Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CE7D7CE89811ECA1AD22CEF1222468.roa
File: F9CE7D7CE89811ECA1AD22CEF1222468.roa (raw, json)
Hash identifier: 1l8ijTKkPIqIOVvMaRgaI7WEPY8+W/7bYcmqBidlW2w=
Subject key identifier: 64:E4:47:54:FF:61:BA:37:76:EA:CE:A8:D6:EC:F7:DC:37:CA:6E:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CE7D7CE89811ECA1AD22CEF1222468.roa
Signing time: Fri 10 Jun 2022 08:40:27 +0000
ROA not before: Fri 10 Jun 2022 08:40:23 +0000
ROA not after: Tue 28 Feb 2023 08:40:23 +0000
asID: 133199
IP address blocks: 45.207.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5292 (0x14ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:40:23 2022 GMT
Not After : Feb 28 08:40:23 2023 GMT
Subject: CN=62a3037a-51e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:26:d8:13:21:53:b8:39:7f:83:c8:5d:4a:
ff:96:1b:1c:e6:c1:1a:35:98:bb:8f:93:36:38:97:
08:f0:37:57:70:2d:a6:b0:1d:5f:45:d6:47:73:2c:
76:9e:de:56:2f:f1:86:44:1b:6f:84:2d:c9:4d:5e:
db:75:84:61:85:cb:8e:68:bc:3b:4e:4a:80:47:83:
6d:ca:99:71:c5:b2:85:30:9d:8c:ff:5e:7e:7f:cc:
d2:4f:4b:83:2f:71:ec:0c:9f:f7:73:b1:b3:1a:51:
37:33:7f:88:37:b8:0f:b6:31:6a:68:9d:25:67:50:
6a:90:9e:ca:a8:c3:ac:3d:dd:8d:08:19:98:4a:fc:
fe:94:7a:f7:4b:28:e2:2f:ab:d1:19:6b:9f:64:d0:
ec:37:7d:08:8a:b2:f9:a9:cf:b7:19:5d:4a:51:07:
03:b8:aa:95:9a:d8:a8:dd:24:22:5d:1e:0c:f4:70:
33:4d:a7:21:cf:81:e3:ee:da:bb:b8:be:42:8f:ff:
5e:18:c6:8b:6a:6d:52:3d:74:af:f1:fb:cc:6c:2b:
b8:22:13:11:5f:d8:b5:06:f2:99:7b:54:54:ec:ff:
2d:d0:26:0a:38:d0:aa:a1:47:4b:a2:62:2e:d3:69:
e6:13:a6:08:79:df:43:13:68:14:63:6b:84:7d:5b:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:47:54:FF:61:BA:37:76:EA:CE:A8:D6:EC:F7:DC:37:CA:6E:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9CE7D7CE89811ECA1AD22CEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.46.0/24
Signature Algorithm: sha256WithRSAEncryption
78:09:60:6f:7a:f4:c3:4d:91:d2:66:41:46:36:49:26:59:ff:
97:4a:2e:fd:92:15:c9:00:ca:26:b7:e5:97:20:fd:94:c6:5c:
94:e2:62:fa:7c:43:4e:0b:d6:d5:77:37:2a:da:46:d4:6f:8c:
91:3f:dc:bb:e4:40:d0:51:97:66:b7:4b:36:dd:45:72:fc:77:
3d:9c:fa:a7:31:28:10:8a:c0:11:5c:4a:91:b4:c9:7f:db:db:
c2:33:34:2d:7d:4f:0b:89:c8:fe:70:63:14:34:d5:37:a0:f3:
7c:67:ce:71:fb:ef:17:f8:df:62:51:73:99:29:7b:67:9c:20:
82:64:a1:9c:e2:97:c2:56:da:01:5d:c4:23:be:f2:cc:ad:24:
52:c2:b4:a0:ac:4c:0b:23:85:1f:b5:85:7d:0d:0b:b4:da:fd:
4b:97:55:32:a5:7c:1b:12:7b:b3:25:4c:05:22:8a:ad:ef:09:
de:54:b8:16:df:97:1d:8a:7c:5a:03:95:8e:e0:b7:09:b0:45:
0a:22:69:fd:40:ba:03:df:35:fa:0d:1f:9d:2a:ce:fb:ee:28:
44:3a:fc:71:a3:7e:25:ee:a4:75:fd:10:00:a1:c3:9e:6a:2a:
84:5f:dd:09:5b:a3:18:4f:f8:aa:2e:9e:c9:35:a6:71:59:dc:
5e:0b:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org