Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CACA25C413D311EDB79243ADF1222468.roa
File: CACA25C413D311EDB79243ADF1222468.roa (raw, json)
Hash identifier: H6AZXYIY6NTFr6mxSYQTAOCGllSY9+QEt3gLBF4mY80=
Subject key identifier: C1:30:A1:D7:3A:B6:1B:30:6D:6A:B4:41:E3:C9:35:15:F8:DA:DB:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 165A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CACA25C413D311EDB79243ADF1222468.roa
Signing time: Thu 04 Aug 2022 08:59:48 +0000
ROA not before: Thu 04 Aug 2022 08:59:45 +0000
ROA not after: Fri 10 Feb 2023 08:59:45 +0000
asID: 133861
IP address blocks: 45.207.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5722 (0x165a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:59:45 2022 GMT
Not After : Feb 10 08:59:45 2023 GMT
Subject: CN=62eb8a84-493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:f6:d7:93:b8:7f:b1:61:ca:ee:ac:bf:eb:
38:6e:ba:60:79:eb:27:30:9c:f8:cd:0c:97:15:2c:
3f:1f:ed:86:1e:fa:58:bc:77:18:cc:f6:ad:17:fc:
8b:68:29:91:21:55:0b:f7:36:b3:be:95:54:ef:22:
03:25:52:a7:03:31:e7:db:a8:5c:5b:f1:23:b7:93:
9a:52:9a:b4:b0:b4:62:61:37:6f:2a:44:85:6c:04:
ab:b0:46:30:56:aa:a4:3d:c4:1f:9e:93:9c:f5:de:
f1:f8:ac:4d:b7:81:18:d3:90:0c:2a:d7:f2:c2:01:
b2:8b:48:30:bc:a2:c1:5c:8f:a5:98:93:80:45:be:
48:d1:c1:95:ca:5f:86:e2:c0:27:91:14:2f:44:ac:
5c:15:36:4b:01:b5:6e:cd:1c:29:83:3d:d6:38:39:
65:06:66:ac:60:70:a6:4c:20:59:66:ae:2b:d6:21:
30:6c:1d:e2:ce:e9:56:19:8b:26:92:e3:bb:34:c3:
ce:c6:00:cc:41:27:dd:86:87:c5:64:3d:91:7a:8c:
67:59:d4:78:bf:69:b3:94:07:ac:e2:63:84:6a:ba:
6d:f5:44:d2:45:d3:d6:40:45:c9:c3:5c:ed:f1:ef:
8b:b1:a9:23:04:cc:7f:90:e3:5a:6e:f1:46:3d:2d:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:A1:D7:3A:B6:1B:30:6D:6A:B4:41:E3:C9:35:15:F8:DA:DB:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CACA25C413D311EDB79243ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b0:9d:66:09:6f:ee:8c:91:a9:30:ff:33:82:43:f6:b0:85:
47:6f:79:eb:09:4a:a1:d3:5e:d4:3c:d8:00:d7:fb:21:c8:b9:
ed:88:ab:8a:08:34:db:cd:05:74:d2:ea:0a:36:7b:e4:06:64:
12:e1:ea:68:e9:d7:4d:9e:9e:71:4a:72:9c:bf:de:71:74:27:
eb:95:80:da:f3:ef:66:11:c4:76:d8:7b:78:8d:be:03:c6:ff:
63:f5:2c:a1:52:a6:2b:9f:83:72:c7:5f:c1:67:bf:ac:5a:35:
c6:46:9d:fe:cf:a0:88:c8:72:73:c5:95:e7:19:fd:aa:97:43:
92:50:27:8d:ae:66:57:a5:ac:3b:a3:2b:f9:9b:58:86:8a:4c:
6c:98:c8:40:5f:a6:6e:19:16:fe:5c:c1:3a:df:4c:ec:be:58:
55:b5:73:a6:8c:ea:60:56:fa:66:c7:89:23:44:06:01:dd:30:
d9:70:29:17:54:b6:c3:d5:ce:6b:2b:6c:e6:04:d2:5f:5a:1a:
cc:fd:1c:3a:c5:a3:62:e8:38:89:71:9a:1e:8b:12:25:8d:3b:
dc:19:93:95:c0:35:60:87:aa:39:2a:f4:5f:ec:2b:5f:cc:d4:
96:b3:44:30:43:a5:47:53:61:28:83:19:0b:72:e4:84:38:98:
00:56:1e:77
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFlowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwODU5NDVaFw0yMzAyMTAwODU5NDVaMBgxFjAU
BgNVBAMMDTYyZWI4YTg0LTQ5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5S/bXk7h/sWHK7qy/6zhuumB56ycwnPjNDJcVLD8f7YYe+li8dxjM9q0X
/ItoKZEhVQv3NrO+lVTvIgMlUqcDMefbqFxb8SO3k5pSmrSwtGJhN28qRIVsBKuw
RjBWqqQ9xB+ek5z13vH4rE23gRjTkAwq1/LCAbKLSDC8osFcj6WYk4BFvkjRwZXK
X4biwCeRFC9ErFwVNksBtW7NHCmDPdY4OWUGZqxgcKZMIFlmrivWITBsHeLO6VYZ
iyaS47s0w87GAMxBJ92Gh8VkPZF6jGdZ1Hi/abOUB6ziY4Rqum31RNJF09ZARcnD
XO3x74uxqSMEzH+Q41pu8UY9LWAbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUwTCh
1zq2GzBtarRB48k1Ffja23YwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0NBQ0EyNUM0MTNEMzExRURCNzkyNDNBREYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzEwDQYJKoZIhvcNAQELBQAD
ggEBAC2wnWYJb+6Mkakw/zOCQ/awhUdveesJSqHTXtQ82ADX+yHIue2Iq4oINNvN
BXTS6go2e+QGZBLh6mjp102ennFKcpy/3nF0J+uVgNrz72YRxHbYe3iNvgPG/2P1
LKFSpiufg3LHX8Fnv6xaNcZGnf7PoIjIcnPFlecZ/aqXQ5JQJ42uZlelrDujK/mb
WIaKTGyYyEBfpm4ZFv5cwTrfTOy+WFW1c6aM6mBW+mbHiSNEBgHdMNlwKRdUtsPV
zmsrbOYE0l9aGsz9HDrFo2LoOIlxmh6LEiWNO9wZk5XANWCHqjkq9F/sK1/M1Jaz
RDBDpUdTYSiDGQty5IQ4mABWHnc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org