Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A55542EE90D11EBB6585A6AD8A014CE.roa
File: 8A55542EE90D11EBB6585A6AD8A014CE.roa (raw, json)
Hash identifier: WkXkOiuhcNUNzisFAsjDEqrAhnx8OSTd+RLd6wqnwMk=
Subject key identifier: 7C:8D:9F:B2:8B:F7:62:7A:9B:66:72:3E:63:DE:A4:DD:82:C4:9C:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 078C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A55542EE90D11EBB6585A6AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:50:00 +0000
ROA not before: Tue 20 Jul 2021 03:49:57 +0000
ROA not after: Thu 15 Sep 2022 03:49:57 +0000
asID: 1239
IP address blocks: 45.205.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:49:57 2021 GMT
Not After : Sep 15 03:49:57 2022 GMT
Subject: CN=60f647e8-abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:5e:d3:3c:9d:d6:68:95:59:fe:5d:9d:db:
48:8b:8d:73:6a:b6:41:64:c9:83:67:a1:67:0b:6f:
5f:d5:97:82:f9:a2:66:15:ce:3c:e1:4f:54:71:73:
66:e0:5a:84:ec:32:70:76:98:1e:64:1d:49:dd:18:
6b:c5:f5:c4:10:f7:ee:4a:d9:ad:b6:22:c0:d5:ec:
0d:4d:5a:6e:3b:ae:b6:dd:fa:51:c8:ef:07:95:15:
78:07:e2:63:72:6c:fc:f5:1b:1d:d9:80:ee:cc:8a:
85:2a:8a:cd:af:ca:d2:7b:37:27:a3:4a:60:30:60:
bf:fa:e4:4a:47:c2:73:f7:4e:24:75:15:4b:ce:92:
bd:e6:6c:07:0a:6a:b1:de:50:36:ad:83:45:4d:f2:
1c:29:dd:64:e5:36:2f:26:69:00:83:bb:25:c6:89:
8c:83:b3:b1:02:5e:22:b6:63:ad:32:ab:9c:f5:34:
53:82:9d:80:89:30:80:84:14:48:ba:d0:69:b9:a5:
55:fa:04:04:97:90:a2:97:8c:29:d8:31:bd:9c:58:
cd:22:a3:d6:45:8e:88:30:15:cd:78:9e:0a:c7:e0:
d0:be:2b:35:65:b7:18:35:b0:9d:e7:5c:3b:13:b8:
ac:b1:f5:f2:18:21:62:ff:41:c9:8a:09:e5:a7:70:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:9F:B2:8B:F7:62:7A:9B:66:72:3E:63:DE:A4:DD:82:C4:9C:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A55542EE90D11EBB6585A6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:ce:5b:f6:84:e2:e8:4c:95:d4:f0:7c:7a:17:ec:1e:24:fb:
97:dd:1b:a4:60:d5:f1:6d:6e:d4:da:96:26:1b:fe:90:53:c9:
33:a5:4b:3b:fa:54:c2:9a:24:8d:d5:c3:35:4c:ae:a2:a2:32:
af:62:ad:df:07:78:22:f0:9c:9a:7a:bb:03:87:04:1c:b1:d1:
f5:ec:df:7a:90:3d:09:56:f8:75:55:a5:b0:88:82:62:b2:27:
ef:29:4b:da:b4:f6:10:2b:da:94:af:ed:a1:c7:61:d4:51:57:
48:fe:91:79:f3:52:bd:de:b7:32:09:e6:83:76:98:ba:be:7a:
55:2f:e4:33:ff:b6:9e:45:94:b1:85:a0:18:64:b6:7f:3e:c0:
0b:02:59:b6:43:0b:32:7e:a9:7f:c8:9a:74:ce:5e:84:9b:7f:
e5:90:11:70:ff:4a:24:1f:56:f8:76:71:ed:88:11:df:10:9f:
7e:bb:7b:4d:6d:7b:9d:71:55:28:32:88:19:fa:b1:d4:5b:e2:
a4:de:49:38:47:0f:42:61:6d:55:9d:c1:0a:50:73:11:59:7d:
31:cd:27:14:67:2a:04:3a:f8:ca:68:14:b7:2c:1d:ba:2e:89:
40:3f:e1:ff:7c:35:5d:7f:d1:9b:a0:36:06:cd:f9:2c:7f:2a:
f0:0d:97:38
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjAwMzQ5NTdaFw0yMjA5MTUwMzQ5NTdaMBgxFjAU
BgNVBAMMDTYwZjY0N2U4LWFiZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxQ17TPJ3WaJVZ/l2d20iLjXNqtkFkyYNnoWcLb1/Vl4L5omYVzjzhT1Rx
c2bgWoTsMnB2mB5kHUndGGvF9cQQ9+5K2a22IsDV7A1NWm47rrbd+lHI7weVFXgH
4mNybPz1Gx3ZgO7MioUqis2vytJ7NyejSmAwYL/65EpHwnP3TiR1FUvOkr3mbAcK
arHeUDatg0VN8hwp3WTlNi8maQCDuyXGiYyDs7ECXiK2Y60yq5z1NFOCnYCJMICE
FEi60Gm5pVX6BASXkKKXjCnYMb2cWM0io9ZFjogwFc14ngrH4NC+KzVltxg1sJ3n
XDsTuKyx9fIYIWL/QcmKCeWncAudAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfI2f
sov3YnqbZnI+Y96k3YLEnAIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhBNTU1NDJFRTkwRDExRUJCNjU4NUE2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtzcAwDQYJKoZIhvcNAQELBQAD
ggEBAC/OW/aE4uhMldTwfHoX7B4k+5fdG6Rg1fFtbtTaliYb/pBTyTOlSzv6VMKa
JI3VwzVMrqKiMq9ird8HeCLwnJp6uwOHBByx0fXs33qQPQlW+HVVpbCIgmKyJ+8p
S9q09hAr2pSv7aHHYdRRV0j+kXnzUr3etzIJ5oN2mLq+elUv5DP/tp5FlLGFoBhk
tn8+wAsCWbZDCzJ+qX/ImnTOXoSbf+WQEXD/SiQfVvh2ce2IEd8Qn367e01te51x
VSgyiBn6sdRb4qTeSThHD0JhbVWdwQpQcxFZfTHNJxRnKgQ6+MpoFLcsHbouiUA/
4f98NV1/0ZugNgbN+Sx/KvANlzg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org