Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31E2CD0436EB11ECBBD9397ED8A014CE.roa
File: 31E2CD0436EB11ECBBD9397ED8A014CE.roa (raw, json)
Hash identifier: BixNqDIRi6qZKdTb02RQdcYc/VQs3m3Yme/qsf2ACdI=
Subject key identifier: E6:3B:16:C9:88:FB:20:1C:81:CC:CC:56:72:7A:30:8A:EC:64:81:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31E2CD0436EB11ECBBD9397ED8A014CE.roa
Signing time: Wed 27 Oct 2021 06:00:32 +0000
ROA not before: Wed 27 Oct 2021 06:00:29 +0000
ROA not after: Thu 27 Oct 2022 06:00:29 +0000
asID: 58895
IP address blocks: 45.206.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 06:00:29 2021 GMT
Not After : Oct 27 06:00:29 2022 GMT
Subject: CN=6178eb00-9379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:13:e4:3c:df:96:eb:7b:16:b7:83:89:9f:
14:3d:cf:46:bd:c9:7b:90:47:65:62:d3:a5:8a:6f:
5d:60:60:bf:5c:9b:a6:e0:7f:fe:02:12:6e:12:d0:
1f:9a:91:45:ce:6d:6a:d5:4b:dc:a4:32:7d:7f:eb:
94:1e:76:2b:64:c2:d6:6c:d5:5a:c1:21:d5:08:26:
60:75:44:89:e6:40:a5:9b:8a:73:7e:89:67:db:75:
12:28:30:ab:fe:87:f7:d1:e9:c3:b0:5d:3a:67:25:
b6:dc:80:35:f7:aa:95:4f:a4:f2:6f:aa:c7:00:46:
0b:2b:44:eb:0b:9d:85:94:14:2e:8a:ba:66:32:6c:
b6:2d:79:0f:5a:a5:22:bf:1b:3c:6c:7a:e9:dc:41:
02:b9:2b:49:93:ca:f4:4e:fc:d6:70:ae:dc:57:a9:
59:3c:92:94:de:d1:69:a2:ce:91:15:22:a0:47:35:
00:49:13:09:fd:e7:4b:b5:3d:13:3b:26:08:10:d0:
9d:f5:20:47:ff:b0:df:b9:4d:58:fb:08:f6:14:61:
6c:7a:ea:1b:0a:e2:10:0c:5d:e2:e8:35:44:ac:79:
bd:71:c8:96:a7:00:c2:34:3a:40:9e:51:52:a6:ce:
f5:3c:3f:1b:f9:d9:cf:d5:1d:4b:ae:0c:18:64:9f:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:16:C9:88:FB:20:1C:81:CC:CC:56:72:7A:30:8A:EC:64:81:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31E2CD0436EB11ECBBD9397ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:78:0d:f1:e8:04:62:e8:dd:af:55:31:34:1c:11:cc:95:0b:
e5:c6:4e:ae:ee:87:34:eb:76:82:64:4f:91:62:1d:9f:5f:59:
98:60:23:72:cb:8a:c6:c5:e7:1b:89:db:f5:f7:8c:53:15:1d:
13:f0:a5:a7:66:52:7f:4d:94:76:f6:de:69:e0:f4:66:b6:44:
21:2e:b3:b7:9c:81:d9:95:43:a8:c1:e0:00:d5:f9:3d:82:d4:
ff:c1:4a:e8:d3:15:16:69:ad:9b:cb:35:9a:63:18:50:5b:8f:
a3:4e:fa:54:85:d0:33:bd:c2:af:b9:61:0c:2d:c7:c5:68:58:
5e:35:d9:34:15:2a:59:d4:23:85:77:39:6e:26:a9:cc:bd:e1:
f7:ec:c0:51:20:ca:2a:99:b0:14:91:43:5b:b5:0e:2e:66:af:
ae:9c:91:9f:b5:86:a3:de:40:1f:6b:dc:94:41:2b:f8:1c:0a:
1d:a1:dd:23:34:a5:4f:36:8d:0f:c4:5f:2d:62:aa:59:f4:70:
d5:27:fd:48:f8:7a:03:10:c1:f5:c8:8e:f4:57:10:7b:54:ea:
b8:16:c5:64:52:08:6c:77:4c:81:b2:d3:6b:42:95:67:51:c9:
0e:67:fc:00:be:89:f6:c0:fa:f9:97:e9:c8:f2:82:a7:49:06:
73:5b:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org