Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E98F12540011ECB1157F07D8A014CE.roa
File: D7E98F12540011ECB1157F07D8A014CE.roa (raw, json)
Hash identifier: 39zxjR1DvJYiKeaAKjGlBfzriYM4z0NCrEC3hAA1Xmk=
Subject key identifier: CB:7C:E8:4B:F6:79:25:C7:F0:FF:12:52:82:D9:F2:6E:C2:63:68:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1022
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E98F12540011ECB1157F07D8A014CE.roa
Signing time: Fri 03 Dec 2021 06:18:34 +0000
ROA not before: Fri 03 Dec 2021 06:18:30 +0000
ROA not after: Wed 30 Mar 2022 06:18:30 +0000
asID: 1239
IP address blocks: 45.205.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 3 06:18:30 2021 GMT
Not After : Mar 30 06:18:30 2022 GMT
Subject: CN=61a9b6ba-a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:3b:6a:91:a5:12:13:30:7f:d3:e6:5c:eb:
8a:52:99:4c:d0:4b:1f:7b:4e:45:f8:3e:9a:67:0f:
8d:b9:11:1c:57:72:a5:0d:40:11:78:04:31:99:8d:
56:dc:d8:79:0a:a7:72:22:6b:3c:60:7f:46:20:2c:
ed:48:51:72:1d:1a:fd:b8:d4:a3:0f:6e:30:6f:43:
7c:66:24:7e:e6:9f:88:0a:c4:6d:d2:c2:b5:44:bd:
6a:08:a3:4d:e0:40:04:9a:33:fc:03:09:6f:13:f2:
8e:68:ff:a6:a1:ea:74:78:9e:8d:97:9b:4f:fe:0a:
16:26:e0:68:a2:9c:07:19:2c:c8:82:9c:d7:64:17:
a3:74:e3:e5:40:c1:10:13:56:97:13:14:83:86:d1:
df:f6:dd:ff:8b:31:3d:04:ae:10:f1:4c:df:71:ef:
80:be:54:64:56:bc:e5:e1:76:5d:c6:4d:56:8b:cf:
51:18:0f:17:0b:b5:81:35:7b:8a:a1:09:97:e9:69:
6b:0f:35:5a:73:8a:b5:ad:2d:7f:02:8e:38:e7:ad:
f0:5e:ee:35:19:2d:13:7b:a8:d9:a3:7f:d3:32:ce:
e8:e8:73:d0:04:50:ba:4e:fd:55:e1:37:3f:8e:4b:
aa:db:67:89:29:4a:66:c7:8e:43:4d:59:0d:cc:b3:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:E8:4B:F6:79:25:C7:F0:FF:12:52:82:D9:F2:6E:C2:63:68:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E98F12540011ECB1157F07D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a6:0b:8e:83:c7:e0:9b:e5:8d:4c:04:b4:d2:cc:56:18:34:
39:a9:86:9a:1d:e0:c4:d6:e2:4a:25:ee:45:7c:2c:e0:7d:b5:
66:3b:60:02:a1:92:32:f1:cb:32:00:71:c0:9d:46:e6:f9:fd:
aa:3b:c4:ed:30:b2:e3:d8:eb:e5:60:57:5d:72:83:de:81:80:
ab:5e:c3:28:1a:7b:9d:b3:ec:c9:5e:82:27:bf:fc:85:2d:74:
0a:1f:b3:a1:58:8c:0a:4b:d2:ab:1f:e9:47:bf:2c:dc:1c:63:
84:c0:33:e3:53:4e:70:1f:71:84:79:8e:3f:81:60:3f:2a:bb:
c1:03:de:37:83:8c:f0:81:e2:b2:8a:fe:18:ea:e9:81:0a:50:
6d:ff:ec:65:8e:c7:e8:22:1b:10:62:8b:de:00:8b:a1:7f:43:
4a:f3:d8:b7:d0:1d:15:a0:6f:de:b5:84:40:89:41:9a:be:9c:
b0:c7:ba:a6:1d:50:71:43:ee:90:16:fa:02:ec:88:38:5d:30:
ee:65:a0:bf:05:86:58:5a:10:54:e8:c0:37:12:0a:92:2e:c4:
72:57:5c:dc:7f:d4:e4:99:63:90:3f:b5:a0:c1:07:19:6a:b9:
30:15:f0:b2:90:75:3e:c6:6f:8a:9f:10:51:ef:77:7e:19:a3:
ac:4f:39:79
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICECIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDMwNjE4MzBaFw0yMjAzMzAwNjE4MzBaMBgxFjAU
BgNVBAMMDTYxYTliNmJhLWExOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPcztqkaUSEzB/0+Zc64pSmUzQSx97TkX4PppnD425ERxXcqUNQBF4BDGZ
jVbc2HkKp3Iiazxgf0YgLO1IUXIdGv241KMPbjBvQ3xmJH7mn4gKxG3SwrVEvWoI
o03gQASaM/wDCW8T8o5o/6ah6nR4no2Xm0/+ChYm4GiinAcZLMiCnNdkF6N04+VA
wRATVpcTFIOG0d/23f+LMT0ErhDxTN9x74C+VGRWvOXhdl3GTVaLz1EYDxcLtYE1
e4qhCZfpaWsPNVpzirWtLX8CjjjnrfBe7jUZLRN7qNmjf9Myzujoc9AEULpO/VXh
Nz+OS6rbZ4kpSmbHjkNNWQ3Ms3UpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUy3zo
S/Z5Jcfw/xJSgtnybsJjaMUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q3RTk4RjEyNTQwMDExRUNCMTE1N0YwN0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItzfgwDQYJKoZIhvcNAQELBQAD
ggEBAKamC46Dx+Cb5Y1MBLTSzFYYNDmphpod4MTW4kol7kV8LOB9tWY7YAKhkjLx
yzIAccCdRub5/ao7xO0wsuPY6+VgV11yg96BgKtewygae52z7Mlegie//IUtdAof
s6FYjApL0qsf6Ue/LNwcY4TAM+NTTnAfcYR5jj+BYD8qu8ED3jeDjPCB4rKK/hjq
6YEKUG3/7GWOx+giGxBii94Ai6F/Q0rz2LfQHRWgb961hECJQZq+nLDHuqYdUHFD
7pAW+gLsiDhdMO5loL8FhlhaEFTowDcSCpIuxHJXXNx/1OSZY5A/taDBBxlquTAV
8LKQdT7Gb4qfEFHvd34Zo6xPOXk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org