Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF78DDFAD1D811ECBB45C98EF1222468.roa
File: CF78DDFAD1D811ECBB45C98EF1222468.roa (raw, json)
Hash identifier: hQCscKCRFq6gECKhiBhFdiQhRUnUJpczEpFRDj9HYLw=
Subject key identifier: FE:67:72:BE:D6:B7:E7:B6:7D:54:21:E1:CB:E2:97:5D:26:41:80:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF78DDFAD1D811ECBB45C98EF1222468.roa
Signing time: Thu 12 May 2022 09:49:27 +0000
ROA not before: Thu 12 May 2022 09:49:23 +0000
ROA not after: Fri 30 Dec 2022 09:49:23 +0000
asID: 35916
IP address blocks: 45.199.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5081 (0x13d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 09:49:23 2022 GMT
Not After : Dec 30 09:49:23 2022 GMT
Subject: CN=627cd826-f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:ee:93:36:7b:20:9d:06:a9:de:fa:31:9e:
37:fe:43:b5:7d:4e:39:dd:18:ea:1a:8f:df:5c:36:
38:2d:03:9f:4c:4c:e3:70:8a:03:78:62:64:5d:d5:
db:01:3e:30:db:c0:12:5c:f0:92:95:d5:54:fe:cc:
6c:4b:20:a3:db:f4:f2:40:a8:b4:a3:f5:20:92:58:
08:aa:38:18:d2:cd:dc:89:f4:2c:0e:45:e3:d7:a4:
61:3b:c0:ef:d9:93:02:70:eb:3d:b1:c2:d5:1b:b6:
c8:f3:df:20:82:da:50:70:83:98:42:dc:17:fc:7b:
15:7c:8b:ff:8d:11:92:45:9f:89:ad:55:9b:7d:cf:
9f:cf:a0:0e:5a:90:17:18:a9:73:85:54:e9:58:be:
d1:16:4c:6f:bc:bb:5c:4e:92:ec:8d:48:b3:cc:41:
3b:19:b4:35:b8:8c:dc:38:de:a1:d5:d4:9e:b0:64:
a1:ba:23:eb:94:59:c8:b3:52:66:55:1b:24:14:b0:
b0:82:97:f0:54:bd:31:60:04:48:0d:d8:e3:a7:27:
05:53:c7:4d:e9:49:03:3c:e0:2b:5a:85:be:96:f3:
94:f2:6f:86:14:5c:9f:ca:ec:52:d9:52:0b:05:18:
1c:19:c5:e8:96:55:07:3f:7c:80:69:1a:76:44:82:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:72:BE:D6:B7:E7:B6:7D:54:21:E1:CB:E2:97:5D:26:41:80:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF78DDFAD1D811ECBB45C98EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:98:07:9a:54:c0:ab:fc:a5:c1:41:ba:7f:9f:6b:1f:db:e9:
a5:93:fe:fc:06:b9:34:a1:aa:da:67:38:e9:b9:ad:8f:cb:0c:
4f:53:39:38:1b:c4:be:0f:52:80:7c:15:bb:e0:42:c2:87:74:
69:4d:d6:b8:3c:11:7c:93:7e:3e:f1:a0:84:43:ba:f5:09:65:
17:ee:3b:e5:b5:b4:c5:76:65:54:a8:9d:eb:52:66:c6:28:8a:
a0:c9:48:ad:0b:db:68:92:6a:58:e7:a0:c8:8a:63:40:61:91:
4b:31:d5:37:38:2c:ff:c2:d8:dd:6c:f2:8b:19:a9:09:2d:c5:
12:9a:fb:88:23:81:3a:2c:81:e3:8a:59:26:76:80:80:fa:0f:
3a:6b:d9:9d:95:f9:bf:b8:4d:f7:35:0e:bb:0d:74:4f:ef:1c:
ca:fc:58:c6:7b:42:6e:d0:14:3b:24:c0:e4:1b:f4:a4:6a:ee:
a5:3c:b9:a7:15:ba:e4:0a:6f:b6:f8:59:a5:76:11:8d:7d:90:
ad:18:a4:1c:29:9f:32:ff:59:58:ba:4f:f7:00:b8:35:d4:b2:
ef:f7:c8:e0:88:1e:fa:9a:59:38:31:59:b2:cd:40:f7:af:1f:
4f:42:32:bf:b4:0b:28:4a:25:d7:ee:6f:15:b6:cd:63:c9:3d:
69:d9:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org