Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3DDC3BC1B8B11ECAF900E71D8A014CE.roa
File: F3DDC3BC1B8B11ECAF900E71D8A014CE.roa (raw, json)
Hash identifier: 3Kzjy1A5Jm7f9j6aUW+qlbb7z9r+v1HL5tyeGIug0g4=
Subject key identifier: 8B:56:F3:CA:EE:F7:81:D7:1A:D4:B8:83:F3:54:90:AC:1F:7B:0D:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0996
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3DDC3BC1B8B11ECAF900E71D8A014CE.roa
Signing time: Wed 22 Sep 2021 10:00:45 +0000
ROA not before: Wed 22 Sep 2021 10:00:41 +0000
ROA not after: Sat 22 Oct 2022 10:00:41 +0000
asID: 147019
IP address blocks: 45.194.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 22 10:00:41 2021 GMT
Not After : Oct 22 10:00:41 2022 GMT
Subject: CN=614afecd-4673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:bf:a6:29:b9:7d:f9:78:de:79:cd:55:e7:
c5:15:d9:38:9c:40:9b:c2:8e:04:97:c8:75:10:f2:
3d:e6:48:59:0f:e2:75:7c:25:ad:e7:6a:d6:4b:f1:
6b:0e:b7:ab:27:f5:a3:d8:4f:3d:97:db:d7:9b:42:
7a:6f:9f:3f:11:e8:ca:be:b6:5f:5d:ce:1a:15:f7:
8e:2b:06:ca:f6:43:57:0f:21:ac:a9:15:2d:e6:6f:
ea:29:e6:b6:a6:8a:bf:cd:b6:b7:ba:36:88:5f:92:
67:b1:19:43:bb:6e:b0:8c:5c:25:ab:f8:e9:5e:3c:
53:78:a3:66:93:7a:56:a8:af:48:07:e0:c8:75:5f:
b5:b4:bf:a1:f9:a0:67:48:88:eb:54:e5:6b:b0:15:
39:62:05:fc:6d:7b:aa:e6:2a:e6:e0:d7:97:c6:41:
40:81:83:d1:a2:d1:08:7a:81:f1:d6:cb:ec:cf:e4:
8c:6f:c4:1b:a5:28:2f:27:41:6a:d8:6a:54:c0:2c:
f1:56:d3:2c:20:ad:be:4e:c9:c0:f2:42:7b:94:d6:
26:e8:65:9a:2b:ad:e1:b3:80:b4:46:4c:04:58:fb:
d7:cd:25:f9:d3:da:84:7f:08:87:ab:fb:f5:56:b3:
49:fd:13:ef:b4:c2:74:06:43:40:a0:93:08:00:31:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:F3:CA:EE:F7:81:D7:1A:D4:B8:83:F3:54:90:AC:1F:7B:0D:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3DDC3BC1B8B11ECAF900E71D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:e7:b2:a9:96:c6:39:09:b8:80:8b:a1:ba:60:da:32:57:aa:
35:3d:89:1f:cb:32:ee:c7:e3:d8:80:65:99:19:12:41:25:b7:
69:bb:58:5a:6f:53:a8:c3:fa:4a:5f:7d:d6:72:91:f3:75:20:
22:d5:d9:a4:b0:e3:37:bc:5a:a8:dd:00:a1:c9:fd:01:94:27:
e5:4c:08:79:f7:52:94:ad:e2:2d:ba:84:ec:4d:a3:6b:75:9b:
92:5b:3e:12:d2:b6:72:21:b4:07:af:d4:4a:49:65:db:62:01:
bd:9a:69:40:00:34:57:ea:50:3a:6f:7c:ad:b3:00:77:2c:ed:
b8:b8:ed:3d:03:c0:8a:0c:e2:c4:28:42:57:72:9f:8f:80:e5:
4b:86:93:9b:56:b8:43:ef:d6:87:b7:e7:be:16:02:15:0a:d2:
4d:34:0c:fd:1c:4a:73:9c:03:40:cc:72:ea:32:6f:49:65:ec:
79:31:42:cb:c2:3c:09:03:fc:a1:74:71:0c:0b:94:31:5a:0c:
60:f2:4d:36:f0:48:b2:31:e5:92:7c:57:fe:16:52:ca:5b:eb:
58:17:c9:b4:ae:fd:1a:a8:bf:54:48:e3:97:0c:39:fb:24:bb:
e3:00:a0:2a:4f:05:df:d8:6d:fa:d6:67:c2:01:39:09:11:71:
5f:d1:02:28
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA5MjIxMDAwNDFaFw0yMjEwMjIxMDAwNDFaMBgxFjAU
BgNVBAMMDTYxNGFmZWNkLTQ2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDfb+mKbl9+Xjeec1V58UV2TicQJvCjgSXyHUQ8j3mSFkP4nV8Ja3natZL
8WsOt6sn9aPYTz2X29ebQnpvnz8R6Mq+tl9dzhoV944rBsr2Q1cPIaypFS3mb+op
5ramir/Ntre6NohfkmexGUO7brCMXCWr+OlePFN4o2aTelaor0gH4Mh1X7W0v6H5
oGdIiOtU5WuwFTliBfxte6rmKubg15fGQUCBg9Gi0Qh6gfHWy+zP5IxvxBulKC8n
QWrYalTALPFW0ywgrb5OycDyQnuU1iboZZorreGzgLRGTARY+9fNJfnT2oR/CIer
+/VWs0n9E++0wnQGQ0CgkwgAMTkBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUi1bz
yu73gdca1LiD81SQrB97DRgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0YzRERDM0JDMUI4QjExRUNBRjkwMEU3MUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMtwjgwDQYJKoZIhvcNAQELBQAD
ggEBAI7nsqmWxjkJuICLobpg2jJXqjU9iR/LMu7H49iAZZkZEkElt2m7WFpvU6jD
+kpffdZykfN1ICLV2aSw4ze8WqjdAKHJ/QGUJ+VMCHn3UpSt4i26hOxNo2t1m5Jb
PhLStnIhtAev1EpJZdtiAb2aaUAANFfqUDpvfK2zAHcs7bi47T0DwIoM4sQoQldy
n4+A5UuGk5tWuEPv1oe3574WAhUK0k00DP0cSnOcA0DMcuoyb0ll7HkxQsvCPAkD
/KF0cQwLlDFaDGDyTTbwSLIx5ZJ8V/4WUspb61gXybSu/Rqov1RI45cMOfsku+MA
oCpPBd/YbfrWZ8IBOQkRcV/RAig=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org