Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
File: 1AA149B4784E11EC83F829C65A40D577.roa (raw, json)
Hash identifier: oGzQRTQcSmiXJpHTUdBGFzFTGnft9IJ1nYEnDVQjJ1g=
Subject key identifier: ED:CB:6B:80:3D:E6:B7:E5:19:86:31:65:D3:36:9F:A6:97:E9:69:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 119B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
Signing time: Tue 18 Jan 2022 11:02:19 +0000
ROA not before: Tue 18 Jan 2022 11:02:15 +0000
ROA not after: Sun 30 Oct 2022 11:02:15 +0000
asID: 136525
IP address blocks: 45.206.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4507 (0x119b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 11:02:15 2022 GMT
Not After : Oct 30 11:02:15 2022 GMT
Subject: CN=61e69e3b-eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:41:1b:f5:ba:81:c8:83:53:b4:c6:7a:e2:
ca:82:a8:9e:f7:14:2d:97:6a:1f:d6:36:72:1e:71:
c5:9b:51:c6:c6:54:bc:f7:ac:34:b5:d9:75:4e:dc:
70:8e:19:b4:6b:dd:e7:98:0e:10:55:90:1f:b0:a4:
e1:4c:4d:21:18:bd:f6:ee:63:41:b5:e8:9f:41:62:
28:30:ea:b7:02:43:ed:ae:26:8a:f3:43:15:f5:51:
fd:d9:59:87:3e:f9:d5:a2:a8:e5:f8:da:fc:9e:9c:
ab:73:25:2d:55:fe:62:d0:8e:f3:c8:71:0c:02:76:
27:7e:be:30:85:e0:0b:af:63:d9:ab:cf:17:e2:8d:
f1:1d:ad:56:33:87:8d:4b:13:a7:31:7b:c3:32:a6:
46:36:d9:39:4e:14:50:bb:eb:9f:d1:15:4c:bc:6a:
10:8e:7f:72:9f:80:0c:08:03:66:ca:d8:ba:97:54:
1f:2a:cd:2e:72:c6:01:f6:ec:68:a9:5b:f4:4c:bf:
e3:03:ad:44:1f:0d:b4:f7:cd:34:0b:45:ec:6f:ed:
06:e4:d5:91:3e:a7:77:7a:db:01:ce:8f:f8:d9:73:
21:9d:70:5b:1a:27:d6:a1:69:fa:63:4b:7f:1d:93:
cf:80:b3:68:00:77:52:d3:49:42:e0:5a:16:94:48:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:6B:80:3D:E6:B7:E5:19:86:31:65:D3:36:9F:A6:97:E9:69:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA149B4784E11EC83F829C65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6c:85:99:97:aa:0d:60:ef:9e:6e:3f:96:18:90:f4:b7:e6:
00:55:35:0e:67:7e:73:e0:c3:92:d7:fa:2e:c0:55:59:ce:93:
b4:24:9e:66:a6:1f:c5:c7:80:9f:33:a4:1f:e1:38:5c:2a:21:
8d:8f:17:5c:34:16:c2:6b:47:3e:80:ba:ba:fd:0f:54:ad:6e:
06:d8:fd:cd:fc:a6:03:c8:a7:e2:cf:27:7f:a1:89:15:a1:0e:
5c:d5:bc:0e:05:33:c5:d3:f9:bf:a0:f0:dd:b5:d8:33:e6:d0:
88:83:40:3d:a7:e3:e7:a6:f2:10:4d:61:a4:ff:52:19:18:0f:
82:47:01:70:22:31:e8:ba:24:be:12:d9:34:c5:ab:a2:b2:ac:
0a:10:28:b6:0b:4b:4f:a4:51:df:83:81:f3:9e:39:c6:9b:97:
df:4e:61:c4:10:0a:26:11:a5:5f:ad:79:1e:b1:05:76:85:41:
86:dd:3a:58:4f:99:65:6e:ab:a8:3a:29:e8:ab:a8:1e:30:20:
d0:cd:cc:cc:a2:a9:37:cd:34:94:fb:0f:5c:33:a9:01:fd:60:
d0:4d:5d:55:1e:41:cb:7c:04:24:c5:a7:c0:b9:10:26:58:48:
05:8d:bc:71:74:3e:6e:48:ef:8c:50:51:f0:0f:0c:42:04:5e:
78:b9:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org