Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB60836C362F11EC98A9C152D8A014CE.roa
File: BB60836C362F11EC98A9C152D8A014CE.roa (raw, json)
Hash identifier: wj1yKWQLTqPqtatvg4MKH4jZ98bCH4aqzaqQ72iHkxM=
Subject key identifier: CF:55:62:0E:3C:A4:BB:B9:D9:D8:1A:4E:F7:2E:20:0C:BD:F2:EF:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB60836C362F11EC98A9C152D8A014CE.roa
Signing time: Tue 26 Oct 2021 07:38:38 +0000
ROA not before: Tue 26 Oct 2021 07:38:34 +0000
ROA not after: Sat 26 Mar 2022 07:38:34 +0000
asID: 1239
IP address blocks: 45.197.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 26 07:38:34 2021 GMT
Not After : Mar 26 07:38:34 2022 GMT
Subject: CN=6177b07e-e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:f9:6f:33:fe:b4:7d:64:a4:fa:f2:09:cb:
3e:51:9d:50:db:68:30:79:5d:30:d5:9e:33:e7:9d:
a0:16:c5:f2:a5:e1:76:6c:47:03:27:db:0a:17:95:
8a:71:0f:16:94:46:c5:e6:96:7a:53:8e:63:a4:1d:
c0:a8:80:ac:e9:00:35:4a:72:c0:9c:bd:ad:99:47:
92:5a:3f:5e:30:06:af:f3:49:e1:2e:03:d5:f7:4e:
04:3a:56:a8:b7:f7:5e:83:5e:e2:e0:83:ea:5a:8a:
55:ff:c5:cd:d7:a5:69:6b:43:29:48:61:ec:af:6a:
78:76:97:bb:46:90:43:fa:7c:c2:28:11:3c:13:b9:
4f:c5:c6:09:17:1d:12:23:b9:fc:93:46:04:6d:36:
68:08:29:c7:52:4d:23:db:4b:b8:92:22:be:27:5e:
1b:ed:ef:97:06:a2:42:d1:49:bf:fc:4e:cd:6c:6d:
ab:60:29:e1:40:26:c1:fc:03:70:58:33:63:cb:0e:
08:bd:45:f1:8d:44:ef:b2:2f:4a:0f:b5:58:ec:33:
2d:ac:74:6d:0c:5e:f6:73:d9:ed:92:08:e5:4e:aa:
e3:10:54:d2:19:ae:41:86:cf:16:5a:ba:c6:c7:a4:
4c:96:fc:9b:9c:ab:59:5f:93:31:85:79:ed:7c:0a:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:62:0E:3C:A4:BB:B9:D9:D8:1A:4E:F7:2E:20:0C:BD:F2:EF:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB60836C362F11EC98A9C152D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.8.0/21
Signature Algorithm: sha256WithRSAEncryption
64:38:31:86:42:ac:1d:2d:59:a7:ab:82:d5:3b:c7:a1:dc:f0:
d7:fc:d2:52:0f:14:8c:aa:d3:ee:9b:6c:bb:22:fe:0a:30:b5:
05:ba:91:08:32:a4:22:67:60:97:38:d7:b7:1b:dc:c9:ca:22:
39:01:fa:e0:ca:ef:a6:de:a6:50:ba:93:a5:2f:41:95:27:25:
2c:65:1c:ea:dd:61:ee:81:1a:d1:d7:83:69:dd:1b:71:4e:f7:
48:89:63:ae:e4:69:c4:d4:4e:1b:bc:6e:e4:df:6a:94:fe:d6:
57:00:0f:7b:c9:08:76:6d:5f:32:41:26:28:97:ae:8a:f8:d9:
b2:66:2c:0b:74:87:32:9e:ef:7f:c3:1b:53:cb:2c:a3:08:c3:
54:d8:de:76:51:47:2e:ef:18:3a:25:a6:ba:55:c7:18:09:a6:
81:7c:c4:25:62:89:2c:c6:55:a3:e1:83:12:02:10:8f:2b:3f:
2f:91:cf:1e:9f:61:b4:35:ed:d7:e5:c9:e0:cc:7e:45:f8:d0:
e8:be:04:b7:a5:2b:7d:f2:09:bd:5e:62:1f:94:c3:9b:2a:ce:
da:55:ca:55:ea:5b:ae:3d:c4:3f:99:92:63:f1:1a:fd:2b:a0:
0c:6f:d5:62:32:6f:ce:10:26:72:48:65:93:e3:61:e5:20:52:
3f:0a:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org