Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A32225F0BBDE11ECBA9B2CA45A40D577.roa
File: A32225F0BBDE11ECBA9B2CA45A40D577.roa (raw, json)
Hash identifier: mqRno/yC1XOuxbUpnMf502UupRS69OJih7ZmHYdexgU=
Subject key identifier: AC:DA:2A:9F:9D:D6:C9:4C:16:43:11:FC:15:56:47:8D:31:FC:69:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 130C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A32225F0BBDE11ECBA9B2CA45A40D577.roa
Signing time: Thu 14 Apr 2022 10:35:44 +0000
ROA not before: Thu 14 Apr 2022 10:35:39 +0000
ROA not after: Sat 31 Dec 2022 10:35:39 +0000
asID: 142647
IP address blocks: 45.206.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4876 (0x130c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 10:35:39 2022 GMT
Not After : Dec 31 10:35:39 2022 GMT
Subject: CN=6257f8ff-6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:0a:d8:61:3d:8c:24:6f:b5:cd:55:e9:de:
03:87:5d:fc:84:13:93:67:f2:3b:b7:6a:df:b4:88:
40:a9:5d:34:f2:8a:49:d7:74:8d:c6:da:c4:61:2d:
59:8e:51:ff:cb:a3:c5:e2:91:66:f2:47:cd:0a:59:
df:9e:0e:8f:91:63:a1:7c:ef:01:d0:f7:ba:ed:0b:
6d:d8:a0:ee:08:53:d6:e7:d0:b4:16:a3:83:02:70:
62:e4:c1:6b:33:dd:d9:14:e0:3c:cf:14:12:2b:9b:
71:26:32:82:89:c9:d9:ab:5a:76:a1:c1:43:61:14:
8b:2e:c9:05:79:ae:1d:ac:78:58:c2:84:89:5c:30:
d1:4e:b5:42:24:af:1a:1a:ea:cc:2f:3d:f7:fd:44:
d5:2c:6b:54:71:6e:45:56:51:32:92:18:a3:a0:30:
0d:09:38:f1:b6:f0:03:73:1c:fa:2d:b0:31:03:98:
a5:47:52:d0:4b:6d:ef:ea:4f:8c:bf:07:56:da:3e:
00:76:37:5e:82:ee:f9:f2:e9:f0:4c:65:29:72:20:
fd:18:55:49:24:77:0f:46:6c:68:ba:b1:70:66:35:
59:aa:dd:31:55:d3:ba:3d:86:8b:97:f9:a0:cb:3e:
1b:8e:d0:73:91:7f:10:c5:70:f8:1b:47:11:f6:53:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:2A:9F:9D:D6:C9:4C:16:43:11:FC:15:56:47:8D:31:FC:69:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A32225F0BBDE11ECBA9B2CA45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:29:9a:94:e5:db:ef:09:d7:f9:fb:15:7f:b1:ab:2f:38:86:
c2:ac:f6:75:da:cb:73:c3:a7:9d:a9:00:64:52:0f:1c:b1:7a:
7a:a7:f1:5f:09:54:ec:78:03:64:02:95:15:44:73:0c:fe:e4:
fc:6f:2e:4b:71:43:59:8f:ad:49:88:a4:3f:f3:5c:01:43:bb:
f6:cb:59:87:f4:65:03:df:34:95:ca:0e:54:b2:f6:50:21:4e:
24:06:2b:4f:de:a6:c4:a7:37:df:c2:9e:99:dd:22:27:fa:d8:
17:23:26:3b:ec:4e:af:67:b9:97:cd:2b:b4:34:60:ba:f1:50:
fd:13:45:13:8b:3a:d7:e7:de:dc:27:d8:b4:02:60:f2:f9:70:
98:ef:47:3d:5f:c2:c6:b9:d6:ff:58:fd:09:fc:ad:6d:bf:12:
04:e0:e2:f8:ce:e5:1b:32:cc:5f:7f:c7:2e:f7:5b:73:83:23:
e8:a2:b2:52:d1:c2:9d:65:c3:5e:bb:df:fe:e9:df:83:00:11:
9e:29:91:67:95:3b:4b:36:20:b4:54:9b:6d:6e:c0:93:e0:3c:
c0:49:93:a7:40:97:24:c0:e3:88:71:74:76:bc:24:27:5e:dc:
7c:2d:ae:bc:9a:65:f4:30:55:a8:56:23:00:ef:81:47:86:a2:
ec:25:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org