Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF6E6C4741811ECA595C76D5A40D577.roa
File: CEF6E6C4741811ECA595C76D5A40D577.roa (raw, json)
Hash identifier: J1BDt+8zrROgOE8p/L7weHoKFSoB76AgGrWAgBXx2YI=
Subject key identifier: 64:16:F3:D4:6D:8F:61:B1:58:F5:48:15:96:4E:93:49:60:5A:6D:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 116A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF6E6C4741811ECA595C76D5A40D577.roa
Signing time: Thu 13 Jan 2022 02:30:44 +0000
ROA not before: Thu 13 Jan 2022 02:30:41 +0000
ROA not after: Sun 31 Jul 2022 02:30:41 +0000
asID: 328608
IP address blocks: 45.194.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4458 (0x116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 13 02:30:41 2022 GMT
Not After : Jul 31 02:30:41 2022 GMT
Subject: CN=61df8ed4-03b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:df:c5:ac:4e:ba:89:fe:da:2e:be:6c:34:
dd:21:3e:99:6a:20:ba:7e:0d:03:b9:66:62:ad:55:
07:bc:04:bb:22:03:1a:fc:8e:d3:76:5b:77:81:61:
d7:a1:b7:c1:b0:e9:27:79:54:a7:1c:5e:50:ae:ae:
0d:61:b4:fd:de:08:be:da:f5:dc:c5:00:13:35:f7:
36:d0:18:18:bc:f8:fe:32:2a:e3:58:7c:bb:ec:56:
4a:7d:94:da:32:5c:6a:d0:fc:a6:10:9e:c2:50:49:
0a:86:0c:14:f8:2e:c0:c3:3c:da:ce:9c:00:89:fa:
1a:6b:e3:2b:d4:b9:96:72:c3:38:e1:0d:f6:93:87:
0a:59:92:e1:99:99:44:cc:06:a0:25:b3:44:4e:f7:
8f:5f:67:89:79:b5:36:be:d7:88:a6:c6:38:70:61:
aa:fc:9d:04:da:23:de:e3:0f:a0:d0:f0:62:d3:0d:
af:ea:9f:68:5f:c6:9d:02:38:73:8f:df:85:36:85:
2f:d4:93:d4:f7:4a:32:04:93:85:85:b4:88:04:97:
93:69:f7:5a:09:3e:52:22:cc:ee:ef:43:ab:b8:6f:
25:13:2c:4c:a5:6b:7b:73:fe:38:67:0b:2d:e3:ff:
6f:78:91:aa:d3:34:68:de:59:63:be:a4:93:57:c6:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:F3:D4:6D:8F:61:B1:58:F5:48:15:96:4E:93:49:60:5A:6D:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF6E6C4741811ECA595C76D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.32.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:b4:26:22:38:7b:65:ca:07:ad:be:14:f8:7a:d0:20:1a:aa:
fe:27:42:c6:da:c1:09:4f:09:d3:ba:2b:b5:7e:28:c4:a5:4c:
7f:bb:d0:d9:ec:cd:d0:f1:ea:22:6f:1f:ea:b3:87:d3:d8:1c:
b0:57:fb:54:fb:ad:1a:c8:81:80:2e:96:19:4a:93:f4:6b:d2:
86:0c:3e:96:8a:05:af:2f:c1:67:cc:e5:f8:5e:22:65:eb:71:
ba:69:ec:e8:74:45:08:91:50:87:07:af:66:14:01:5c:5f:b0:
91:b9:0b:a8:7a:ec:f7:28:3b:31:ba:2c:30:48:60:fd:b4:d1:
c5:d9:2a:76:46:17:4c:fb:9e:5b:4e:cd:c1:48:7b:ff:12:ac:
8a:bf:a4:59:cf:8e:7d:ad:8a:e0:7f:9f:26:61:ad:c6:74:c2:
dc:87:fb:6e:0f:94:a9:25:13:40:29:28:e5:26:7a:21:c0:8d:
34:ca:cc:16:f1:b2:79:01:77:10:4e:84:8f:12:88:dd:be:c4:
4c:df:49:28:28:ec:6c:fa:52:75:f3:e3:0b:2e:f7:7e:06:84:
ea:79:06:00:1d:99:db:23:5d:36:ec:9f:25:82:fd:c6:89:6b:
ca:15:c9:61:c7:7a:fc:bf:ea:05:26:f4:b1:9c:89:a6:27:7d:
e9:15:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org