hash identifier: 6TXbSNX19ugNUmjJC8uBqNyGBaivxwBARB3AxOcHqh4=
Subject key identifier: BB:C6:A2:44:E2:14:A8:CE:03:D7:B4:CC:1F:69:FE:E9:42:89:AC:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1594
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86FB47B2074711ED840D67C7F1222468.roa
Signing time: Tue 19 Jul 2022 09:45:31 +0000
ROA not before: Tue 19 Jul 2022 09:45:27 +0000
ROA not after: Tue 11 Jul 2023 09:45:27 +0000
asID: 138630
IP address blocks: 45.204.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5524 (0x1594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:45:27 2022 GMT
Not After : Jul 11 09:45:27 2023 GMT
Subject: CN=62d67d3b-c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:5a:87:47:c2:7e:5e:21:9d:20:c7:1b:50:
ee:c3:33:11:ce:47:47:ba:17:c7:7d:1c:bb:91:50:
c6:31:fe:71:34:ce:1f:24:20:0e:f5:13:09:32:30:
fa:2f:e4:c2:49:33:14:df:ae:c2:74:f4:60:38:0b:
f0:b0:0a:c4:4c:75:13:d2:95:c5:ce:6d:55:75:bc:
af:f4:90:bf:1c:98:5e:32:4d:c8:ee:f4:b9:ee:8d:
cf:35:69:50:d6:a2:64:f2:fb:a3:c2:81:37:00:df:
6e:3a:cc:c8:23:f9:f6:21:49:3d:35:c2:ce:f9:43:
6f:3c:3c:70:53:b0:8c:de:93:35:64:7b:a6:29:91:
35:8f:d6:46:49:26:9b:ee:ad:53:89:cf:59:a2:73:
33:8b:e1:61:fe:c1:92:e6:dd:f0:dc:a7:62:25:a0:
3a:79:4c:71:ba:12:b6:c4:8f:7a:99:2d:6b:1b:14:
47:64:19:56:b7:fd:06:cd:f6:8b:b7:b8:e3:1a:53:
38:6b:50:6b:0a:32:8f:8b:3c:23:9a:d8:de:f6:b2:
c6:3b:9c:c6:64:8d:cd:14:49:41:0d:91:66:ac:ef:
76:2a:00:51:31:e2:a2:49:d8:ca:9f:be:49:f9:fc:
f8:06:1d:1f:74:45:97:e5:9c:6b:55:df:06:7d:50:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:A2:44:E2:14:A8:CE:03:D7:B4:CC:1F:69:FE:E9:42:89:AC:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86FB47B2074711ED840D67C7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1c:00:82:68:9a:18:e5:2d:05:f0:b0:8d:79:5c:86:ea:17:
8f:56:a6:57:4e:e5:e6:ad:e3:a9:2d:e8:0c:56:56:10:76:f0:
af:1e:9b:76:12:f3:1c:7a:f5:ca:a4:25:0f:9b:20:14:57:f1:
d1:08:c4:01:1b:f3:96:14:98:01:ee:76:2b:13:11:b7:e0:cf:
4c:f9:2f:49:ab:aa:b5:b6:04:5a:9b:db:7c:59:fd:8c:ff:cc:
2d:9c:74:e4:e5:8a:35:f0:3f:66:bc:80:a6:f6:6f:0a:bb:ab:
a3:8d:49:02:29:6e:1d:a9:42:2e:5c:cc:77:c4:6e:48:73:ec:
47:49:fd:25:a3:83:f8:8d:7f:eb:92:eb:dd:b8:70:b5:fc:99:
54:86:06:07:41:5c:3b:e6:d1:f6:66:9f:ab:a4:41:05:9d:86:
8b:a6:62:b3:eb:fb:27:48:f4:14:d8:1e:10:45:9d:e8:54:a8:
92:63:9a:a3:3b:3e:f4:70:33:96:e2:dc:53:75:dc:98:13:e5:
f6:b1:d1:2c:f3:da:8e:29:a1:ac:2f:ee:b3:39:c1:77:e0:4d:
8b:a6:40:69:fc:85:42:03:36:fc:f6:51:57:58:53:a6:aa:6e:
2a:d5:4d:04:96:7b:e3:ab:24:57:25:6b:92:e3:ac:6d:f2:98:
92:ae:5b:e2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFZQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MTkwOTQ1MjdaFw0yMzA3MTEwOTQ1MjdaMBgxFjAU
BgNVBAMMDTYyZDY3ZDNiLWMxZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjUFqHR8J+XiGdIMcbUO7DMxHOR0e6F8d9HLuRUMYx/nE0zh8kIA71Ewky
MPov5MJJMxTfrsJ09GA4C/CwCsRMdRPSlcXObVV1vK/0kL8cmF4yTcju9Lnujc81
aVDWomTy+6PCgTcA3246zMgj+fYhST01ws75Q288PHBTsIzekzVke6YpkTWP1kZJ
JpvurVOJz1miczOL4WH+wZLm3fDcp2IloDp5THG6ErbEj3qZLWsbFEdkGVa3/QbN
9ou3uOMaUzhrUGsKMo+LPCOa2N72ssY7nMZkjc0USUENkWas73YqAFEx4qJJ2Mqf
vkn5/PgGHR90RZflnGtV3wZ9UOSvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUu8ai
ROIUqM4D17TMH2n+6UKJrNswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg2RkI0N0IyMDc0NzExRUQ4NDBENjdDN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzF0wDQYJKoZIhvcNAQELBQAD
ggEBAF8cAIJomhjlLQXwsI15XIbqF49WpldO5eat46kt6AxWVhB28K8em3YS8xx6
9cqkJQ+bIBRX8dEIxAEb85YUmAHudisTEbfgz0z5L0mrqrW2BFqb23xZ/Yz/zC2c
dOTlijXwP2a8gKb2bwq7q6ONSQIpbh2pQi5czHfEbkhz7EdJ/SWjg/iNf+uS6924
cLX8mVSGBgdBXDvm0fZmn6ukQQWdhoumYrPr+ydI9BTYHhBFnehUqJJjmqM7PvRw
M5bi3FN13JgT5fax0Szz2o4poawv7rM5wXfgTYumQGn8hUIDNvz2UVdYU6aqbirV
TQSWe+OrJFcla5LjrG3ymJKuW+I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org