Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4EAFD8CEAF411EC816E49CEF1222468.roa
File: E4EAFD8CEAF411EC816E49CEF1222468.roa (raw, json)
Hash identifier: 1ZVvHEQ6G85vfGqOzkAOWVPcr+qbFihLWm70OmrRBBg=
Subject key identifier: 44:CF:31:15:21:AE:55:22:12:6E:6E:B8:76:00:E3:44:6E:E0:EC:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4EAFD8CEAF411EC816E49CEF1222468.roa
Signing time: Mon 13 Jun 2022 08:43:27 +0000
ROA not before: Mon 13 Jun 2022 08:43:24 +0000
ROA not after: Fri 30 Dec 2022 08:43:24 +0000
asID: 328608
IP address blocks: 45.196.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5332 (0x14d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:43:24 2022 GMT
Not After : Dec 30 08:43:24 2022 GMT
Subject: CN=62a6f8af-8159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:93:3e:47:2d:67:63:83:ba:86:6e:9c:89:
28:86:c3:88:2e:f9:40:b9:37:a1:c8:59:cb:41:f4:
d5:1f:e2:b1:8b:fa:51:a9:6b:78:0b:77:93:d9:1d:
3e:45:a6:91:f9:3f:9e:f7:2e:59:83:65:46:40:b7:
04:28:33:0a:d7:98:3f:10:49:99:b2:8c:b3:8d:c5:
e9:00:b9:4f:fc:14:18:93:4a:b3:17:a0:d4:cc:f9:
33:ff:6e:d6:d7:b1:8e:75:a2:6c:1d:91:90:51:04:
6f:12:ce:73:82:8b:62:c7:13:f1:ad:37:6c:31:f1:
7c:aa:78:5c:a7:60:39:3e:7e:28:34:ba:98:04:2a:
03:e0:8b:c4:20:69:26:1f:3c:95:d2:04:70:19:97:
45:7f:1a:16:db:1b:3c:26:dd:b7:e1:98:7d:c1:ba:
f8:1e:51:61:cf:91:cf:16:0c:c0:56:0f:b1:e2:2c:
64:1c:6c:fc:37:ac:e8:86:02:35:e9:9f:39:10:ae:
10:ae:42:7a:5b:d0:64:57:6e:e1:8b:e5:83:96:b7:
7a:85:03:ef:dc:c3:ab:f1:93:ab:5f:c1:ef:76:51:
c2:fe:39:6a:b4:3f:9a:56:fd:ef:68:ee:cc:7f:6f:
eb:0f:b5:36:64:97:4a:b4:ed:7b:78:21:ce:f4:76:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:31:15:21:AE:55:22:12:6E:6E:B8:76:00:E3:44:6E:E0:EC:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4EAFD8CEAF411EC816E49CEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.128.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:1f:d6:5e:7f:72:70:92:ee:71:09:20:40:a9:e2:21:e2:22:
04:4e:79:c0:e7:3b:89:00:fb:57:3a:25:1c:8d:43:c8:87:43:
de:d7:4a:6c:29:d3:c6:74:9d:f3:a0:10:78:27:f0:d5:54:46:
38:bb:a5:6f:69:b5:3c:f5:57:18:6c:e3:f0:c8:ba:f6:a3:ea:
ae:d7:21:04:43:2d:9f:fd:49:51:23:ca:bb:65:52:2e:20:cb:
6e:6f:44:c1:13:5f:61:99:c0:18:f0:8f:ba:34:5c:39:be:a9:
3c:ef:3e:9e:e7:9a:29:ab:15:4b:8d:d3:fc:64:77:a8:9a:3b:
a7:4d:68:cc:e5:de:4f:16:fd:6e:b1:cf:0c:1c:80:51:a5:b3:
be:8c:7e:0d:86:ac:84:0a:b1:a8:25:aa:87:bf:e6:c4:40:8b:
8e:da:aa:21:f5:33:6a:5e:4f:b6:1c:7d:70:7b:8e:b2:cd:4f:
78:7a:f0:97:10:f1:c3:88:ea:da:8a:ad:65:63:7d:91:d1:b5:
f2:df:bd:c4:8a:4c:b9:76:b5:48:3f:3a:aa:6a:2d:62:b4:2e:
0b:09:3c:b4:4e:bb:58:35:de:b6:7a:d0:14:c1:da:d6:17:7a:
8e:7c:0e:94:f0:93:d3:3a:13:20:21:49:c2:d5:cb:53:6a:94:
d2:2c:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org