Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF2294EF9D711EB9A7BEB03D8A014CE.roa
File: EFF2294EF9D711EB9A7BEB03D8A014CE.roa (raw, json)
Hash identifier: IDNthub480O4uxKSjkOmWR/uhAZPUSkJa9mQlS93sVc=
Subject key identifier: AD:D5:9B:3C:4A:DF:38:81:57:99:79:4A:20:97:1C:77:88:BB:B5:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0863
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF2294EF9D711EB9A7BEB03D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:39:40 +0000
ROA not before: Tue 10 Aug 2021 12:39:36 +0000
ROA not after: Mon 10 Oct 2022 12:39:36 +0000
asID: 9009
IP address blocks: 45.192.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:39:36 2021 GMT
Not After : Oct 10 12:39:36 2022 GMT
Subject: CN=6112738b-d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:23:85:ae:fa:eb:7b:90:eb:61:2c:3e:13:
e5:80:ea:35:be:2b:09:4d:2b:02:7e:cf:cc:ef:e2:
d8:40:dd:be:b2:e5:99:ae:cc:5b:2d:92:b9:ca:5a:
47:57:6e:ce:89:4c:e5:79:60:49:66:70:4d:84:96:
31:3d:b4:12:40:a6:df:30:d9:33:81:3b:35:ea:f3:
55:11:c7:6c:a0:30:ab:5f:02:82:c3:2e:33:ee:59:
52:e9:e8:52:8e:7a:fc:57:0f:e2:33:10:6f:7f:93:
63:e6:19:42:99:ef:c0:7a:80:53:08:55:5d:9a:33:
60:47:fd:29:3a:36:b7:2b:63:c3:ee:6a:d4:0e:5c:
12:77:7a:55:c1:34:b5:b9:ec:6f:4a:f8:37:dc:6a:
76:b3:c2:bb:65:b5:e7:14:37:39:9b:42:c2:72:a0:
6d:8c:a0:dd:66:cc:91:82:c2:08:f7:5d:ca:bb:40:
8c:d7:2f:52:92:d3:6a:1f:f7:a4:e0:7e:5e:bf:d0:
19:7e:3e:ba:ab:ed:8c:fc:b3:8f:18:30:4f:90:fe:
a5:81:2c:b6:1a:df:4a:9b:9c:6c:5d:3a:d6:a1:37:
0f:14:98:30:7b:7c:7c:57:a1:56:ea:24:0f:30:5e:
d6:d8:aa:30:96:ef:b2:b5:f3:0e:23:5c:b1:b0:f8:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D5:9B:3C:4A:DF:38:81:57:99:79:4A:20:97:1C:77:88:BB:B5:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF2294EF9D711EB9A7BEB03D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:e6:f3:83:68:db:1b:bc:be:31:ee:a0:6c:71:d5:c3:a0:41:
d0:7a:75:10:13:67:2d:1f:ef:94:d2:0b:57:d3:7e:67:dd:f2:
59:f7:02:16:15:53:33:80:8a:4a:55:3d:00:cd:3c:39:ea:6d:
30:f8:20:00:ea:59:ff:fd:79:3f:3d:2a:3c:31:35:11:5b:04:
07:1d:ec:14:92:15:3f:10:3c:e2:1a:b1:1a:4f:d3:8e:1c:3b:
27:b1:4b:f3:f7:be:66:e1:cd:cb:2e:4f:b0:00:a8:f6:05:3e:
59:3a:f6:7e:28:f5:32:95:ba:e1:59:7a:9f:08:60:3d:5d:bc:
97:13:e0:5d:81:e2:44:21:3e:82:b3:c2:c3:b5:d8:0e:c8:37:
18:24:35:24:11:3e:76:43:d0:6c:53:ce:76:d7:02:1d:6a:bc:
82:33:f0:e0:b7:a7:e8:0e:fa:9a:d2:42:fb:19:9e:88:8e:2d:
9e:fc:1a:57:54:cf:1c:57:15:b7:ee:81:f5:e2:29:33:1b:1b:
35:ba:6f:ff:1e:c7:0f:3a:99:07:c3:cf:e7:84:a2:ee:ce:ce:
66:c3:2d:6c:e0:59:c8:90:52:36:15:f1:88:29:80:f4:be:d2:
3c:14:03:4b:ea:51:85:8b:6f:22:48:a5:21:65:09:1d:8f:e0:
36:54:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org