Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
File: 0A2B5AEC36EB11EC9A03F97DD8A014CE.roa (raw, json)
Hash identifier: TdDVZU4u1G9UFVj54YWFKtWI9rVSk/kV9CGBl4Wns84=
Subject key identifier: 75:AB:19:1C:5A:CC:BF:3A:3E:5E:6A:5A:4A:94:4F:0E:16:32:43:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:59:26 +0000
ROA not before: Wed 27 Oct 2021 05:59:23 +0000
ROA not after: Thu 27 Oct 2022 05:59:23 +0000
asID: 58895
IP address blocks: 45.206.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:59:23 2021 GMT
Not After : Oct 27 05:59:23 2022 GMT
Subject: CN=6178eabe-12fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:92:13:9c:4f:98:b7:82:be:db:38:8a:0f:
e4:c1:51:5c:75:96:cc:2d:2e:fd:97:c1:5b:00:76:
e8:91:47:ea:3c:e0:11:89:22:04:dd:ac:6f:53:24:
d2:25:ad:0d:38:a1:f5:4c:e6:22:de:b2:0a:32:93:
3c:49:c4:75:c8:20:10:9a:eb:c2:57:b8:84:b2:11:
0e:c8:9c:31:a4:1e:8d:00:c3:e7:16:50:e1:cd:56:
d6:a3:51:27:4f:da:40:8e:e7:3e:48:92:51:3c:eb:
31:94:b2:f7:48:2b:c1:85:26:22:b2:93:80:4c:76:
d8:3b:36:3b:d5:68:05:84:7a:08:48:69:e1:ff:0a:
7d:b2:30:63:7c:fa:31:26:67:11:f1:b5:fd:b3:a5:
64:eb:8f:fa:0e:de:bd:ae:59:26:37:87:28:e1:94:
dd:ad:3d:8a:e4:ba:95:ce:0d:fd:10:11:2f:49:5f:
ec:ef:50:07:23:2d:48:89:f2:85:a1:06:2e:04:a7:
7a:98:d5:bf:d8:c3:60:1f:3f:d9:d5:c3:14:2e:18:
39:6a:a0:1f:ca:f7:31:7c:96:98:e4:f8:30:ed:64:
e7:e7:b6:80:d9:ef:77:b4:7f:2f:c1:33:aa:06:25:
34:8f:86:8e:84:d0:21:99:a6:b1:ce:e0:41:b4:d8:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:19:1C:5A:CC:BF:3A:3E:5E:6A:5A:4A:94:4F:0E:16:32:43:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A2B5AEC36EB11EC9A03F97DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d4:0a:b2:fb:bd:96:66:8b:ff:9c:3c:cd:08:cd:57:74:79:
8e:1a:92:0b:be:7f:a7:f8:4a:92:67:2f:fc:eb:20:5a:1f:95:
c1:8c:58:0c:7f:3e:a9:5b:ab:6f:a1:fd:a6:04:aa:f2:98:ef:
f2:9e:74:06:b8:fe:1c:ba:d9:01:39:44:cc:ed:23:7e:94:68:
f9:43:ee:93:c9:ea:09:e9:25:2e:c6:88:a2:f8:2d:aa:5f:2e:
1a:b6:24:6a:65:2b:48:d0:a0:93:67:d7:89:c4:78:f3:cf:16:
96:5e:6f:69:50:98:5b:58:c1:27:40:60:02:89:c8:a3:f0:95:
4b:b1:17:24:36:83:69:8b:21:0e:d9:a9:c9:2d:39:08:38:78:
3b:98:01:4a:d7:e8:ed:d9:73:07:c8:ab:63:27:cb:1c:a0:40:
ad:87:7d:ba:d6:75:c1:ac:c9:d8:64:f6:68:08:70:c2:59:d7:
fb:49:83:2e:a6:83:7a:69:0a:d6:2f:24:98:1d:84:f9:09:21:
5b:98:c4:cf:82:73:1b:89:04:52:f7:9b:e0:e9:1d:da:31:2e:
92:6a:ba:b9:28:a3:d6:2f:e2:ca:bf:9c:f7:ee:86:31:26:93:
65:3f:87:15:d5:c1:8f:df:8f:19:66:d4:76:66:16:40:a4:2d:
cf:89:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org