Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F375A7A4E6D911ECB0A863C0F1222468.roa
File: F375A7A4E6D911ECB0A863C0F1222468.roa (raw, json)
Hash identifier: 1JfJpC19yGqkvnGZeCiqL895PebgmszbILDBeYU7bQ4=
Subject key identifier: 23:A7:45:C4:1B:D4:0B:22:06:BE:5A:02:8E:4A:FE:6C:10:FD:A5:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1449
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F375A7A4E6D911ECB0A863C0F1222468.roa
Signing time: Wed 08 Jun 2022 03:20:31 +0000
ROA not before: Mon 27 Jun 2022 03:20:28 +0000
ROA not after: Fri 30 Jun 2023 03:20:28 +0000
asID: 262167
IP address blocks: 45.199.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5193 (0x1449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 03:20:28 2022 GMT
Not After : Jun 30 03:20:28 2023 GMT
Subject: CN=62a0157f-7d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:26:f9:a8:f4:68:8b:72:b3:3f:0a:b2:89:
bc:44:72:23:db:b0:37:91:59:be:6d:18:69:af:2b:
31:1a:45:cd:7f:d6:7d:22:d1:2d:44:7d:d9:ba:06:
87:fe:e1:dd:f6:b1:6b:af:10:cc:7d:80:25:2d:87:
74:b9:bd:ad:d1:e0:8c:ec:00:63:85:8c:f1:d1:58:
a2:6a:f4:ec:cf:8b:72:eb:45:ba:df:ae:45:e0:5a:
f1:3a:ec:ef:de:47:f2:b4:f7:a1:1d:f6:ae:37:f0:
5e:3f:76:5a:f6:5d:42:7e:18:ed:6c:93:18:5b:72:
03:94:10:3a:10:43:fe:6b:75:22:16:5a:73:39:82:
31:5f:91:89:7e:7f:45:53:2f:d7:8b:3a:9e:17:9b:
52:e3:4f:b5:e6:45:68:03:86:00:1e:22:06:e8:b7:
e2:7d:aa:5b:94:f2:d4:84:8b:fd:ab:87:b7:aa:e4:
9d:5a:2a:90:b4:2d:44:99:10:04:95:93:4f:e1:47:
f1:61:b5:71:74:af:85:ce:d9:29:99:54:d0:c6:30:
81:cd:34:5c:85:3d:c3:15:94:e4:1a:54:87:d2:db:
a4:fc:df:e5:f5:df:f8:10:87:26:28:cb:c2:75:0b:
44:ac:0b:e5:d3:ab:0e:a1:0e:7e:74:7b:8c:72:ae:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:45:C4:1B:D4:0B:22:06:BE:5A:02:8E:4A:FE:6C:10:FD:A5:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F375A7A4E6D911ECB0A863C0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d1:6f:fd:08:3d:1e:62:8f:a6:53:15:ef:97:19:eb:78:6f:
fb:ce:a1:15:11:89:fe:b0:db:a4:1f:4f:2e:a8:9a:4e:fc:c4:
c6:5f:40:ac:8b:22:36:ac:51:57:d6:5a:67:88:b7:cf:2c:74:
a4:76:c4:1c:59:0b:c1:66:a9:82:b9:34:97:26:4f:3c:3e:fd:
d1:97:35:1d:fb:6c:b8:0e:03:3d:c7:67:fa:1b:e5:6c:d8:37:
24:17:2e:22:2a:d8:3a:74:5b:35:05:c5:37:d8:77:67:0d:d2:
50:7e:25:74:3e:e2:a5:e8:64:c2:3e:ce:de:93:de:56:cf:c7:
ac:01:5a:b2:21:97:77:7e:dd:49:57:68:74:2b:d7:80:50:82:
be:92:72:31:21:8d:f6:0c:39:c9:43:cc:d3:62:df:d7:30:c0:
60:8e:d1:58:78:ea:af:29:f6:72:87:e2:dd:10:14:02:70:58:
f9:ba:52:10:9b:4b:64:08:47:cf:03:9d:cb:7b:99:1e:a8:b6:
83:cd:b0:d8:e5:c5:3e:58:50:80:cf:0f:f3:98:86:27:2e:85:
27:21:95:20:aa:72:8c:bd:dd:03:4a:4b:19:ac:6e:b0:98:4e:
9b:b5:fa:3f:ac:7c:90:30:fa:a0:a7:36:6f:48:e2:72:1f:87:
b1:ff:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org