Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2716A02E6711EC8E7FF311D8A014CE.roa
File: BC2716A02E6711EC8E7FF311D8A014CE.roa (raw, json)
Hash identifier: lytMpyhGoBz2EMZwm1l1zgFoZJelZK3JhrHZaVR59ok=
Subject key identifier: D8:33:32:EC:D6:32:85:54:16:8B:8E:0D:A4:66:2A:6F:BB:47:9A:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2716A02E6711EC8E7FF311D8A014CE.roa
Signing time: Sat 16 Oct 2021 09:59:22 +0000
ROA not before: Sat 16 Oct 2021 09:59:18 +0000
ROA not after: Fri 16 Dec 2022 09:59:18 +0000
asID: 135097
IP address blocks: 45.196.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581 (0xa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:59:18 2021 GMT
Not After : Dec 16 09:59:18 2022 GMT
Subject: CN=616aa279-93f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:b2:5f:33:93:6d:05:ae:4f:ea:f0:ad:c7:
2c:76:2e:84:ed:be:01:26:b5:c3:c5:56:3f:6c:1a:
e4:0b:60:9a:95:7e:61:89:82:54:55:c5:f4:b7:93:
95:3b:6d:39:b7:3e:c7:a6:b2:13:55:45:e4:69:7c:
16:ec:46:1d:c7:14:5d:7b:79:e0:8f:3b:e7:06:6a:
d0:23:47:95:bb:53:62:ac:c6:ce:3f:97:c8:c3:d8:
ab:0f:42:57:0c:cb:bb:ce:d4:53:82:bd:9d:d9:65:
30:af:e6:14:97:6a:e5:10:73:19:c1:2b:fb:c9:23:
53:ff:92:7b:d0:0d:2e:2d:e8:3f:ab:fb:e7:95:1e:
e1:ac:1d:b2:cf:cf:5f:0c:0c:8a:4b:7c:6f:f9:4b:
40:ee:73:6b:e4:11:db:cf:8e:d6:f0:57:ba:af:c8:
3d:bf:7f:a5:6d:5b:be:17:fb:db:3f:d1:33:3d:81:
10:26:f2:96:df:48:31:3e:20:96:be:f9:5f:ba:3d:
ec:f5:cb:9c:ab:fa:e4:60:d5:04:4b:92:2a:cf:d9:
d6:f2:86:b4:11:9c:46:31:40:d3:65:dc:ce:ed:91:
67:c0:a0:41:14:80:43:06:16:6a:39:93:48:f6:a8:
4c:3f:c4:bd:19:b9:72:80:f5:5d:6c:b0:27:d2:96:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:32:EC:D6:32:85:54:16:8B:8E:0D:A4:66:2A:6F:BB:47:9A:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2716A02E6711EC8E7FF311D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:74:a4:2e:ea:cf:36:c6:43:ad:44:9e:f1:2d:26:c8:64:1f:
11:49:93:76:4b:b4:4d:e8:58:d7:eb:04:8b:3b:ca:35:72:9b:
43:24:aa:0d:49:8a:6d:f1:f0:d0:a4:94:b5:19:f4:a1:ec:5f:
88:a7:cf:0e:b1:54:19:e1:fe:aa:5a:2d:1e:2c:19:34:56:70:
4e:68:06:e0:a9:5c:31:57:ce:0f:db:7b:8f:f1:30:54:90:98:
30:d4:d0:2c:5d:e7:97:10:2c:62:dd:c6:8b:95:19:d1:46:e6:
fc:76:63:f8:d1:75:21:00:8d:a3:1c:e9:4e:11:80:ba:f9:1c:
6a:af:14:19:a6:51:98:c9:8e:7a:f0:98:ab:d1:c1:eb:13:ed:
b6:40:1d:a4:44:2b:e7:e9:0e:05:f7:f5:53:46:ea:02:34:6d:
0f:d5:f5:5d:d7:68:78:89:33:b3:7a:a2:47:a7:a5:ff:b8:6c:
74:7e:07:78:4a:eb:f7:e7:d8:93:84:76:f4:34:11:f2:b8:40:
f7:b5:bb:3b:31:98:87:1e:87:51:c7:e1:ff:69:e1:55:11:ee:
e7:cc:ab:b8:ad:fa:3a:a2:73:65:8b:e5:35:53:c9:e8:56:d0:
0e:6f:32:2b:ac:a6:9d:fa:b6:93:c9:06:64:ae:c7:ac:47:25:
dc:9c:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org