Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A93151C82E6711ECA0BDC611D8A014CE.roa
File: A93151C82E6711ECA0BDC611D8A014CE.roa (raw, json)
Hash identifier: AD4N4SRCX7IR4HwRGS1LaFVAwWquCSm1INJ9GVxaREA=
Subject key identifier: 08:1A:9D:E7:6B:9C:39:20:29:00:78:7B:86:7B:1C:9A:DC:A8:B8:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A93151C82E6711ECA0BDC611D8A014CE.roa
Signing time: Sat 16 Oct 2021 09:58:50 +0000
ROA not before: Sat 16 Oct 2021 09:58:45 +0000
ROA not after: Fri 16 Dec 2022 09:58:45 +0000
asID: 133201
IP address blocks: 45.196.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:58:45 2021 GMT
Not After : Dec 16 09:58:45 2022 GMT
Subject: CN=616aa25a-3a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:ae:29:16:a9:8c:6d:0d:8f:b2:67:23:70:
a3:3b:ca:52:81:9e:fb:2c:50:1a:67:8c:8a:ea:5d:
9d:0f:50:ba:41:3d:19:6b:59:c1:d7:56:36:6d:f0:
22:35:f8:86:be:7c:f7:47:af:7b:8f:5e:28:ff:d6:
44:b3:13:69:06:79:94:b3:89:f8:88:36:da:57:a0:
39:b5:a9:e5:a5:eb:49:af:40:6e:f9:54:3c:0a:bf:
86:7b:da:d8:1f:f4:39:21:e4:20:9f:a8:4d:95:86:
93:da:eb:eb:22:40:74:81:fc:55:ba:f3:2d:b8:28:
38:69:b3:9f:62:dc:a7:d7:2d:09:c4:e0:b4:51:cb:
f0:db:db:00:b5:b4:f3:c5:04:00:00:d3:60:6d:fa:
b4:ae:85:94:0b:09:49:1d:2e:22:5d:cb:1c:cd:d3:
12:60:90:11:78:ac:41:8a:21:96:db:bf:49:57:e4:
1c:54:bd:ee:69:22:b6:39:b2:66:6d:55:c2:99:42:
97:42:ff:64:5a:8b:37:25:3e:f6:fd:ff:0e:31:74:
06:e9:bf:64:ae:7b:86:05:d7:fd:b9:2c:c1:0c:75:
cc:45:04:f8:5f:05:1e:22:41:52:90:96:76:b4:0a:
bb:14:01:d6:5b:fc:c2:ce:e9:5f:bf:ee:d6:f8:2e:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:9D:E7:6B:9C:39:20:29:00:78:7B:86:7B:1C:9A:DC:A8:B8:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A93151C82E6711ECA0BDC611D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:37:81:36:5f:9e:76:28:f7:46:a6:fe:a8:78:db:1b:e3:6c:
9d:42:bc:bb:eb:ce:aa:da:f0:6c:ff:7b:3f:6a:f1:92:f1:d9:
a1:73:41:f3:20:51:bd:e6:cb:01:88:3f:6b:32:ed:33:91:00:
e1:51:e2:48:fb:2b:24:a2:32:90:f3:86:c1:f0:f1:37:c0:87:
ef:04:4e:26:48:ee:f0:9c:e1:18:ed:f6:81:10:1b:35:47:46:
fe:f2:d2:75:63:02:4f:d0:bb:85:30:70:ff:a5:8f:fa:33:46:
35:7c:66:51:4b:c1:da:f1:31:57:29:bb:c6:7a:ec:b5:dc:1c:
64:02:c7:f7:7f:25:a6:4b:3c:c0:8a:22:81:62:5b:26:60:44:
f9:30:52:1c:ee:fb:ff:cc:a3:fc:41:bb:ab:07:31:12:36:0d:
46:e4:fe:73:3b:ab:eb:52:8f:7a:a9:31:0a:e9:58:a1:96:62:
c0:74:35:af:42:0b:5d:af:71:b1:b9:b9:18:15:06:43:6b:37:
15:d4:b8:86:82:0a:04:b1:74:f9:27:a9:29:56:3b:a6:37:0c:
ba:82:bf:90:46:c3:a1:be:09:43:63:8e:3f:0d:38:2d:66:85:
e0:89:dd:a0:77:28:a6:35:ef:19:36:7f:03:45:f3:6f:b8:7e:
62:b3:e1:60
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICChMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMTYwOTU4NDVaFw0yMjEyMTYwOTU4NDVaMBgxFjAU
BgNVBAMMDTYxNmFhMjVhLTNhNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsxK4pFqmMbQ2PsmcjcKM7ylKBnvssUBpnjIrqXZ0PULpBPRlrWcHXVjZt
8CI1+Ia+fPdHr3uPXij/1kSzE2kGeZSzifiINtpXoDm1qeWl60mvQG75VDwKv4Z7
2tgf9Dkh5CCfqE2VhpPa6+siQHSB/FW68y24KDhps59i3KfXLQnE4LRRy/Db2wC1
tPPFBAAA02Bt+rSuhZQLCUkdLiJdyxzN0xJgkBF4rEGKIZbbv0lX5BxUve5pIrY5
smZtVcKZQpdC/2RaizclPvb9/w4xdAbpv2Sue4YF1/25LMEMdcxFBPhfBR4iQVKQ
lna0CrsUAdZb/MLO6V+/7tb4Lh6jAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCBqd
52ucOSApAHh7hnscmtyouJcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0E5MzE1MUM4MkU2NzExRUNBMEJEQzYxMUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYtxMAwDQYJKoZIhvcNAQELBQAD
ggEBABw3gTZfnnYo90am/qh42xvjbJ1CvLvrzqra8Gz/ez9q8ZLx2aFzQfMgUb3m
ywGIP2sy7TORAOFR4kj7KySiMpDzhsHw8TfAh+8ETiZI7vCc4Rjt9oEQGzVHRv7y
0nVjAk/Qu4UwcP+lj/ozRjV8ZlFLwdrxMVcpu8Z67LXcHGQCx/d/JaZLPMCKIoFi
WyZgRPkwUhzu+//Mo/xBu6sHMRI2DUbk/nM7q+tSj3qpMQrpWKGWYsB0Na9CC12v
cbG5uRgVBkNrNxXUuIaCCgSxdPknqSlWO6Y3DLqCv5BGw6G+CUNjjj8NOC1mheCJ
3aB3KKY17xk2fwNF82+4fmKz4WA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org