Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF5B2E90EC8C11ECA86B95DCF1222468.roa
File: BF5B2E90EC8C11ECA86B95DCF1222468.roa (raw, json)
Hash identifier: sh10gjCLO0TMLAno6DrAZL/vK1kzCAYXLIterKMSQkU=
Subject key identifier: 19:B5:1D:5E:55:15:ED:24:C9:64:8D:09:B2:C2:D7:90:AA:A3:55:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF5B2E90EC8C11ECA86B95DCF1222468.roa
Signing time: Wed 15 Jun 2022 09:22:59 +0000
ROA not before: Wed 15 Jun 2022 09:22:56 +0000
ROA not after: Fri 30 Dec 2022 09:22:56 +0000
asID: 328608
IP address blocks: 45.203.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5346 (0x14e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 09:22:56 2022 GMT
Not After : Dec 30 09:22:56 2022 GMT
Subject: CN=62a9a4f3-260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:ec:e2:aa:ae:56:f9:1a:43:03:50:63:68:
d6:97:4d:c5:6a:62:0d:4c:74:ad:43:40:09:ad:dc:
bf:ed:0e:14:b6:6f:a5:00:c5:05:13:20:50:fb:e8:
ce:63:a1:3e:53:74:62:6b:2a:de:7e:da:d3:d1:93:
73:c0:47:a9:21:1c:e7:65:b6:ed:09:26:24:ae:66:
9d:79:ff:06:3b:26:96:ac:f8:40:0b:40:7d:07:6d:
01:62:3b:0b:2f:fb:07:ec:61:fe:03:8b:39:bb:3f:
39:b2:b9:e9:b7:88:12:83:62:5c:40:fb:d4:b4:9e:
ad:d4:58:be:cf:72:c4:a7:98:08:a0:fe:70:da:e4:
3e:78:e4:19:15:f4:ef:6e:90:c4:55:13:f5:35:3a:
55:ad:38:c4:5e:7c:84:e8:e4:09:67:bf:5a:d0:11:
67:07:c9:9d:f5:b8:8a:eb:da:f7:c8:02:f2:c5:ee:
66:b8:82:7b:c1:fa:ab:bf:d0:ae:43:15:4f:13:4e:
2c:97:ec:cb:a9:9d:9b:e3:fe:b2:30:d2:50:53:da:
76:40:0f:69:95:6f:25:ab:64:95:cc:4c:3e:c6:8a:
34:89:4b:5a:33:e4:0f:b7:da:eb:2e:01:b4:96:64:
c9:fe:33:b6:9c:54:fd:6b:42:0a:ed:f9:da:43:ef:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:1D:5E:55:15:ED:24:C9:64:8D:09:B2:C2:D7:90:AA:A3:55:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF5B2E90EC8C11ECA86B95DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.60.0/22
Signature Algorithm: sha256WithRSAEncryption
16:5f:64:18:f8:d9:c9:86:c9:17:b4:1c:08:5a:8f:3a:d9:d6:
8d:91:74:fb:fa:f4:70:e7:54:97:3e:1f:04:54:b7:73:93:92:
ca:8d:7e:54:9c:99:cb:08:3e:39:8e:61:03:ef:39:a1:50:5a:
31:e8:7b:4b:f3:82:24:c5:e9:d7:80:35:3f:80:df:be:a5:89:
14:3e:71:46:91:51:33:dc:98:a0:c7:8f:34:bc:7d:d3:cb:75:
71:0e:2f:9f:98:91:8f:c6:a1:29:73:9f:81:b3:34:37:32:68:
d6:c2:77:cf:53:fa:35:fc:0f:f9:78:ff:11:5f:07:31:b6:8f:
68:44:23:13:f7:81:40:cf:8a:6d:7e:0b:ba:cc:d7:d6:d5:1a:
ee:33:21:40:8c:c0:0d:3a:67:76:a1:79:98:18:9c:0f:b5:4f:
a7:65:cd:91:27:a9:e3:b0:58:9d:05:2e:7d:d0:da:95:04:06:
6e:fb:6c:33:01:af:56:89:f5:87:1f:a9:ab:60:3e:22:8a:8f:
9f:8c:68:b6:b2:2a:55:57:01:68:bb:9d:bc:8d:71:9b:e4:b5:
c7:e4:7e:4e:ac:56:88:36:33:32:48:41:f7:4c:6a:2a:a4:8e:
8c:c0:74:4c:5b:96:7a:ee:58:51:39:b5:18:ce:c1:eb:1c:88:
6c:f8:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org