Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F892644857CD11ECBE1795AF5A40D577.roa
File: F892644857CD11ECBE1795AF5A40D577.roa (raw, json)
Hash identifier: SaH7/dQyCrvtCIx6UKlvAUZNUvudgJ0V9+PLgkHSrz0=
Subject key identifier: 52:D1:7D:BB:2E:84:3D:7C:AF:72:18:D5:EA:08:E7:1E:2D:69:69:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1060
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F892644857CD11ECBE1795AF5A40D577.roa
Signing time: Wed 08 Dec 2021 02:24:29 +0000
ROA not before: Wed 08 Dec 2021 02:24:26 +0000
ROA not after: Fri 30 Dec 2022 02:24:26 +0000
asID: 9009
IP address blocks: 45.192.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4192 (0x1060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:24:26 2021 GMT
Not After : Dec 30 02:24:26 2022 GMT
Subject: CN=61b0175d-a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:d1:84:68:c0:04:d8:26:2e:49:6f:06:e6:
3d:41:48:55:ea:d5:1f:1d:e7:6b:99:a2:d4:fc:29:
d8:6c:2c:34:ee:28:c8:79:95:1e:8e:3e:49:e2:a0:
b7:35:ef:9e:ae:eb:52:06:e3:6f:ec:75:ea:31:60:
f6:94:3b:1b:de:b4:fe:c0:35:ff:5b:5f:c6:dd:7e:
10:ec:42:aa:db:49:5c:0c:ac:5c:ab:98:8d:e2:08:
4e:b1:06:a9:ed:26:6b:3e:3a:e9:05:f3:71:d7:39:
cc:6c:7a:84:c6:0d:a8:20:7c:bc:bd:57:b6:32:47:
1b:a7:ce:ba:59:46:d1:79:e7:47:12:79:3c:c6:38:
8d:59:5c:e6:ab:5a:c3:9a:90:7d:03:dd:91:0f:72:
8f:64:41:6d:07:0e:97:00:a4:9b:23:86:09:4f:ad:
ea:df:37:ef:e5:d2:66:ab:24:17:70:2d:9a:93:39:
b7:0e:13:bd:11:a9:b6:ba:ef:5b:49:d4:6e:a0:fb:
e0:4d:41:7e:b9:10:56:22:23:01:09:4b:8a:bb:5f:
0e:5b:fa:fa:1d:d2:9f:60:c3:72:16:e0:b0:45:f9:
f2:a9:67:e1:8a:9d:e5:cb:84:22:bd:cd:0a:e7:93:
fd:80:f1:8c:b6:c6:82:f3:ed:5e:a3:e8:c7:14:ce:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:7D:BB:2E:84:3D:7C:AF:72:18:D5:EA:08:E7:1E:2D:69:69:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F892644857CD11ECBE1795AF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:32:4c:11:67:05:14:aa:e0:96:c4:c3:13:95:cb:3a:24:d4:
53:e4:52:eb:07:1f:df:cb:cd:00:b6:8a:f6:0b:f6:be:44:6d:
e5:a3:2c:ee:20:68:df:ee:06:b5:9f:c8:0c:b5:d7:2d:41:f1:
44:3e:a7:1d:52:bd:1a:69:af:0a:a5:3e:88:43:61:f8:21:dc:
60:ea:75:a9:59:f8:3b:19:e4:c7:ca:b1:e2:2e:4e:fa:54:f9:
43:1b:e6:15:c0:b5:b1:72:b4:0e:e4:cd:39:ad:a0:8c:41:da:
95:18:18:35:f9:91:4d:f9:31:26:31:e4:6d:a8:1a:ff:f5:e3:
99:ad:44:90:91:b6:03:78:3f:b7:5c:6e:bd:9a:7e:2a:c0:90:
c6:c8:99:33:31:a8:5d:d6:3e:df:be:18:41:c1:8e:95:d4:30:
06:b2:42:c2:cb:21:ef:5f:a7:b1:e0:24:a9:05:43:95:f0:25:
cd:62:04:3a:71:7a:01:4e:af:76:b3:56:35:13:c4:fd:68:d2:
aa:19:3b:21:71:93:61:b5:19:0f:d2:bc:b8:2c:a1:0c:bf:24:
a5:6d:2e:93:4d:c1:1a:51:0b:84:62:54:d2:3c:8e:95:2f:27:
4f:2b:2f:0f:35:da:8d:75:ad:d6:90:57:46:fe:57:8c:de:81:
58:43:d6:2f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMjI0MjZaFw0yMjEyMzAwMjI0MjZaMBgxFjAU
BgNVBAMMDTYxYjAxNzVkLWE3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfpNGEaMAE2CYuSW8G5j1BSFXq1R8d52uZotT8KdhsLDTuKMh5lR6OPkni
oLc1756u61IG42/sdeoxYPaUOxvetP7ANf9bX8bdfhDsQqrbSVwMrFyrmI3iCE6x
BqntJms+OukF83HXOcxseoTGDaggfLy9V7YyRxunzrpZRtF550cSeTzGOI1ZXOar
WsOakH0D3ZEPco9kQW0HDpcApJsjhglPrerfN+/l0marJBdwLZqTObcOE70Rqba6
71tJ1G6g++BNQX65EFYiIwEJS4q7Xw5b+vod0p9gw3IW4LBF+fKpZ+GKneXLhCK9
zQrnk/2A8Yy2xoLz7V6j6McUzsKrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUtF9
uy6EPXyvchjV6gjnHi1pafswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Y4OTI2NDQ4NTdDRDExRUNCRTE3OTVBRjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwI4wDQYJKoZIhvcNAQELBQAD
ggEBALUyTBFnBRSq4JbEwxOVyzok1FPkUusHH9/LzQC2ivYL9r5EbeWjLO4gaN/u
BrWfyAy11y1B8UQ+px1SvRpprwqlPohDYfgh3GDqdalZ+DsZ5MfKseIuTvpU+UMb
5hXAtbFytA7kzTmtoIxB2pUYGDX5kU35MSYx5G2oGv/145mtRJCRtgN4P7dcbr2a
firAkMbImTMxqF3WPt++GEHBjpXUMAayQsLLIe9fp7HgJKkFQ5XwJc1iBDpxegFO
r3azVjUTxP1o0qoZOyFxk2G1GQ/SvLgsoQy/JKVtLpNNwRpRC4RiVNI8jpUvJ08r
Lw812o11rdaQV0b+V4zegVhD1i8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org