Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E7E466A26B011ECBF76DE71D8A014CE.roa
File: 8E7E466A26B011ECBF76DE71D8A014CE.roa (raw, json)
Hash identifier: +JzaPkEvzTOmL7ZHHKtTnQZGz27Nlq5ek0S2tMrWcGc=
Subject key identifier: EF:25:3F:4B:BE:0A:89:00:8E:B6:BC:50:78:70:8C:79:D5:ED:BC:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E7E466A26B011ECBF76DE71D8A014CE.roa
Signing time: Wed 06 Oct 2021 14:20:29 +0000
ROA not before: Wed 06 Oct 2021 14:20:25 +0000
ROA not after: Tue 19 Jul 2022 14:20:25 +0000
asID: 7018
IP address blocks: 45.199.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 14:20:25 2021 GMT
Not After : Jul 19 14:20:25 2022 GMT
Subject: CN=615db0ad-d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:30:0e:0b:19:b3:3a:5c:4c:6f:75:96:ee:
a6:36:33:bd:82:b2:27:49:1e:af:57:34:c9:36:b0:
2c:d2:89:5b:ce:4f:1c:be:cb:c9:cf:e2:4a:80:fc:
4b:81:08:dd:a3:0c:b3:83:2e:dc:ee:30:2c:9a:94:
5a:e0:d4:3b:05:17:95:15:0b:e4:97:07:64:e1:6c:
8c:76:df:4a:0a:29:15:78:f3:8c:f4:44:d8:ca:81:
97:c9:78:93:44:00:a6:74:9d:0d:ae:cb:4b:30:df:
0d:31:c0:a6:67:be:a7:37:1d:99:f4:66:b5:95:b7:
1e:fd:8c:a5:10:17:61:2f:c4:8d:91:36:96:0c:88:
16:ec:c3:8c:f3:dd:91:6d:31:a8:74:eb:d2:c3:35:
df:b2:db:47:96:9a:48:40:ec:f2:53:b0:90:0b:d2:
e4:cf:43:6a:7e:84:b6:9c:ef:12:fd:f7:4c:ff:00:
6f:2a:1c:c4:5d:98:44:64:c7:4c:21:39:dd:cd:50:
f8:e6:9c:c1:ec:e9:9b:3d:2a:77:8a:3c:4d:d4:ab:
92:35:95:64:f5:6a:52:c9:42:4f:fd:3a:93:ae:44:
06:a0:60:ec:12:59:a5:ff:dc:82:d1:35:6a:72:3b:
c6:b5:5f:69:bf:2c:4b:af:43:7c:c1:84:9e:7e:b3:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:3F:4B:BE:0A:89:00:8E:B6:BC:50:78:70:8C:79:D5:ED:BC:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E7E466A26B011ECBF76DE71D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.152.0/24
Signature Algorithm: sha256WithRSAEncryption
22:97:8d:b7:6b:e1:51:ed:31:c3:11:f3:a7:59:97:d3:ad:18:
09:02:21:77:6b:ad:81:5b:16:f7:ad:61:09:8c:c6:78:07:1f:
4e:d1:c4:e6:0b:63:9b:df:5d:53:84:2f:0d:37:77:fb:b6:b3:
fa:1d:2a:af:9a:d6:45:9c:80:0c:2d:e2:56:5c:d3:a1:b7:67:
1d:94:04:80:ad:68:ec:69:4f:db:4a:39:7a:c4:84:6b:5a:7f:
08:53:de:d3:a9:8c:f0:eb:9a:82:ac:1a:4c:ce:37:43:26:b1:
e9:f6:4b:86:07:f3:16:3a:47:95:9f:2b:46:44:a5:45:7e:13:
83:f1:8a:01:bb:b8:99:95:74:ae:88:71:c4:8e:8a:c2:60:22:
28:4a:ba:96:47:83:60:4b:ac:09:28:65:30:ec:53:0b:9e:99:
6e:8d:4e:ee:de:b1:d5:d2:03:67:10:2c:c5:2d:c7:21:4a:40:
ae:f0:44:29:4b:58:bc:3a:fe:a5:4f:eb:c3:06:b1:9a:1e:14:
7c:2d:55:3a:7c:32:08:66:e4:86:28:e3:10:d4:5d:e5:fe:42:
bf:f1:54:01:5b:57:3d:3b:db:bc:75:30:93:01:99:58:4d:1b:
46:e4:02:df:6d:53:62:af:de:18:f0:ee:20:29:a2:0f:55:a7:
cf:f9:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org