Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
File: 8878D5C8FB5411EB995E1D56D8A014CE.roa (raw, json)
Hash identifier: 5qkkUavVpys96WuSd1b4wltNxD1TpT6DvTQ8yrBNcZc=
Subject key identifier: 48:5D:5A:4C:D9:6B:F3:E2:9D:AC:65:F7:95:9E:F6:F8:18:15:DE:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0894
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
Signing time: Thu 12 Aug 2021 10:04:07 +0000
ROA not before: Thu 12 Aug 2021 10:03:53 +0000
ROA not after: Fri 12 Aug 2022 10:03:53 +0000
asID: 35916
IP address blocks: 45.195.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 10:03:53 2021 GMT
Not After : Aug 12 10:03:53 2022 GMT
Subject: CN=6114f217-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:2b:34:76:01:d8:55:3a:4e:85:06:a4:07:
01:39:2f:71:58:01:25:4e:83:27:72:ab:47:cd:ca:
30:4a:20:15:7e:21:b8:fb:7b:59:e7:4d:7b:50:55:
7e:16:d4:bd:97:c5:a0:39:a5:da:6e:8e:2c:3b:2c:
c9:cd:f9:13:b2:b6:97:3f:ca:19:c6:64:13:69:56:
4c:cf:18:20:67:44:55:24:4f:78:81:10:a9:55:54:
38:d5:b1:81:87:36:55:a3:38:bd:89:46:ae:ab:82:
70:2e:c3:0a:dd:c1:b7:0d:1e:93:9d:7c:df:f6:e9:
c3:c3:1a:8d:ff:63:1d:c5:d1:4c:a0:1e:8a:70:a5:
e9:f0:61:02:e5:6a:11:6b:09:7e:a1:1c:3f:e1:8a:
ac:1b:fb:8e:b1:62:2c:3a:ce:f8:61:90:09:10:ab:
2e:d5:33:36:75:a9:3f:51:87:99:a5:f9:bc:03:af:
02:13:38:36:44:c2:69:b1:83:20:5f:e7:6c:95:28:
21:a5:c6:4f:ea:b1:20:ef:3e:2e:bf:6d:2d:bd:d2:
f4:b1:79:5f:a1:5b:4e:54:df:70:ed:38:e2:ee:4a:
98:29:2b:cb:cb:bc:be:e6:7e:18:de:81:7c:ef:44:
7e:e9:15:3a:c7:e7:04:07:cb:9a:57:76:66:8d:6c:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:5A:4C:D9:6B:F3:E2:9D:AC:65:F7:95:9E:F6:F8:18:15:DE:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8878D5C8FB5411EB995E1D56D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:20:f7:c6:c1:35:42:7e:e2:ea:17:c7:17:68:42:20:6d:56:
90:23:90:a7:58:9c:1d:7e:71:8c:e3:c7:62:6b:cd:c6:10:b9:
0f:0d:1f:ee:91:7c:7b:26:5b:97:f7:39:2f:06:80:37:80:56:
56:c0:fb:ca:7d:71:71:3f:cd:b2:b9:fa:c0:53:37:89:aa:b0:
6c:2b:8a:26:d1:75:a8:c4:b4:40:58:6f:07:87:0f:7c:72:28:
58:1d:7a:da:e7:c1:15:73:6f:7a:af:1b:18:79:f7:9b:83:34:
20:d0:ce:b1:bb:c4:df:0d:6e:83:e8:66:e5:b4:1d:4a:65:da:
f5:4f:af:cc:8e:ff:70:94:16:9b:c2:de:fd:80:3c:6c:00:66:
33:64:99:32:0e:4d:53:36:ea:2b:b8:ea:33:e8:23:0a:f8:2a:
20:94:2d:7f:59:28:75:6e:7e:d7:a5:de:48:e2:cc:5e:39:c2:
56:a1:dc:9f:51:21:c6:a3:e7:75:2a:fd:c7:a0:f1:64:56:df:
f2:de:cf:60:d0:82:f5:51:f7:c2:94:1f:d9:60:6e:bc:f3:ae:
a9:9b:25:fd:19:b5:2b:d0:3b:ef:44:fe:8b:14:d5:14:3e:a6:
11:0e:a3:53:2b:bf:43:3c:b8:2c:19:c5:b5:59:50:a8:be:c5:
5c:5b:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org