Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE663EC0A17B11EB80EF0059F8AEA228.roa
File: FE663EC0A17B11EB80EF0059F8AEA228.roa (raw, json)
Hash identifier: Pb59oDIU0FgnDXBRmfM80P635XFStXXjZC19vMwWwTA=
Subject key identifier: E3:10:76:08:A3:A5:9E:7F:AB:43:21:AA:EE:66:7A:B8:FE:13:1D:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 056B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE663EC0A17B11EB80EF0059F8AEA228.roa
Signing time: Tue 20 Apr 2021 01:59:09 +0000
ROA not before: Tue 20 Apr 2021 01:59:05 +0000
ROA not after: Thu 05 May 2022 01:59:05 +0000
asID: 133929
IP address blocks: 45.200.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 01:59:05 2021 GMT
Not After : May 5 01:59:05 2022 GMT
Subject: CN=607e356d-bcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:b8:bd:48:25:98:81:f2:10:68:61:e6:cc:
bb:ab:51:33:6c:df:a9:ee:af:7e:35:e1:51:85:7b:
40:3c:f5:0a:7d:9a:55:13:ab:83:a9:ed:1b:f8:95:
76:5d:24:39:ad:a8:51:7e:24:46:20:51:91:e4:66:
97:5c:79:80:5d:7f:00:fa:cf:3b:57:ac:db:a9:6b:
d3:a0:4c:1d:76:a6:30:b9:b4:b2:40:25:fe:1f:3f:
3b:12:a0:4e:d1:d4:89:8d:9d:67:42:1c:0e:bc:68:
c5:87:e9:fc:c2:33:d6:cf:28:93:d5:9b:66:26:fc:
c8:eb:9e:9a:00:67:1d:c9:b2:94:5e:92:f3:d7:8e:
89:49:3a:f9:ed:06:27:43:36:ed:c1:f5:ca:6f:56:
1c:83:59:d3:8f:42:1c:24:8d:c4:b1:05:65:9c:eb:
83:cc:e3:48:39:6e:00:8c:f7:b4:a8:dd:13:93:1b:
56:20:a2:3e:46:49:b4:6e:46:76:df:5b:cb:d0:b4:
1a:6f:50:77:34:08:69:e3:f5:16:74:c5:b1:a3:86:
6f:58:98:86:04:b9:56:d4:34:10:52:db:94:ca:48:
f0:3b:06:01:25:aa:8d:81:92:d9:18:d7:38:61:d4:
a5:30:47:82:c0:ff:e0:87:2d:d5:76:82:7f:50:a8:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:76:08:A3:A5:9E:7F:AB:43:21:AA:EE:66:7A:B8:FE:13:1D:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE663EC0A17B11EB80EF0059F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d6:a8:dd:7c:4d:cf:fb:f8:64:c3:cc:dd:e6:9c:fb:b3:82:
c0:e1:2a:ea:13:5b:08:db:d4:51:7d:ab:41:84:c9:86:e3:e8:
be:42:fb:87:c1:57:b1:a8:cd:d6:ce:2f:df:d3:10:01:84:e5:
37:be:cf:c4:0e:91:48:79:3c:5f:ef:9b:80:97:38:d9:a1:df:
ae:71:37:ba:72:7c:e8:f8:19:c9:0f:f8:2c:2c:da:08:23:26:
fe:c3:b0:a5:63:83:51:39:82:11:4f:6a:15:c3:ed:0b:26:d9:
b1:f4:a5:21:0a:0d:49:1f:52:32:ac:ce:60:c2:51:22:ff:2d:
2d:b5:0d:44:af:61:12:8d:8e:9e:c3:6c:de:5d:44:54:97:3a:
ab:f1:db:a1:0b:32:8b:e6:59:92:7a:a6:bb:b0:ab:90:9c:4f:
81:8c:b1:7d:41:dc:62:77:3a:b7:ba:ae:23:db:df:10:5c:b3:
5f:e2:e7:51:92:f8:24:1e:f3:7f:54:72:44:60:82:2f:e7:24:
42:e0:4d:0f:28:0d:49:1a:6a:73:a5:e1:2d:94:5d:6b:4b:a6:
46:0f:1e:30:61:35:08:53:64:9c:3d:0a:7a:e2:73:1f:af:5b:
3c:2c:7b:3f:5d:f6:43:d4:11:91:51:c5:f4:81:73:30:13:5c:
56:a3:33:96
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBWswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA0MjAwMTU5MDVaFw0yMjA1MDUwMTU5MDVaMBgxFjAU
BgNVBAMTDTYwN2UzNTZkLWJjYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCebri9SCWYgfIQaGHmzLurUTNs36nur3414VGFe0A89Qp9mlUTq4Op7Rv4
lXZdJDmtqFF+JEYgUZHkZpdceYBdfwD6zztXrNupa9OgTB12pjC5tLJAJf4fPzsS
oE7R1ImNnWdCHA68aMWH6fzCM9bPKJPVm2Ym/MjrnpoAZx3JspRekvPXjolJOvnt
BidDNu3B9cpvVhyDWdOPQhwkjcSxBWWc64PM40g5bgCM97So3ROTG1Ygoj5GSbRu
RnbfW8vQtBpvUHc0CGnj9RZ0xbGjhm9YmIYEuVbUNBBS25TKSPA7BgElqo2BktkY
1zhh1KUwR4LA/+CHLdV2gn9QqPh1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4xB2
CKOlnn+rQyGq7mZ6uP4THfIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZFNjYzRUMwQTE3QjExRUI4MEVGMDA1OUY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItyGgwDQYJKoZIhvcNAQELBQAD
ggEBAITWqN18Tc/7+GTDzN3mnPuzgsDhKuoTWwjb1FF9q0GEyYbj6L5C+4fBV7Go
zdbOL9/TEAGE5Te+z8QOkUh5PF/vm4CXONmh365xN7pyfOj4GckP+Cws2ggjJv7D
sKVjg1E5ghFPahXD7Qsm2bH0pSEKDUkfUjKszmDCUSL/LS21DUSvYRKNjp7DbN5d
RFSXOqvx26ELMovmWZJ6pruwq5CcT4GMsX1B3GJ3Ore6riPb3xBcs1/i51GS+CQe
839UckRggi/nJELgTQ8oDUkaanOl4S2UXWtLpkYPHjBhNQhTZJw9Cnricx+vWzws
ez9d9kPUEZFRxfSBczATXFajM5Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org