Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3280336C36DE11EC8B2FDA68D8A014CE.roa
File: 3280336C36DE11EC8B2FDA68D8A014CE.roa (raw, json)
Hash identifier: hO2WBqPmqAgFkXr6wMZ0lOFlHpPXI0grjh4aeUrpv0Q=
Subject key identifier: A5:9B:E7:4A:18:85:23:79:54:4D:EC:58:0D:60:C5:46:A6:10:C5:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3280336C36DE11EC8B2FDA68D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:27:30 +0000
ROA not before: Wed 27 Oct 2021 04:27:26 +0000
ROA not after: Thu 27 Oct 2022 04:27:26 +0000
asID: 58895
IP address blocks: 45.206.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:27:26 2021 GMT
Not After : Oct 27 04:27:26 2022 GMT
Subject: CN=6178d532-df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:3c:80:c4:d1:19:50:10:fd:8d:49:a7:fb:
76:94:f7:7a:9b:3f:39:35:1a:d4:58:5d:7c:1d:73:
f0:45:0b:a1:4e:5d:4c:90:8b:43:2e:32:8c:2a:bb:
f1:ae:fa:77:6b:32:33:2f:81:e8:85:74:f6:25:cc:
f4:3f:65:4f:50:74:1c:8b:96:b7:f0:8d:0a:4f:2c:
ca:94:06:63:d2:ee:81:53:4b:77:1d:45:27:02:38:
ba:76:ee:23:5c:11:b2:80:f2:c8:40:17:34:47:a1:
6b:b2:58:ad:31:75:79:09:bf:a0:26:28:7b:31:ed:
3c:e4:04:ed:9a:2b:19:a7:9a:62:af:ca:ef:96:9a:
a7:35:53:a9:db:bf:54:fb:ab:71:b5:fe:ab:9c:48:
fc:ff:b6:4e:2c:6c:41:94:08:53:85:fa:0a:75:fe:
d8:ab:bf:75:5a:34:6b:92:dc:39:12:47:80:64:24:
61:c2:e6:98:e2:8f:7b:b3:72:77:34:7a:67:e5:fe:
49:f1:79:a4:27:0c:c2:fa:78:c3:b6:35:b7:64:f2:
45:49:be:4c:0d:7b:00:3a:99:0a:e1:54:69:37:fc:
84:98:fb:f9:df:59:e0:61:2d:1f:4c:79:e1:21:f0:
af:eb:34:7a:1e:3b:98:d4:dd:74:31:74:fb:b7:4f:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:E7:4A:18:85:23:79:54:4D:EC:58:0D:60:C5:46:A6:10:C5:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3280336C36DE11EC8B2FDA68D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6c:26:32:b9:a2:83:8a:1b:d8:35:fd:31:86:35:b9:d5:c2:
9e:c5:e8:34:87:1c:a1:21:d3:ca:1a:7f:07:76:76:dc:f5:f2:
0b:6a:b5:81:66:aa:f8:bc:51:bf:41:62:df:d6:a2:14:bb:53:
ab:95:86:aa:bf:72:a7:5c:20:cc:bb:da:10:0a:ef:7b:82:d6:
6a:8c:38:1b:17:8e:7c:7e:18:35:a4:06:a2:7b:74:21:b0:61:
b2:ec:0e:bd:3b:09:79:27:9b:d1:b7:a2:2d:70:05:d4:fc:02:
c2:c2:a9:61:94:15:50:29:b0:b1:93:4a:94:49:6d:eb:6d:56:
15:58:2b:9c:b8:4d:91:84:b2:8b:ce:1b:aa:70:ad:16:d5:45:
76:72:3c:38:26:fc:98:0b:25:16:b6:20:94:d1:b5:26:fa:24:
d8:e9:b3:86:9c:f5:fa:39:e2:4c:62:79:2f:f3:e2:9f:89:e9:
40:4d:d4:03:30:a7:16:4c:a6:90:4e:6f:23:a9:6c:81:8c:2c:
cc:b8:47:a3:98:f8:03:34:94:58:a8:94:11:07:45:dc:08:d4:
f5:e8:64:94:17:dc:21:3c:45:47:0d:99:6c:f3:50:5a:cd:ff:
1b:e8:95:9b:da:08:49:7d:df:34:23:84:0a:e7:2c:47:4e:5f:
4a:4b:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org