Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF98DAA36E211ECAFD6F86FD8A014CE.roa
File: 2BF98DAA36E211ECAFD6F86FD8A014CE.roa (raw, json)
Hash identifier: EWxtfcmvMV25qyQj2q0Ir3ePDEGroM2DifMSCy+qdjk=
Subject key identifier: 45:E4:86:A1:D5:9F:D2:DE:28:D2:4E:1F:76:98:6C:5D:65:1E:1D:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF98DAA36E211ECAFD6F86FD8A014CE.roa
Signing time: Wed 27 Oct 2021 04:55:57 +0000
ROA not before: Wed 27 Oct 2021 04:55:53 +0000
ROA not after: Thu 27 Oct 2022 04:55:53 +0000
asID: 58895
IP address blocks: 45.206.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:55:53 2021 GMT
Not After : Oct 27 04:55:53 2022 GMT
Subject: CN=6178dbdd-955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:53:75:db:69:e5:0b:a0:46:f7:60:0f:23:
8c:92:55:da:72:cf:bc:41:09:96:13:c2:6c:c3:7d:
ed:aa:15:4b:a3:34:f6:c1:05:a2:d3:bc:63:8d:2b:
6f:60:3d:4b:14:88:a5:e1:cb:0a:07:7d:45:d3:eb:
0e:41:5f:35:69:9c:c2:43:39:b9:76:26:b4:80:75:
24:72:63:c0:d6:b2:17:8b:f2:cf:79:e1:ea:13:07:
a8:20:29:f9:83:2d:22:34:e6:24:ce:21:d9:d4:9c:
82:b7:5d:fc:67:c6:0a:75:0c:b2:d1:68:be:9a:ed:
7d:43:8f:da:91:ab:ce:9b:0b:ea:66:f8:98:50:03:
e4:4b:b3:c3:1c:1b:52:2a:e2:a6:22:26:af:54:91:
47:b5:70:50:91:0d:5a:72:88:04:84:86:f9:26:59:
8e:91:5e:9a:0d:40:b0:36:5c:a2:9f:a0:ba:a8:0a:
0d:de:7d:a3:d9:17:af:0a:6f:8e:49:52:46:5e:c1:
cf:ce:2c:e5:94:3c:45:d9:13:f0:52:16:b9:33:a0:
73:ae:e5:d6:8a:65:63:76:fc:89:ce:57:56:35:3b:
7c:46:a3:dc:d5:dd:3f:ee:f3:9a:45:aa:4e:61:7c:
3f:82:21:da:46:64:ae:8c:61:24:b5:fe:c6:e4:f6:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:86:A1:D5:9F:D2:DE:28:D2:4E:1F:76:98:6C:5D:65:1E:1D:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF98DAA36E211ECAFD6F86FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.139.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:76:26:7c:71:5f:d3:8e:38:bb:67:94:5c:1c:71:1a:53:85:
3d:c9:c4:71:c6:2d:a0:e6:ae:7b:63:d2:f3:9b:30:62:32:c9:
2c:56:df:38:0a:c0:42:64:6d:41:4d:18:c7:72:98:4b:51:0b:
d9:17:ae:3b:43:da:a0:13:0e:8d:0f:49:17:91:8e:d7:d9:02:
5e:75:08:cb:ef:4d:b1:d0:36:cf:cb:43:b7:65:3c:6d:49:e0:
87:80:8a:cc:7e:52:70:1d:37:6e:d0:ce:f4:03:c5:8b:05:a9:
87:de:cc:db:69:e0:c8:e6:24:6e:a1:3b:5a:f6:3e:45:7d:fd:
c6:5b:80:7c:10:25:00:6d:97:94:20:42:78:d5:f6:9a:8b:02:
6c:a4:f7:93:93:7e:28:f3:1e:a8:6a:8f:90:cc:b1:26:c2:ba:
85:47:26:ef:5d:36:fb:62:2e:70:48:da:72:0d:53:68:91:b0:
15:37:28:1e:23:5c:e4:f8:c0:71:17:c8:8b:11:77:09:4b:3f:
8a:78:0c:2b:69:a4:1d:38:7f:3f:9e:42:57:02:d8:ab:10:38:
d3:07:43:f1:30:98:8d:eb:da:51:f4:78:f3:48:3e:e6:ad:a4:
73:8c:e2:7a:03:83:f3:7d:32:37:5d:d0:cc:4a:85:39:d4:38:
b9:ad:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org