Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90F6359A362F11ECA5EF8E52D8A014CE.roa
File: 90F6359A362F11ECA5EF8E52D8A014CE.roa (raw, json)
Hash identifier: iVQfgzy8M9OTSTZ0HYi13l/BbV6ejcoGVnHAEbjAymk=
Subject key identifier: 89:EC:A1:63:3E:BB:42:2C:2F:95:7D:89:1D:06:9A:1D:5F:33:1B:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90F6359A362F11ECA5EF8E52D8A014CE.roa
Signing time: Tue 26 Oct 2021 07:37:27 +0000
ROA not before: Tue 26 Oct 2021 07:37:22 +0000
ROA not after: Sat 26 Mar 2022 07:37:22 +0000
asID: 1239
IP address blocks: 45.195.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 26 07:37:22 2021 GMT
Not After : Mar 26 07:37:22 2022 GMT
Subject: CN=6177b037-3ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:a8:61:0b:c7:f0:25:d6:c4:32:72:ef:06:
d5:15:b6:21:ce:a1:e4:fb:89:11:cd:df:64:7a:cb:
0f:31:8b:77:b2:2a:84:22:bd:e8:06:20:ac:3f:42:
9d:0f:19:31:ae:23:ff:23:49:77:05:e8:ad:5f:ef:
af:63:ca:96:c8:f5:d1:4b:df:6c:78:c4:4d:ad:c8:
f2:a5:e1:da:47:85:bd:3d:79:ab:ab:eb:0b:22:57:
3c:00:53:6f:b8:2e:1d:31:6d:a6:5a:ba:58:d9:18:
f6:6b:51:1a:7d:9f:be:e0:df:6c:85:45:1a:dc:8c:
d4:33:f8:5f:5c:db:11:a4:47:b5:54:ff:e3:31:bf:
7d:9d:3c:6e:4f:82:36:f2:ec:51:10:73:9e:4a:66:
a4:fe:21:6c:23:f9:f3:78:e8:8b:8e:16:ec:54:22:
37:22:68:9f:d1:1d:f0:47:2d:e0:89:a8:ec:f1:8e:
68:6b:50:3d:fb:80:c4:a4:68:34:b8:57:1a:0c:46:
04:d6:47:bf:af:4a:47:92:13:59:9f:5d:e5:3c:26:
25:aa:ee:7f:f5:1f:a7:13:39:9c:0d:88:2c:f8:c8:
a0:4d:3a:16:ef:21:cc:68:19:bb:1b:7e:74:da:72:
b1:69:a8:83:93:2e:c5:86:a2:d2:3f:8f:b6:cd:28:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EC:A1:63:3E:BB:42:2C:2F:95:7D:89:1D:06:9A:1D:5F:33:1B:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90F6359A362F11ECA5EF8E52D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/21
Signature Algorithm: sha256WithRSAEncryption
32:70:4e:72:56:9b:43:44:14:aa:6a:40:90:a4:9c:ac:0a:21:
3b:57:e7:db:48:1b:f7:9f:54:fb:14:15:6e:65:80:8b:f7:e7:
f1:df:51:6c:ea:53:32:fa:e7:b9:3e:68:59:f0:f8:d0:18:e3:
00:39:f3:2a:59:d6:c4:e8:d0:91:52:09:89:30:fe:6d:a5:9e:
8c:ad:ba:39:4f:8d:b7:a4:cc:a4:7e:cf:b1:56:0f:05:81:9d:
b8:c5:01:d9:de:ad:4e:54:33:6d:8b:ee:32:5e:d8:2a:9a:26:
33:c1:b8:de:a3:c9:af:0b:62:e9:40:42:20:1b:ac:95:35:53:
c8:77:fc:79:b0:91:43:6e:e4:08:06:2f:4d:01:1b:9c:d1:9e:
91:4f:ac:bb:92:3a:fe:aa:88:8e:6c:c9:82:6a:be:ea:7b:47:
79:a5:9c:4a:15:ce:28:07:69:0d:06:e4:bc:67:86:85:fb:84:
f6:2c:8f:44:be:54:96:a3:6d:91:84:54:b6:a8:3b:72:75:be:
c5:07:53:73:5b:19:dd:05:ba:4c:2c:ef:0b:21:34:2e:65:ff:
92:1b:e1:d4:5c:f3:c5:31:b8:75:3a:8f:1c:d2:7a:7f:7f:7f:
2e:7d:f5:ea:29:1a:60:44:24:59:ed:a8:a8:ec:c4:da:f0:39:
03:7b:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org