Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA058B2744611EC8EEC2D745A40D577.roa
File: ABA058B2744611EC8EEC2D745A40D577.roa (raw, json)
Hash identifier: dmBlE86u3yJ3WY+sz6DUFA7rSWMX/WvBP6KHM+8M72U=
Subject key identifier: 35:C3:05:6A:DB:B0:2F:F5:74:A2:B0:E2:D8:BC:80:F1:F5:00:CB:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 117D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA058B2744611EC8EEC2D745A40D577.roa
Signing time: Thu 13 Jan 2022 07:59:02 +0000
ROA not before: Thu 13 Jan 2022 07:58:58 +0000
ROA not after: Sun 31 Jul 2022 07:58:58 +0000
asID: 328608
IP address blocks: 45.196.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4477 (0x117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 13 07:58:58 2022 GMT
Not After : Jul 31 07:58:58 2022 GMT
Subject: CN=61dfdbc6-424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:f3:db:3c:63:4e:a6:87:96:e0:e5:91:06:
97:98:49:a1:10:e8:31:50:d2:4a:20:ed:dc:a1:c1:
2d:cc:c3:a4:1a:d4:5c:08:73:4c:ef:45:f7:9c:34:
6a:89:eb:ec:a0:b9:7a:ec:3a:08:d8:d9:5d:38:91:
6a:7b:97:59:9e:7a:d1:61:76:43:cf:fd:35:9f:18:
bb:d8:d7:39:60:df:e4:b3:e3:31:a1:0f:f6:b3:0c:
b9:51:24:e8:f5:35:37:4b:d5:d3:be:cd:5e:52:55:
66:19:ea:de:a5:9a:22:23:17:4a:45:5f:5e:e8:c1:
a5:ed:76:b7:b5:fd:25:81:c3:f2:12:0d:70:63:40:
9a:4f:86:a4:da:02:50:8a:f3:26:75:b5:ca:c8:f9:
2e:68:25:45:75:59:e9:22:ec:fc:64:30:e3:5d:5c:
bb:62:2a:e0:28:19:f1:7e:f0:a3:65:32:69:6e:93:
7c:d9:d9:c6:b6:00:73:64:20:04:33:48:4e:15:3d:
d7:16:7f:91:f5:15:7a:62:ca:f8:32:d1:6b:f7:72:
d2:e0:c0:9c:99:eb:7d:32:57:22:aa:2e:ff:96:0e:
88:8c:f7:e9:f9:59:ff:07:0f:b9:68:d9:3a:73:34:
df:af:d5:7f:6b:58:32:00:c5:5b:b3:80:61:a1:7c:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:05:6A:DB:B0:2F:F5:74:A2:B0:E2:D8:BC:80:F1:F5:00:CB:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA058B2744611EC8EEC2D745A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.16.0/21
Signature Algorithm: sha256WithRSAEncryption
61:18:83:ec:a2:e9:90:5d:a1:86:5f:5f:ce:7b:a3:c7:e7:7f:
d4:b3:ed:62:f2:b1:1f:f5:ac:81:61:01:9b:6c:76:83:e6:85:
15:a1:f3:f3:29:71:91:33:a5:ab:87:dd:3f:b3:6d:b7:ef:af:
e0:98:19:cc:84:55:e6:b8:90:ef:cf:1e:74:ef:79:00:35:09:
98:b1:16:73:fd:26:fe:b1:90:f4:07:f0:01:12:13:7b:fc:90:
47:2f:b9:7f:14:45:b5:ad:a7:68:9f:75:74:bb:d4:44:6b:33:
2b:02:cc:ea:95:f5:e5:34:ef:61:5e:2d:ef:aa:75:0c:9f:38:
fe:7b:bd:8d:b1:9c:ca:03:85:a9:45:65:1a:df:57:e1:8c:ec:
55:3b:4b:e7:70:e4:a6:e0:62:c2:2c:4f:f7:e2:e8:8d:b9:9d:
01:8c:b1:de:d6:81:7e:5b:9b:ca:a9:2b:23:79:91:8d:0b:19:
63:1c:ce:b8:d7:3c:b1:f5:8a:19:9d:ab:2f:27:38:01:d2:09:
2a:6f:f8:38:42:69:8b:27:c6:2e:4b:1d:a0:d6:1c:01:a2:32:
cb:37:fc:8b:4f:81:90:04:87:1a:d1:82:7f:b5:1f:ce:bb:30:
36:43:61:3a:a7:42:aa:d8:fc:4d:3e:f1:3e:41:fe:3e:d9:87:
50:5e:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org