Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF29C6A4C8C611EB82A45A4DF8AEA228.roa
File: DF29C6A4C8C611EB82A45A4DF8AEA228.roa (raw, json)
Hash identifier: 62+zh3pQQF2hKF6c6eSRG6uYusAasBWLbSrOUP0Wigg=
Subject key identifier: 00:6E:EF:B6:8D:69:38:10:D3:A2:B7:03:E3:56:71:E1:15:2B:06:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0652
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF29C6A4C8C611EB82A45A4DF8AEA228.roa
Signing time: Wed 09 Jun 2021 02:03:24 +0000
ROA not before: Wed 09 Jun 2021 02:03:19 +0000
ROA not after: Tue 09 Aug 2022 02:03:19 +0000
asID: 59134
IP address blocks: 45.195.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 02:03:19 2021 GMT
Not After : Aug 9 02:03:19 2022 GMT
Subject: CN=60c0216c-25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:b7:3e:9f:9f:0d:f4:61:5a:12:26:2d:9b:
7c:92:87:8b:2e:76:db:11:15:ba:e5:66:a5:fe:c9:
ba:93:b8:4e:ba:42:a1:97:51:a8:e8:0f:eb:ed:5b:
9d:75:de:d0:89:eb:0f:39:3e:73:0d:88:aa:06:7a:
ff:68:4b:d9:b4:62:76:98:17:a4:66:39:86:45:db:
50:c0:fa:e9:89:9a:a4:f8:82:ca:21:0f:2f:49:fd:
01:2c:0c:d1:7c:4a:71:f9:e7:e6:3f:d4:96:6c:51:
f7:a9:22:e3:21:13:26:ad:e3:ec:70:e5:ec:d7:59:
fd:b6:67:d2:d6:77:52:29:64:41:f4:f6:b4:f1:2c:
ed:87:6e:3e:06:7a:15:c4:88:c0:b1:f1:19:33:a5:
d9:3d:ea:0d:5e:fe:3f:c8:52:33:ec:54:f1:a1:1e:
b0:1c:8d:53:24:b2:4e:98:2a:77:0e:18:3b:78:89:
c9:ee:be:a1:7f:8d:72:d3:dc:a7:31:57:f8:72:d0:
89:8f:e2:98:6b:bc:9b:15:93:b4:97:44:06:af:b9:
4d:dc:de:02:b2:dc:63:ed:29:28:54:4e:78:67:f1:
15:01:09:a0:bd:8a:57:96:5b:8e:e7:e3:01:fc:b2:
f1:7a:3b:52:be:55:fb:73:ff:c6:43:9e:01:89:45:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:EF:B6:8D:69:38:10:D3:A2:B7:03:E3:56:71:E1:15:2B:06:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF29C6A4C8C611EB82A45A4DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.248.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:0e:7b:d3:4c:bd:5d:3c:b0:d2:04:36:76:3b:a1:91:88:cd:
63:73:ed:8d:2b:77:2b:39:d7:59:7c:26:6b:11:12:ff:45:6f:
79:6a:4e:02:de:60:a8:ed:0b:6f:d0:9b:a8:22:f6:3c:93:09:
e9:7f:39:89:ea:1b:fd:a6:5f:32:fa:53:ea:bb:c1:05:2c:a5:
41:70:86:f6:bc:e1:3b:af:e0:fb:81:d6:98:81:4c:2a:aa:96:
c6:3d:77:c4:03:60:ad:97:68:ca:c0:19:50:f5:8b:58:d6:5b:
38:74:6a:0a:5f:72:f7:7d:21:e6:17:73:ae:65:86:44:b7:5a:
18:28:1f:2e:22:f2:37:12:b7:02:90:89:e7:6e:5e:d9:3e:29:
54:bf:06:4a:a3:f0:22:8f:61:5b:7d:17:41:a2:a1:bf:33:54:
08:21:af:89:5a:59:4c:e7:ed:95:ca:40:2f:b8:5c:cc:64:88:
c1:6f:f2:bf:47:58:7a:20:26:9f:0b:51:6f:e3:aa:b8:d6:93:
4f:ec:a1:0d:6b:4b:fc:f9:62:26:52:65:b4:a4:57:44:32:e0:
46:f0:cd:87:cb:88:b1:39:01:5a:e3:82:00:66:f9:9f:a3:8d:
bc:e1:4e:3f:76:cf:a2:22:3d:9e:da:71:08:f4:d9:bc:b0:86:
4f:e7:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org