Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E4BD296E90D11EBB13D8C6AD8A014CE.roa
File: 9E4BD296E90D11EBB13D8C6AD8A014CE.roa (raw, json)
Hash identifier: cf+aXRzJLlqsN21UOn7kJa1T6kRPkRj/z0KaOCmcIL8=
Subject key identifier: E5:8C:C0:62:AC:9F:ED:1D:E6:9C:43:07:24:DC:6B:AC:B4:EE:89:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 078E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E4BD296E90D11EBB13D8C6AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:50:34 +0000
ROA not before: Tue 20 Jul 2021 03:50:30 +0000
ROA not after: Thu 15 Sep 2022 03:50:30 +0000
asID: 1239
IP address blocks: 45.205.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:50:30 2021 GMT
Not After : Sep 15 03:50:30 2022 GMT
Subject: CN=60f6480a-ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:d6:2c:75:f7:5d:54:d3:86:f7:26:ff:05:
42:e0:b1:1c:2f:54:33:90:20:66:4d:b8:95:3f:ce:
d9:f0:0b:05:16:12:8f:1e:48:5b:66:48:2e:cc:b1:
fd:83:dd:40:6d:90:ad:71:7b:fe:c8:a8:65:f1:01:
60:c5:c5:c2:e7:0b:08:7a:17:d0:1e:47:83:3e:c4:
b9:a1:0f:0c:81:f5:f5:44:f5:6e:e3:c6:70:11:3d:
19:81:67:c4:4b:b7:a0:c4:4c:1f:8b:75:8b:71:9b:
c6:79:7c:c0:88:63:fd:14:a5:bc:e3:e2:b5:f5:5d:
bc:cd:2e:60:2d:5c:10:77:60:c5:93:2b:5b:bd:79:
e8:bd:91:8f:2a:a9:16:c3:b2:6b:92:94:34:80:f3:
25:3b:41:9f:35:15:ae:15:fc:2d:ae:f1:0d:b3:ea:
03:1c:2d:05:92:f2:75:cf:b7:6b:5b:00:dd:20:cf:
79:5f:b0:bc:26:29:5e:fd:1c:af:8e:e9:41:cb:ee:
30:e0:ee:34:b4:f1:6c:ce:bf:17:5c:cc:7f:7c:08:
82:45:3b:4c:36:c8:9f:72:48:1e:6d:1a:86:c1:ef:
61:5e:60:77:b2:9b:f9:26:85:8a:72:41:b3:79:45:
5b:03:83:53:a6:b6:99:80:b5:43:3e:18:07:8e:be:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:C0:62:AC:9F:ED:1D:E6:9C:43:07:24:DC:6B:AC:B4:EE:89:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E4BD296E90D11EBB13D8C6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:f5:1e:10:a9:ce:d9:30:1c:51:f4:04:66:0b:88:69:70:ca:
fb:b1:8c:b3:39:0b:c8:cd:37:ac:e6:79:6a:68:28:b8:28:03:
72:9a:3b:19:52:e8:24:6d:c5:cc:d1:2d:7a:92:78:42:c7:ba:
de:38:c1:37:5a:bc:e1:54:8c:b5:4b:9c:8c:72:a6:0a:3a:19:
12:2e:0f:4f:77:bb:1f:c6:22:f0:9f:d9:11:5b:17:db:2b:01:
0b:32:5c:c8:85:53:55:24:69:4e:cd:f7:39:f6:f6:9b:c5:91:
8a:0f:26:89:4c:08:6a:ce:f7:5d:ea:a9:1a:fb:79:a4:dc:d3:
4d:df:54:13:99:36:be:df:ef:44:07:70:85:78:31:9d:97:35:
ff:44:8e:45:9f:d5:ee:7d:1e:12:40:36:23:a5:7c:e9:53:bb:
df:45:99:22:b2:48:7e:37:82:3e:20:14:ad:f9:32:22:af:0d:
ea:a2:ca:f7:6b:33:1c:1f:68:58:03:54:05:a5:de:83:52:d9:
f5:0f:9a:a8:97:e2:16:77:df:42:fc:1c:52:d7:44:a4:c8:25:
7f:c8:3b:98:8c:0a:c9:d0:1f:0c:58:3b:2c:e5:cc:1e:1c:c1:
01:2d:1b:ba:b1:1e:2e:25:4a:b5:0c:4b:ec:8b:c7:61:43:2a:
df:81:3e:f2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB44wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjAwMzUwMzBaFw0yMjA5MTUwMzUwMzBaMBgxFjAU
BgNVBAMMDTYwZjY0ODBhLWFjOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCz3NYsdfddVNOG9yb/BULgsRwvVDOQIGZNuJU/ztnwCwUWEo8eSFtmSC7M
sf2D3UBtkK1xe/7IqGXxAWDFxcLnCwh6F9AeR4M+xLmhDwyB9fVE9W7jxnARPRmB
Z8RLt6DETB+LdYtxm8Z5fMCIY/0Upbzj4rX1XbzNLmAtXBB3YMWTK1u9eei9kY8q
qRbDsmuSlDSA8yU7QZ81Fa4V/C2u8Q2z6gMcLQWS8nXPt2tbAN0gz3lfsLwmKV79
HK+O6UHL7jDg7jS08WzOvxdczH98CIJFO0w2yJ9ySB5tGobB72FeYHeym/kmhYpy
QbN5RVsDg1OmtpmAtUM+GAeOvkBjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5YzA
Yqyf7R3mnEMHJNxrrLTuiXAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlFNEJEMjk2RTkwRDExRUJCMTNEOEM2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtzdAwDQYJKoZIhvcNAQELBQAD
ggEBAE/1HhCpztkwHFH0BGYLiGlwyvuxjLM5C8jNN6zmeWpoKLgoA3KaOxlS6CRt
xczRLXqSeELHut44wTdavOFUjLVLnIxypgo6GRIuD093ux/GIvCf2RFbF9srAQsy
XMiFU1UkaU7N9zn29pvFkYoPJolMCGrO913qqRr7eaTc003fVBOZNr7f70QHcIV4
MZ2XNf9EjkWf1e59HhJANiOlfOlTu99FmSKySH43gj4gFK35MiKvDeqiyvdrMxwf
aFgDVAWl3oNS2fUPmqiX4hZ330L8HFLXRKTIJX/IO5iMCsnQHwxYOyzlzB4cwQEt
G7qxHi4lSrUMS+yLx2FDKt+BPvI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org