Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C68C0F54DB2F11EC9335CBEFF1222468.roa
File: C68C0F54DB2F11EC9335CBEFF1222468.roa (raw, json)
Hash identifier: 2qlg8v0uxTx9+jwnj96uzawsqDxD02Znv+hXkRqnbLg=
Subject key identifier: 75:AA:20:4A:7F:14:C1:0E:67:65:4E:AA:C7:56:90:07:D2:A9:EC:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C68C0F54DB2F11EC9335CBEFF1222468.roa
Signing time: Tue 24 May 2022 07:04:38 +0000
ROA not before: Tue 24 May 2022 07:04:33 +0000
ROA not after: Fri 30 Jun 2023 07:04:33 +0000
asID: 132698
IP address blocks: 45.207.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5114 (0x13fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 07:04:33 2022 GMT
Not After : Jun 30 07:04:33 2023 GMT
Subject: CN=628c8386-15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:ef:78:a2:41:6e:9a:00:1c:6b:4a:4f:ce:
30:f2:a4:3f:1a:d0:38:27:8a:83:e7:67:6e:4f:49:
26:21:d6:32:c8:f9:fd:3b:93:fc:5e:e9:3a:ee:f2:
b2:25:f6:cd:c9:e4:48:86:92:65:0c:7a:5b:67:f5:
a6:27:7a:ca:25:b6:57:8b:b1:1a:8c:05:b2:db:99:
09:81:58:ee:96:62:9b:8a:86:b3:30:d0:64:ff:a2:
0e:ab:4d:94:65:a0:84:96:a1:60:92:83:74:28:54:
0d:97:03:6e:38:6a:96:ce:a0:bd:90:2f:6c:00:b2:
5d:63:1b:97:f9:68:89:86:df:6a:ce:88:ac:53:45:
1b:18:7c:a5:53:0b:5d:60:c5:d0:72:fb:40:90:ef:
50:89:89:20:73:e7:bf:0a:d9:d5:38:c9:01:68:5c:
f6:f4:37:93:21:d5:14:ef:5e:25:3c:90:a4:fa:4f:
a1:43:c8:c5:2d:cb:15:88:94:3c:9b:7a:a5:5b:38:
5a:12:26:58:f8:11:63:0c:a8:1d:8a:45:2d:2e:da:
b3:51:a5:d4:69:d5:02:6f:dd:ff:5f:17:7d:ef:9f:
f1:0d:07:ae:65:35:eb:1e:1a:b3:aa:9d:4a:2f:bc:
1b:29:80:11:f1:df:ab:50:ad:5a:e8:73:53:3a:e2:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:20:4A:7F:14:C1:0E:67:65:4E:AA:C7:56:90:07:D2:A9:EC:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C68C0F54DB2F11EC9335CBEFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.24.0/22
Signature Algorithm: sha256WithRSAEncryption
72:d2:da:11:cc:1e:66:ea:d0:a4:94:ba:8b:f4:57:7e:21:26:
4c:1e:b8:09:41:ec:11:8c:4d:a2:85:50:74:16:6c:d1:46:b4:
7f:e9:2c:86:c2:c5:3a:cd:cf:40:e2:89:27:1b:53:86:b7:31:
a8:2d:a2:a6:8f:01:db:6d:dc:1c:20:34:1d:f4:ba:da:e7:ae:
00:6a:6a:a9:d6:c8:4a:2c:59:8f:b6:2a:e1:16:8e:c6:1a:25:
b5:3b:6e:2f:24:f7:e6:92:31:ed:60:5f:26:ab:06:7a:bb:8b:
6a:53:ad:a5:7f:43:31:2c:0d:5f:78:41:df:b3:9f:02:ab:86:
0a:f3:3c:96:46:17:fa:6f:cb:55:01:89:19:c1:af:b2:be:6d:
4b:df:c5:ad:b2:28:eb:ed:ec:52:10:8e:18:40:8a:e9:be:2f:
f3:af:24:06:30:23:6a:d0:0b:dd:01:82:0c:77:22:0d:62:1f:
d3:5a:52:d1:b1:d3:48:f8:3b:fa:d5:ba:35:f9:b5:92:ec:57:
cb:df:aa:16:c3:5c:af:6a:1d:39:58:ea:90:83:e3:1b:3f:e3:
ed:74:29:dd:92:1d:0d:e8:48:6a:50:3b:0c:ea:35:72:eb:9a:
f0:74:6e:e3:a7:a3:b0:27:b9:79:a2:6f:6f:8b:46:f7:1d:40:
64:99:b3:9e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICE/owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MjQwNzA0MzNaFw0yMzA2MzAwNzA0MzNaMBgxFjAU
BgNVBAMMDTYyOGM4Mzg2LTE1ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNw+94okFumgAca0pPzjDypD8a0DgnioPnZ25PSSYh1jLI+f07k/xe6Tru
8rIl9s3J5EiGkmUMeltn9aYnesoltleLsRqMBbLbmQmBWO6WYpuKhrMw0GT/og6r
TZRloISWoWCSg3QoVA2XA244apbOoL2QL2wAsl1jG5f5aImG32rOiKxTRRsYfKVT
C11gxdBy+0CQ71CJiSBz578K2dU4yQFoXPb0N5Mh1RTvXiU8kKT6T6FDyMUtyxWI
lDybeqVbOFoSJlj4EWMMqB2KRS0u2rNRpdRp1QJv3f9fF33vn/ENB65lNeseGrOq
nUovvBspgBHx36tQrVroc1M64rFNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUdaog
Sn8UwQ5nZU6qx1aQB9Kp7E0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M2OEMwRjU0REIyRjExRUM5MzM1Q0JFRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItzxgwDQYJKoZIhvcNAQELBQAD
ggEBAHLS2hHMHmbq0KSUuov0V34hJkweuAlB7BGMTaKFUHQWbNFGtH/pLIbCxTrN
z0DiiScbU4a3MagtoqaPAdtt3BwgNB30utrnrgBqaqnWyEosWY+2KuEWjsYaJbU7
bi8k9+aSMe1gXyarBnq7i2pTraV/QzEsDV94Qd+znwKrhgrzPJZGF/pvy1UBiRnB
r7K+bUvfxa2yKOvt7FIQjhhAium+L/OvJAYwI2rQC90Bggx3Ig1iH9NaUtGx00j4
O/rVujX5tZLsV8vfqhbDXK9qHTlY6pCD4xs/4+10Kd2SHQ3oSGpQOwzqNXLrmvB0
buOno7AnuXmib2+LRvcdQGSZs54=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org