Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA5A2CC20BEC11EC972AA263D8A014CE.roa
File: DA5A2CC20BEC11EC972AA263D8A014CE.roa (raw, json)
Hash identifier: bZJ3JxuWQ8IdOLcNLtEhvs88FI5JIHk8Z3x2OXnACsM=
Subject key identifier: DA:3F:0B:9F:51:D1:8E:7D:1B:98:B8:DC:79:BE:E3:4E:7C:9F:12:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0918
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA5A2CC20BEC11EC972AA263D8A014CE.roa
Signing time: Thu 02 Sep 2021 12:54:05 +0000
ROA not before: Thu 02 Sep 2021 12:54:00 +0000
ROA not after: Sun 02 Oct 2022 12:54:00 +0000
asID: 271965
IP address blocks: 45.195.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 12:54:00 2021 GMT
Not After : Oct 2 12:54:00 2022 GMT
Subject: CN=6130c96d-e709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:92:96:fb:7f:6b:18:7f:ec:09:d2:1b:06:
27:09:8c:a7:df:b6:9d:b8:a5:8e:a0:06:e1:c4:8b:
ac:d5:72:20:bd:fc:c2:6c:f6:de:78:50:76:c6:aa:
02:b6:9f:19:6d:9c:e1:92:cf:f9:c3:43:0d:7c:4a:
45:52:a1:55:62:da:18:05:9d:cb:94:04:9d:46:aa:
f6:d8:6e:bf:ed:ea:3d:56:b0:48:ae:c7:e7:c6:bd:
52:1c:6b:4e:7f:25:80:19:92:e4:d5:47:d4:6f:6a:
ee:eb:21:bc:3c:ea:9c:05:bb:b1:e8:e6:aa:06:d7:
1f:16:61:36:76:1e:c3:13:84:a9:94:26:3e:a9:7f:
4d:1f:48:07:dd:02:a9:98:50:e3:e1:aa:5f:92:06:
ce:dd:6b:c6:95:19:a2:c3:7d:76:1f:cc:90:0b:13:
c5:42:07:d3:de:d4:fc:6c:93:2c:6a:fb:41:bb:f6:
89:47:b5:08:c7:f5:d7:98:65:54:bd:f1:21:5e:62:
e8:d1:6f:07:ff:0d:77:fc:14:da:e3:f2:d6:38:f9:
cd:f4:f9:30:8b:68:82:ba:04:e0:c1:cd:16:77:5d:
f1:96:f8:af:2a:06:b4:23:d3:77:e2:4a:78:e4:9c:
d0:65:dd:20:5a:50:c1:88:aa:0e:d1:6f:d1:34:7f:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:0B:9F:51:D1:8E:7D:1B:98:B8:DC:79:BE:E3:4E:7C:9F:12:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA5A2CC20BEC11EC972AA263D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
52:45:0c:be:78:41:69:1c:43:83:d9:a4:f6:33:0a:38:fb:64:
0d:3b:da:a2:09:d7:b7:cb:18:c5:c7:91:b3:eb:15:24:bc:cc:
1d:91:9e:28:2f:c3:28:4f:42:df:6f:6f:84:6a:e3:87:3a:9e:
6f:53:0a:dc:0f:4c:fc:9c:ec:c7:b7:5b:76:04:41:28:da:14:
b0:6f:0a:9f:6a:6a:b3:7d:02:71:ef:5f:b2:ee:82:59:7f:80:
5e:1c:ba:a3:c9:80:a6:a4:c6:ef:c9:b0:b6:e5:9d:d9:46:51:
05:1a:dd:7d:07:99:f7:90:f5:3f:d2:cf:7b:da:c1:40:81:a5:
e8:4f:16:e0:6b:ad:95:29:13:9d:31:8c:9a:ed:56:b1:24:0d:
ed:94:f0:be:d2:78:58:98:3f:7f:8d:f4:a4:ad:65:57:89:cc:
8d:93:59:db:11:3f:67:dc:f9:7b:fc:02:b3:01:43:36:b4:81:
82:4a:4f:5a:99:f1:d0:bd:21:ac:bd:f0:e0:c3:3e:b2:1f:e5:
ef:af:5c:4d:f0:7a:b4:c6:fb:e0:60:31:3c:4b:fc:2e:fd:7e:
4a:6f:fc:79:57:e2:b6:fb:03:b3:ab:b4:1b:9d:54:7e:ab:d0:
28:03:0e:55:37:32:e6:3a:d5:df:91:e9:e3:e9:0a:94:73:3f:
8e:00:a8:5a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA5MDIxMjU0MDBaFw0yMjEwMDIxMjU0MDBaMBgxFjAU
BgNVBAMMDTYxMzBjOTZkLWU3MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcTJKW+39rGH/sCdIbBicJjKfftp24pY6gBuHEi6zVciC9/MJs9t54UHbG
qgK2nxltnOGSz/nDQw18SkVSoVVi2hgFncuUBJ1GqvbYbr/t6j1WsEiux+fGvVIc
a05/JYAZkuTVR9Rvau7rIbw86pwFu7Ho5qoG1x8WYTZ2HsMThKmUJj6pf00fSAfd
AqmYUOPhql+SBs7da8aVGaLDfXYfzJALE8VCB9Pe1Pxskyxq+0G79olHtQjH9deY
ZVS98SFeYujRbwf/DXf8FNrj8tY4+c30+TCLaIK6BODBzRZ3XfGW+K8qBrQj03fi
SnjknNBl3SBaUMGIqg7Rb9E0fyJfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2j8L
n1HRjn0bmLjceb7jTnyfEiswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RBNUEyQ0MyMEJFQzExRUM5NzJBQTI2M0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw0wwDQYJKoZIhvcNAQELBQAD
ggEBAFJFDL54QWkcQ4PZpPYzCjj7ZA072qIJ17fLGMXHkbPrFSS8zB2RnigvwyhP
Qt9vb4Rq44c6nm9TCtwPTPyc7Me3W3YEQSjaFLBvCp9qarN9AnHvX7Lugll/gF4c
uqPJgKakxu/JsLblndlGUQUa3X0HmfeQ9T/Sz3vawUCBpehPFuBrrZUpE50xjJrt
VrEkDe2U8L7SeFiYP3+N9KStZVeJzI2TWdsRP2fc+Xv8ArMBQza0gYJKT1qZ8dC9
Iay98ODDPrIf5e+vXE3werTG++BgMTxL/C79fkpv/HlX4rb7A7OrtBudVH6r0CgD
DlU3MuY61d+R6ePpCpRzP44AqFo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org