Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF6657ACE72211ECA718FFA5F1222468.roa
File: CF6657ACE72211ECA718FFA5F1222468.roa (raw, json)
Hash identifier: l06e10DLBD//4qUvsQEiTnJ/+4jwGWgHUNxnVlG+9ao=
Subject key identifier: BA:C3:FD:8C:E5:3B:89:40:3F:FB:E3:02:BB:8C:56:91:5B:B5:48:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 144B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF6657ACE72211ECA718FFA5F1222468.roa
Signing time: Wed 08 Jun 2022 12:02:04 +0000
ROA not before: Wed 08 Jun 2022 12:02:00 +0000
ROA not after: Fri 30 Jun 2023 12:02:00 +0000
asID: 41720
IP address blocks: 45.195.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5195 (0x144b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 12:02:00 2022 GMT
Not After : Jun 30 12:02:00 2023 GMT
Subject: CN=62a08fbc-8ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:3c:24:27:02:eb:fd:93:a8:2b:92:63:80:
5f:7d:1b:89:8a:6f:ad:98:df:88:72:01:25:7d:89:
bd:2a:44:2c:81:1d:88:3b:9c:ab:2c:e2:57:b5:14:
b4:63:77:91:7b:42:de:0c:23:c8:ca:cb:c4:03:63:
9f:c4:99:4e:6d:af:a2:49:f6:7a:70:79:27:4c:54:
ac:28:66:e1:b8:0a:23:7f:7c:5e:2d:b0:99:c5:0f:
57:c5:bd:56:2e:f1:d6:5a:ed:3a:1c:f6:6e:af:83:
7c:8b:9c:52:bc:db:a6:da:7c:91:7e:c2:11:bf:15:
06:1d:b9:f2:f4:1d:61:87:4c:4f:52:c6:c2:46:24:
0d:e6:67:b8:9f:84:8c:b2:a3:41:6c:18:16:d4:bf:
c1:05:64:8e:e9:d1:14:34:0e:6e:19:c6:17:86:7f:
0f:70:e7:f7:6a:d0:b1:66:8d:95:cc:87:ec:07:23:
f7:ce:f4:c6:26:a3:0a:6d:77:52:03:84:32:94:2f:
40:a1:a5:7c:9a:bc:4a:e7:bb:2e:43:c5:de:3c:00:
35:ad:27:c9:5f:6e:9e:bf:f1:00:7a:46:71:9e:c1:
98:d5:8f:3e:2d:dc:ad:b7:05:08:55:df:f5:4a:3b:
b2:03:74:aa:a7:8b:dc:aa:75:cd:4c:3f:09:59:58:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:FD:8C:E5:3B:89:40:3F:FB:E3:02:BB:8C:56:91:5B:B5:48:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF6657ACE72211ECA718FFA5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c4:b4:5d:26:f3:f0:c0:4c:e9:6b:4f:e5:96:77:30:d5:6a:
42:25:4e:bb:63:80:7d:e8:38:b4:88:a5:16:02:64:3a:68:a5:
f2:36:8b:8c:b7:16:ad:0f:e4:f8:88:3f:0b:82:0f:0b:b0:7e:
7a:da:3a:1e:31:f2:02:86:6d:13:97:4c:f9:80:71:e1:1e:2d:
93:b9:d7:75:bd:da:b9:5a:07:1f:0d:b5:42:84:57:c6:65:46:
2a:f0:ea:17:7c:0d:a4:f9:ba:b4:4a:fe:97:2e:86:2c:57:5c:
ef:6c:26:70:52:3b:2a:eb:71:a7:df:d1:a3:d8:0b:2d:2d:66:
e1:39:3b:ac:73:a4:56:b3:ff:1b:c8:f8:e7:bf:52:23:68:ea:
74:ec:59:59:69:8e:1e:c1:92:a6:31:db:f0:d5:7b:6b:32:f8:
ae:73:e4:94:74:ea:3b:9f:24:c4:9b:94:6e:1d:3b:df:47:1e:
85:9d:45:f5:33:0d:54:ea:76:01:58:08:a3:cc:65:92:1b:d8:
06:62:ca:26:d2:bb:d8:8e:20:aa:6c:b1:3c:63:6c:36:4b:c5:
26:52:59:6c:6a:fd:98:40:3c:4e:73:ff:74:9b:da:03:ee:ce:
61:00:87:69:30:b9:8d:32:07:5e:9b:f5:57:a7:ee:c6:11:d0:
43:e8:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org