Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0CDD1028B211EC8C2B741ED8A014CE.roa
File: 9C0CDD1028B211EC8C2B741ED8A014CE.roa (raw, json)
Hash identifier: eOzeenA18no3xO12Jv2Lv2ByEkY4grWNRuL6ROrvwCU=
Subject key identifier: BA:4C:E7:94:EC:56:D2:A4:51:5F:26:80:A1:81:A1:5D:48:20:F4:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0CDD1028B211EC8C2B741ED8A014CE.roa
Signing time: Sat 09 Oct 2021 03:40:13 +0000
ROA not before: Sat 09 Oct 2021 03:40:09 +0000
ROA not after: Wed 09 Feb 2022 03:40:09 +0000
asID: 1239
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 03:40:09 2021 GMT
Not After : Feb 9 03:40:09 2022 GMT
Subject: CN=61610f1d-c0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:c8:d6:e0:2a:b6:56:e6:71:3c:d8:ac:46:
7a:7d:c1:22:3d:80:7f:16:0d:95:9a:08:f4:3b:35:
0e:7b:08:96:63:2c:02:cc:db:4d:e1:29:b8:a0:52:
40:49:1e:b0:ae:c1:bd:0e:e8:97:08:4c:02:a9:d5:
a9:b1:7c:b6:b5:f0:74:0a:c0:ea:1d:91:c3:8d:d0:
77:78:6a:c5:63:06:42:2e:76:9e:aa:2b:b8:86:29:
b3:e3:0b:7a:4e:20:d9:a9:67:25:8b:80:b7:d8:2e:
73:37:91:58:2d:ae:8d:da:75:cc:c0:df:ad:1f:85:
34:5e:36:bf:ce:d0:65:c9:bb:cb:08:41:de:fa:87:
00:47:0e:37:6f:f8:ad:c5:49:ae:80:69:58:6f:be:
72:a7:eb:66:4b:a4:20:02:09:37:d1:65:71:d2:28:
57:ff:8c:6c:02:9d:e8:55:fc:8c:4d:1d:cc:ff:db:
ce:0c:7b:af:d2:0c:71:19:52:d6:bc:55:bf:de:5c:
4a:1e:1a:9a:7f:81:e1:6a:7b:d6:c5:f3:9a:2f:ab:
71:4f:ed:6c:97:8c:10:9c:dd:8d:e8:e5:31:15:92:
93:13:ec:95:d9:ee:ef:df:40:1a:68:1f:8e:67:89:
89:52:4b:96:25:9d:62:74:53:e8:d6:66:db:1c:9a:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:E7:94:EC:56:D2:A4:51:5F:26:80:A1:81:A1:5D:48:20:F4:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0CDD1028B211EC8C2B741ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:bd:ef:5a:2d:5c:4a:98:30:15:3f:3c:52:9d:10:f5:72:cc:
55:cc:77:a7:df:d3:b5:9e:f9:0c:df:b8:dc:36:b2:4f:b8:68:
3d:1a:48:9c:e7:48:5a:8f:b7:58:61:4c:16:f9:13:38:c8:85:
18:63:c2:77:bc:86:1e:8a:28:bd:fb:d4:e4:69:7b:39:7c:e9:
08:a4:fa:69:1d:8b:58:89:76:17:f4:09:9b:dd:16:43:e8:54:
19:79:6e:79:35:c5:4e:3e:e7:73:a5:91:ec:19:1c:a1:0c:b8:
c3:91:94:e7:98:75:65:3d:be:ff:8b:ad:0b:07:65:81:e1:1b:
1c:22:77:af:b9:36:68:58:b6:b8:84:c7:42:b4:0a:50:64:79:
1c:b4:df:df:a3:d8:c6:ac:fc:8f:ee:32:b1:27:54:7a:a3:4a:
5c:f4:fc:40:ec:6d:43:2b:16:62:62:3d:8c:0c:d3:c3:45:67:
f5:ba:5c:31:17:ed:97:b0:f3:52:47:b6:a7:61:86:b9:fc:0a:
97:ed:4c:f1:74:ba:8c:78:73:e0:9c:73:ea:11:72:1b:6a:1f:
19:41:5a:a2:1b:d9:7c:ba:fd:bf:20:da:51:a8:94:4f:aa:54:
4d:a5:20:18:8a:e6:ed:34:8f:a6:a0:a0:fa:2f:6b:13:fa:4e:
5a:18:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org