Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9B25E6693A11EC868D498C5A40D577.roa
File: 8A9B25E6693A11EC868D498C5A40D577.roa (raw, json)
Hash identifier: l5boboqlePr1Pzm85YT1jHU5IBZmV7jnEBxlas4E7Bc=
Subject key identifier: F3:89:43:BE:A4:F3:57:F1:DB:38:F5:C3:CA:23:99:1E:8B:92:F8:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1124
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9B25E6693A11EC868D498C5A40D577.roa
Signing time: Thu 30 Dec 2021 06:34:30 +0000
ROA not before: Thu 30 Dec 2021 06:34:26 +0000
ROA not after: Tue 30 Aug 2022 06:34:26 +0000
asID: 1239
IP address blocks: 45.205.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4388 (0x1124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 30 06:34:26 2021 GMT
Not After : Aug 30 06:34:26 2022 GMT
Subject: CN=61cd52f6-81ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:73:74:4e:8e:d4:43:eb:53:76:15:cf:47:
a1:de:3a:7a:0a:e1:7e:1d:2f:c0:b1:1f:dd:02:57:
d7:7b:c7:aa:cc:07:36:6b:b3:04:3a:66:04:ec:f5:
3b:bf:b0:d7:c0:5d:0b:bc:63:88:76:f7:65:00:68:
88:96:f2:aa:4e:04:00:c7:66:0d:42:33:79:d7:de:
c2:e6:dd:85:40:84:d8:86:16:72:4c:36:27:96:2d:
30:d4:1f:02:a5:11:8d:ef:38:43:9a:bb:46:82:1e:
28:8b:c2:dd:1d:50:2a:80:57:98:d6:e1:8d:0e:a5:
d9:92:3f:e8:f6:55:07:5d:b2:28:da:0e:a3:3d:c9:
f2:86:a8:1f:b5:5c:a7:c0:e3:66:be:3a:e1:6c:b0:
85:7c:89:39:c2:d3:d2:9c:c0:08:b7:5c:fa:6d:bf:
f1:41:7b:c8:99:d4:f7:5a:c1:44:7f:3d:80:2a:5c:
a6:1b:b7:af:e4:f8:97:90:54:07:9d:ba:b2:22:7b:
b4:88:01:40:79:47:be:1b:b6:8f:5d:fc:f3:94:ab:
27:ad:2c:ea:ef:71:d1:09:e1:21:78:88:35:eb:81:
eb:ee:68:8c:87:17:b1:b9:29:28:2c:c5:a5:20:08:
31:b8:03:24:c3:fb:43:88:a6:9a:c3:2b:92:0b:f0:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:89:43:BE:A4:F3:57:F1:DB:38:F5:C3:CA:23:99:1E:8B:92:F8:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A9B25E6693A11EC868D498C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:72:65:80:c2:95:8a:74:cd:9f:1a:c1:54:81:b8:b9:e1:04:
67:0f:02:d5:06:8e:39:9d:9e:42:0e:1d:ca:65:b9:08:45:95:
a1:59:b3:09:ba:49:f7:ac:f3:41:ed:69:96:49:59:b0:7c:84:
a8:97:d1:e2:5c:d9:ef:d0:9c:48:26:dd:a9:9a:35:99:23:bd:
f3:a0:c7:30:b2:98:6b:fb:ab:74:7d:7b:ce:0f:4b:e8:14:61:
84:43:f0:9c:5a:07:5b:e8:3d:e8:ed:59:02:d9:0f:92:99:6c:
0f:48:ad:f8:f7:8a:1f:97:d3:ed:cb:82:6e:c0:98:f3:b1:e3:
9f:e1:5f:9e:db:bb:f7:c9:da:82:de:86:e5:6f:7d:45:5c:67:
78:71:1b:ce:53:1c:90:5a:29:62:68:28:94:b8:9f:92:55:dc:
d0:d7:a8:dc:cb:e4:09:37:ae:a9:e5:17:a0:0e:a0:c9:d7:58:
bf:57:76:af:5f:01:22:50:33:f8:2c:9e:70:40:13:72:72:66:
39:8a:74:92:b6:b2:2f:71:a0:31:0a:c7:57:d8:0c:22:8b:36:
55:5c:99:d0:fe:2f:e1:73:cd:7b:26:b2:67:2c:59:6f:20:c1:
b7:46:dc:78:e1:ed:26:f9:75:cd:7e:84:cc:b5:79:06:59:a0:
bb:df:52:21
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICESQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMzAwNjM0MjZaFw0yMjA4MzAwNjM0MjZaMBgxFjAU
BgNVBAMMDTYxY2Q1MmY2LTgxZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3nHN0To7UQ+tTdhXPR6HeOnoK4X4dL8CxH90CV9d7x6rMBzZrswQ6ZgTs
9Tu/sNfAXQu8Y4h292UAaIiW8qpOBADHZg1CM3nX3sLm3YVAhNiGFnJMNieWLTDU
HwKlEY3vOEOau0aCHiiLwt0dUCqAV5jW4Y0OpdmSP+j2VQddsijaDqM9yfKGqB+1
XKfA42a+OuFssIV8iTnC09KcwAi3XPptv/FBe8iZ1PdawUR/PYAqXKYbt6/k+JeQ
VAedurIie7SIAUB5R74bto9d/POUqyetLOrvcdEJ4SF4iDXrgevuaIyHF7G5KSgs
xaUgCDG4AyTD+0OIpprDK5IL8NLpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU84lD
vqTzV/HbOPXDyiOZHouS+PYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhBOUIyNUU2NjkzQTExRUM4NjhENDk4QzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtzXAwDQYJKoZIhvcNAQELBQAD
ggEBAFpyZYDClYp0zZ8awVSBuLnhBGcPAtUGjjmdnkIOHcpluQhFlaFZswm6Sfes
80HtaZZJWbB8hKiX0eJc2e/QnEgm3amaNZkjvfOgxzCymGv7q3R9e84PS+gUYYRD
8JxaB1voPejtWQLZD5KZbA9Irfj3ih+X0+3Lgm7AmPOx45/hX57bu/fJ2oLehuVv
fUVcZ3hxG85THJBaKWJoKJS4n5JV3NDXqNzL5Ak3rqnlF6AOoMnXWL9Xdq9fASJQ
M/gsnnBAE3JyZjmKdJK2si9xoDEKx1fYDCKLNlVcmdD+L+FzzXsmsmcsWW8gwbdG
3Hjh7Sb5dc1+hMy1eQZZoLvfUiE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org