Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8BFEE257CD11EC9A0684AF5A40D577.roa
File: ED8BFEE257CD11EC9A0684AF5A40D577.roa (raw, json)
Hash identifier: LTjuJbCvVHsw3NFjYSfz8rePvGBgIUmqLGDPHLtFn+0=
Subject key identifier: F5:D8:AD:22:F3:4F:EE:9E:1F:8F:CF:CA:2C:AA:8E:AB:3A:92:C1:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 105E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8BFEE257CD11EC9A0684AF5A40D577.roa
Signing time: Wed 08 Dec 2021 02:24:11 +0000
ROA not before: Wed 08 Dec 2021 02:24:07 +0000
ROA not after: Fri 30 Dec 2022 02:24:07 +0000
asID: 9009
IP address blocks: 45.192.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4190 (0x105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:24:07 2021 GMT
Not After : Dec 30 02:24:07 2022 GMT
Subject: CN=61b0174b-4881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:92:a1:d8:d8:bf:ab:f3:f2:89:b0:14:77:
cf:7c:64:82:38:3a:0e:4e:0e:a8:11:8b:fc:98:e8:
b4:df:8d:0a:fb:aa:ca:39:c3:ba:c1:c2:e8:94:06:
cd:ed:37:9a:1b:fa:c0:23:f0:bb:2d:80:d6:5e:66:
9a:76:97:82:42:70:04:62:d3:7f:e8:70:c8:bd:a5:
a0:2e:84:cb:58:35:84:e2:7d:d8:f2:f6:43:41:84:
5a:be:11:cd:02:00:69:ec:7e:f5:38:a7:8f:5d:09:
0a:0a:e7:bb:44:e9:d8:2b:0e:95:0e:e9:20:8e:58:
c5:00:d1:82:30:08:7b:97:1d:d0:b3:2b:14:3d:dc:
90:bc:7d:54:4c:52:94:42:1f:a2:0e:88:bd:a2:3f:
b6:3e:ea:31:b2:4a:31:1b:2d:da:c0:69:78:70:a7:
3d:aa:e3:b7:9f:e0:2f:d2:f4:52:ca:cb:07:cb:7c:
24:ab:ca:65:ba:f2:8e:36:f7:12:29:92:48:7d:e0:
e0:5f:b4:2b:dd:2e:6c:a2:1e:f1:38:7f:8a:e0:1a:
cf:07:a7:df:95:4a:09:ce:b4:3d:1d:e7:26:ae:2d:
b1:2d:2b:80:00:db:6d:e0:fc:39:c4:e7:de:68:38:
f2:d3:71:09:8b:83:60:1b:82:61:ae:90:61:2c:d1:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:AD:22:F3:4F:EE:9E:1F:8F:CF:CA:2C:AA:8E:AB:3A:92:C1:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8BFEE257CD11EC9A0684AF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.140.0/24
Signature Algorithm: sha256WithRSAEncryption
36:61:29:d5:54:93:74:d2:7d:f4:d3:52:97:2b:8a:aa:24:77:
9f:9a:b9:7a:39:06:ad:6c:6f:be:f6:3e:90:d8:d9:d7:ce:21:
7b:0b:86:fd:5b:ac:5a:2f:ef:b6:0b:23:38:70:e2:ec:7a:f5:
be:c1:e2:c4:7f:aa:7d:70:10:db:71:35:8f:3e:1a:5c:45:bc:
4c:64:98:1f:e2:5c:88:f7:3f:36:89:a5:b0:cf:81:0c:f0:ec:
2d:a5:11:ab:a4:bc:26:36:80:7e:7c:50:56:f8:15:ae:23:f4:
00:eb:5c:9e:3d:89:8f:4d:23:b5:03:77:27:d7:90:fd:97:32:
96:58:88:ca:a8:51:5a:a5:6e:9e:3e:b9:7d:05:86:6b:c2:f9:
bf:af:d6:c7:ed:c0:d3:db:e0:a2:20:00:57:90:ec:89:0a:71:
4f:4c:02:d2:7a:24:ad:76:98:d2:95:f0:30:9b:71:a8:6b:8b:
e1:63:8f:4b:9e:49:2e:4b:83:88:69:9b:61:1b:aa:84:a4:bb:
73:43:ae:fa:cf:1d:09:07:f4:c9:b5:e1:de:99:19:3b:20:75:
67:3a:f6:f4:45:29:15:4d:7e:7a:ef:3c:4c:70:20:34:66:a4:
0a:19:51:ff:66:1b:d8:09:24:d9:74:28:5d:d7:b7:98:88:ca:
5f:f6:c3:d8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjI0MDdaFw0yMjEyMzAwMjI0MDdaMBgxFjAU
BgNVBAMMDTYxYjAxNzRiLTQ4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmD5Kh2Ni/q/PyibAUd898ZII4Og5ODqgRi/yY6LTfjQr7qso5w7rBwuiU
Bs3tN5ob+sAj8LstgNZeZpp2l4JCcARi03/ocMi9paAuhMtYNYTifdjy9kNBhFq+
Ec0CAGnsfvU4p49dCQoK57tE6dgrDpUO6SCOWMUA0YIwCHuXHdCzKxQ93JC8fVRM
UpRCH6IOiL2iP7Y+6jGySjEbLdrAaXhwpz2q47ef4C/S9FLKywfLfCSrymW68o42
9xIpkkh94OBftCvdLmyiHvE4f4rgGs8Hp9+VSgnOtD0d5yauLbEtK4AA223g/DnE
595oOPLTcQmLg2AbgmGukGEs0ebbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9dit
IvNP7p4fj8/KLKqOqzqSwQAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VEOEJGRUUyNTdDRDExRUM5QTA2ODRBRjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwIwwDQYJKoZIhvcNAQELBQAD
ggEBADZhKdVUk3TSffTTUpcriqokd5+auXo5Bq1sb772PpDY2dfOIXsLhv1brFov
77YLIzhw4ux69b7B4sR/qn1wENtxNY8+GlxFvExkmB/iXIj3PzaJpbDPgQzw7C2l
EaukvCY2gH58UFb4Fa4j9ADrXJ49iY9NI7UDdyfXkP2XMpZYiMqoUVqlbp4+uX0F
hmvC+b+v1sftwNPb4KIgAFeQ7IkKcU9MAtJ6JK12mNKV8DCbcahri+Fjj0ueSS5L
g4hpm2EbqoSku3NDrvrPHQkH9Mm14d6ZGTsgdWc69vRFKRVNfnrvPExwIDRmpAoZ
Uf9mG9gJJNl0KF3Xt5iIyl/2w9g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org