Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF56A7B235AD11EDBBE6D1E4F1222468.roa
File: FF56A7B235AD11EDBBE6D1E4F1222468.roa (raw, json)
Hash identifier: QnxnPr1GqQc9yCK+8YEQW9RD2q/XkXaBdxgmsR8Q8kU=
Subject key identifier: F9:58:E9:EA:92:7C:39:80:48:20:52:52:7A:A3:4D:0F:84:3E:15:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF56A7B235AD11EDBBE6D1E4F1222468.roa
Signing time: Fri 16 Sep 2022 10:54:55 +0000
ROA not before: Fri 16 Sep 2022 10:54:51 +0000
ROA not after: Wed 20 Sep 2023 10:54:51 +0000
asID: 136907
IP address blocks: 45.202.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6140 (0x17fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 10:54:51 2022 GMT
Not After : Sep 20 10:54:51 2023 GMT
Subject: CN=632455ff-36b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:47:ac:9a:fb:df:4a:5f:3b:20:bf:37:fa:
f3:a7:8d:3f:6d:d4:95:f6:1c:c7:4d:0a:1a:59:ea:
9b:25:bb:c5:5a:f5:2e:dc:ab:3d:a4:da:22:ec:a9:
5c:0b:d5:03:2e:6d:20:16:8f:9a:09:ef:dc:76:47:
ea:85:18:fd:2f:39:00:fe:cd:aa:6c:c0:a9:88:4a:
42:10:b6:2c:b8:6c:73:05:8d:cc:88:5d:68:7f:2d:
16:10:2e:cc:db:43:19:51:6c:c3:5d:1b:de:50:63:
4e:70:1f:5c:04:e4:07:44:82:b4:37:c6:7b:f4:81:
95:bf:24:5a:f6:e5:80:a0:0f:bc:43:85:7d:d0:8e:
cd:5d:0e:b8:66:75:88:a7:f5:47:c9:8f:cc:a2:f8:
57:24:70:f6:d8:14:f2:32:f4:13:7d:a2:b3:36:7d:
f2:77:1a:b6:a3:f1:bc:13:6b:4f:2a:7d:82:44:6f:
5d:1d:71:c6:a3:c8:28:dc:0c:03:b5:0e:29:d6:eb:
75:5d:6f:3f:0b:cf:d2:0f:de:62:b3:61:36:c6:68:
d3:55:e1:c3:85:b5:e3:6d:ad:b6:b0:65:bc:b0:e7:
65:2c:82:bf:33:2b:46:6d:2d:c6:17:7d:98:41:dd:
4c:e6:30:61:db:e1:63:76:8a:11:7b:99:78:0a:98:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:E9:EA:92:7C:39:80:48:20:52:52:7A:A3:4D:0F:84:3E:15:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF56A7B235AD11EDBBE6D1E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:12:c3:f1:c9:d8:bf:2d:a4:00:55:5d:29:0f:33:24:86:2b:
62:44:6b:26:60:5d:e6:b0:8a:c5:3d:24:3f:3c:16:06:70:e1:
dd:23:9b:c2:da:27:5e:af:21:58:2f:e7:8e:c4:2e:f9:6a:b5:
b6:e0:62:bd:41:b1:c1:d6:b4:ca:73:55:d0:25:bc:70:26:6e:
72:7b:dd:b0:e5:c6:ce:f8:3b:9f:d3:58:ac:83:68:4d:3c:f5:
96:49:60:19:46:49:c6:55:51:a9:6a:33:03:43:9b:72:ed:d6:
94:99:37:3b:d6:bb:ba:cb:f5:6a:58:9f:2d:cb:16:dd:0a:cc:
b4:4c:d8:a9:80:73:b3:5d:23:5a:b4:fc:f7:06:e9:7d:ea:eb:
17:05:c8:6e:b2:b1:af:ce:f2:71:d3:f6:12:e0:3d:bd:ae:2c:
3e:eb:38:e1:12:e1:55:a3:a6:c2:4b:03:d7:f3:47:0c:16:ce:
52:64:b1:9f:b4:c0:96:f9:02:1e:cd:48:21:40:57:01:f5:92:
9e:5e:c2:6e:70:2f:75:c0:52:cd:d2:92:50:e6:fc:ab:6d:f7:
26:64:95:4e:46:ba:a4:80:04:f3:d8:c6:3c:86:c2:d2:61:b0:
0f:8a:a7:84:eb:41:2f:f8:16:fc:af:a1:1f:c0:80:04:26:08:
90:59:4c:0e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF/wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MTYxMDU0NTFaFw0yMzA5MjAxMDU0NTFaMBgxFjAU
BgNVBAMMDTYzMjQ1NWZmLTM2YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPTUesmvvfSl87IL83+vOnjT9t1JX2HMdNChpZ6pslu8Va9S7cqz2k2iLs
qVwL1QMubSAWj5oJ79x2R+qFGP0vOQD+zapswKmISkIQtiy4bHMFjcyIXWh/LRYQ
LszbQxlRbMNdG95QY05wH1wE5AdEgrQ3xnv0gZW/JFr25YCgD7xDhX3Qjs1dDrhm
dYin9UfJj8yi+FckcPbYFPIy9BN9orM2ffJ3Graj8bwTa08qfYJEb10dccajyCjc
DAO1DinW63Vdbz8Lz9IP3mKzYTbGaNNV4cOFteNtrbawZbyw52Usgr8zK0ZtLcYX
fZhB3UzmMGHb4WN2ihF7mXgKmDK7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+Vjp
6pJ8OYBIIFJSeqNND4Q+FWgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZGNTZBN0IyMzVBRDExRURCQkU2RDFFNEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUtyoAwDQYJKoZIhvcNAQELBQAD
ggEBAKQSw/HJ2L8tpABVXSkPMySGK2JEayZgXeawisU9JD88FgZw4d0jm8LaJ16v
IVgv547ELvlqtbbgYr1BscHWtMpzVdAlvHAmbnJ73bDlxs74O5/TWKyDaE089ZZJ
YBlGScZVUalqMwNDm3Lt1pSZNzvWu7rL9WpYny3LFt0KzLRM2KmAc7NdI1q0/PcG
6X3q6xcFyG6ysa/O8nHT9hLgPb2uLD7rOOES4VWjpsJLA9fzRwwWzlJksZ+0wJb5
Ah7NSCFAVwH1kp5ewm5wL3XAUs3SklDm/Ktt9yZklU5GuqSABPPYxjyGwtJhsA+K
p4TrQS/4FvyvoR/AgAQmCJBZTA4=
-----END CERTIFICATE-----
Generated at Thu Sep 21 01:21:46 2023 by rpki-client on console-ams.rpki-client.org