Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2B48A057CF11ECBFABBEB45A40D577.roa
File: 9A2B48A057CF11ECBFABBEB45A40D577.roa (raw, json)
Hash identifier: VKvfZWxkYxh/3WV29wVrINX1bfm+X4yO1Px0l/T0Cis=
Subject key identifier: 5C:7F:E2:B8:FF:99:C6:5F:A9:5A:6A:9A:A1:6F:A8:3B:EA:82:22:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 107A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2B48A057CF11ECBFABBEB45A40D577.roa
Signing time: Wed 08 Dec 2021 02:36:10 +0000
ROA not before: Wed 08 Dec 2021 02:36:07 +0000
ROA not after: Fri 30 Dec 2022 02:36:07 +0000
asID: 9009
IP address blocks: 45.192.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:36:07 2021 GMT
Not After : Dec 30 02:36:07 2022 GMT
Subject: CN=61b01a1a-c1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:9d:5d:74:56:58:3d:3e:c5:9f:f4:ff:3b:
f7:6a:56:5a:d8:9a:36:99:58:72:b0:be:dd:71:6b:
3b:e9:8a:94:e1:74:37:29:ce:7c:a0:b3:61:20:ac:
9b:01:b8:bf:31:4d:f6:e0:4d:3d:94:59:3e:87:50:
56:ba:4a:70:db:ab:58:ce:ed:10:f7:4a:23:73:c6:
fa:80:d5:a4:ee:ec:c1:c8:48:bb:93:40:1f:32:0d:
6e:4e:dc:9b:dc:85:ad:d4:94:03:d6:cd:66:ac:e1:
c0:83:bf:e3:c6:10:f8:ff:20:80:1b:d8:11:3f:98:
74:d2:24:5f:07:f8:9f:22:fd:00:e2:cd:af:f3:f6:
ac:0e:d9:2c:32:12:c8:de:4e:fe:33:3e:06:a5:96:
a9:a0:55:46:00:ba:1a:52:7d:83:6c:f8:9a:aa:8c:
33:35:63:7b:50:21:a3:de:81:2c:1f:11:8c:25:15:
1b:d7:08:69:ee:98:d1:07:ee:d9:ce:b5:29:be:0d:
e4:37:5b:bd:84:ec:31:d1:e1:da:31:93:ec:ee:de:
0c:a3:35:eb:ed:16:03:62:48:48:3d:4e:b8:65:e7:
ca:26:83:11:fd:04:3f:8b:ef:c5:55:4e:b5:f3:ce:
00:2c:5d:7f:3c:78:7b:72:3c:01:33:65:fe:e1:7f:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7F:E2:B8:FF:99:C6:5F:A9:5A:6A:9A:A1:6F:A8:3B:EA:82:22:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2B48A057CF11ECBFABBEB45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f1:0f:c9:61:82:f3:93:88:3a:40:c4:c3:8b:43:67:31:28:
81:1a:87:df:87:71:30:60:17:6a:84:3b:7c:b9:ef:d9:98:da:
4d:aa:5a:79:78:41:7d:5b:c8:67:82:b8:15:03:5d:62:01:f5:
10:83:0a:75:b3:9e:0f:03:24:85:ff:b1:72:80:27:5c:52:1c:
4e:74:1f:e1:87:12:3d:a8:34:da:ff:c4:31:7b:b2:a8:dc:ae:
dc:7a:1f:3b:6d:c1:4d:f1:16:05:ce:2c:c4:61:36:ec:52:37:
92:f5:32:14:c2:67:1e:e3:57:a7:d2:4e:82:cb:bc:55:d6:f3:
00:01:5c:8e:8d:bb:8a:33:f9:62:13:af:64:d5:48:26:1d:3b:
c9:0e:3a:4b:f9:fd:75:ae:d6:49:51:89:81:e9:fd:80:b1:6d:
fa:67:97:bf:76:71:d0:b5:03:55:61:70:5c:26:17:ce:05:d7:
68:ea:22:2a:72:6f:ae:a0:8b:fc:bb:d7:95:8b:3a:75:6e:bf:
97:55:a3:0e:f3:39:2f:b3:b7:7d:dc:bc:fa:6f:fa:0e:c9:0b:
de:5c:45:67:7f:81:95:7e:8b:79:f9:f4:a9:8d:d5:18:c9:0b:
9e:10:3d:41:6c:6a:88:7c:68:c5:65:f0:7d:e8:4d:d7:f0:40:
df:8a:05:01
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEHowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjM2MDdaFw0yMjEyMzAwMjM2MDdaMBgxFjAU
BgNVBAMMDTYxYjAxYTFhLWMxYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUEJ1ddFZYPT7Fn/T/O/dqVlrYmjaZWHKwvt1xazvpipThdDcpznygs2Eg
rJsBuL8xTfbgTT2UWT6HUFa6SnDbq1jO7RD3SiNzxvqA1aTu7MHISLuTQB8yDW5O
3Jvcha3UlAPWzWas4cCDv+PGEPj/IIAb2BE/mHTSJF8H+J8i/QDiza/z9qwO2Swy
EsjeTv4zPgallqmgVUYAuhpSfYNs+JqqjDM1Y3tQIaPegSwfEYwlFRvXCGnumNEH
7tnOtSm+DeQ3W72E7DHR4doxk+zu3gyjNevtFgNiSEg9Trhl58omgxH9BD+L78VV
TrXzzgAsXX88eHtyPAEzZf7hfyCDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXH/i
uP+Zxl+pWmqaoW+oO+qCIn4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlBMkI0OEEwNTdDRjExRUNCRkFCQkVCNDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwJswDQYJKoZIhvcNAQELBQAD
ggEBAEzxD8lhgvOTiDpAxMOLQ2cxKIEah9+HcTBgF2qEO3y579mY2k2qWnl4QX1b
yGeCuBUDXWIB9RCDCnWzng8DJIX/sXKAJ1xSHE50H+GHEj2oNNr/xDF7sqjcrtx6
HzttwU3xFgXOLMRhNuxSN5L1MhTCZx7jV6fSToLLvFXW8wABXI6Nu4oz+WITr2TV
SCYdO8kOOkv5/XWu1klRiYHp/YCxbfpnl792cdC1A1VhcFwmF84F12jqIipyb66g
i/y715WLOnVuv5dVow7zOS+zt33cvPpv+g7JC95cRWd/gZV+i3n59KmN1RjJC54Q
PUFsaoh8aMVl8H3oTdfwQN+KBQE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org