Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224742DA36EB11EC86922C7ED8A014CE.roa
File: 224742DA36EB11EC86922C7ED8A014CE.roa (raw, json)
Hash identifier: M3Okbv5oEjuToQOrqb7W4+xe51iJ3IoCrtNu9NSnXRY=
Subject key identifier: FF:F8:06:3D:E3:BA:34:CE:4A:C2:0B:81:F9:62:2B:3C:0F:E3:C6:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224742DA36EB11EC86922C7ED8A014CE.roa
Signing time: Wed 27 Oct 2021 06:00:06 +0000
ROA not before: Wed 27 Oct 2021 06:00:03 +0000
ROA not after: Thu 27 Oct 2022 06:00:03 +0000
asID: 58895
IP address blocks: 45.206.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 06:00:03 2021 GMT
Not After : Oct 27 06:00:03 2022 GMT
Subject: CN=6178eae6-84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:de:02:15:ae:3e:66:80:77:51:78:f9:2c:
0a:8a:2b:3e:e3:4c:aa:91:c1:10:1d:ec:70:83:66:
fa:9d:e2:32:ff:9f:be:d0:73:7b:33:28:ba:23:00:
90:50:79:28:77:82:53:e2:a9:aa:a3:8f:21:c4:e5:
d3:f1:23:5a:7d:2c:3a:43:0a:e8:d6:b4:1c:be:dc:
af:d0:71:f7:45:2f:59:d2:0c:1a:4d:dc:79:d3:c3:
17:80:27:30:35:56:55:dc:b7:a1:25:47:c2:2b:c1:
4a:32:99:27:fe:68:93:bc:de:bb:36:f6:b8:9d:51:
d1:4c:54:92:02:7f:ea:7b:8e:53:24:35:85:c5:2e:
95:a3:dc:ab:5e:c1:e4:5c:43:2d:fe:63:25:22:44:
ce:dd:31:b6:df:1b:c4:4e:e9:09:c0:38:dd:bc:57:
eb:f4:8f:b6:ea:be:63:e9:e5:54:a3:33:1b:4b:0a:
43:95:49:22:f2:7f:42:19:f0:94:c5:f5:57:34:af:
16:d3:84:0c:5f:ef:1a:dd:de:3e:1c:1f:43:37:0b:
c4:5b:42:5b:db:c3:6b:5a:38:4a:b0:89:e1:dc:e1:
98:94:28:2c:bc:13:80:7c:83:ae:37:22:24:51:f5:
c2:93:35:99:9b:c2:ed:cd:41:1a:a3:4d:3b:85:66:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:06:3D:E3:BA:34:CE:4A:C2:0B:81:F9:62:2B:3C:0F:E3:C6:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224742DA36EB11EC86922C7ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:66:bf:7a:16:03:d7:ce:03:72:59:4e:83:27:1d:37:dc:40:
23:36:04:1f:8a:44:7e:67:74:8f:b8:73:6b:ea:d5:44:06:16:
fb:1c:63:84:75:2b:cb:51:e5:2a:e5:81:3b:1c:d9:df:5e:e8:
2c:43:16:c6:bb:27:c9:51:be:77:51:76:df:82:be:b4:ba:22:
03:51:08:a0:65:c7:38:c6:c5:ef:11:51:43:91:4a:67:c7:eb:
60:90:6f:37:1c:88:08:2f:1e:85:04:79:e1:15:24:8f:8a:fb:
6f:45:bb:db:d9:dc:7c:54:cc:31:81:09:4d:44:af:b1:77:de:
e3:2d:8a:13:84:f3:6f:20:64:ce:6c:83:02:e5:a0:24:cd:40:
cd:11:2f:5b:a2:0c:3d:b1:2e:02:1d:9a:d4:19:ad:de:4d:e8:
df:80:a2:e2:95:c7:6b:6e:c2:21:4e:c7:4a:98:1f:3b:8d:c9:
12:36:ef:eb:1f:3d:00:5e:f4:7e:0b:dd:e0:67:6f:8a:8e:98:
83:a7:5b:07:f0:c3:f3:5b:37:26:94:26:57:33:b0:45:7f:4d:
0c:e4:33:21:33:6d:e1:61:fe:1a:e4:b3:f8:85:f9:72:8e:e7:
d3:d5:6f:ec:47:33:66:e7:8b:fc:5e:a8:bd:00:e5:31:ab:c3:
f4:e4:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org