Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CAEB3E36DE11EC9C7FE168D8A014CE.roa
File: 35CAEB3E36DE11EC9C7FE168D8A014CE.roa (raw, json)
Hash identifier: tPPz+vU9Ps7RpmUnHzojM/V4mDajZdoFqP3Qpu+DsGI=
Subject key identifier: FF:B1:28:5D:80:C9:41:E1:F0:C3:DD:61:6C:7C:37:0C:AA:B9:45:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CAEB3E36DE11EC9C7FE168D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:27:35 +0000
ROA not before: Wed 27 Oct 2021 04:27:32 +0000
ROA not after: Thu 27 Oct 2022 04:27:32 +0000
asID: 58895
IP address blocks: 45.206.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:27:32 2021 GMT
Not After : Oct 27 04:27:32 2022 GMT
Subject: CN=6178d537-d810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:fe:90:62:ac:de:6d:a8:8a:42:5e:8f:f0:
5c:8c:61:b9:8b:49:cf:6f:4d:84:29:b3:fb:27:fd:
c2:4d:47:7f:a1:42:8b:b6:5f:29:e8:90:1b:f4:b1:
e5:40:5f:d5:e2:a6:b5:af:fe:1a:22:46:28:3c:00:
73:0e:a4:14:e4:f7:a5:bb:2d:a4:0c:b4:62:2f:95:
c5:2b:4c:3e:4e:e1:86:ae:f0:3b:e6:d5:e9:c0:71:
28:f1:ea:65:36:28:fd:da:68:e1:58:2c:fc:5b:94:
f6:7b:05:43:a7:88:4e:21:e9:6d:c6:6d:03:3d:09:
33:34:6a:ff:14:28:c2:63:c1:a3:da:33:65:06:53:
eb:94:ab:4a:be:f6:51:ec:6d:65:aa:2d:9a:af:a8:
dc:bb:4d:b7:1b:e8:7d:94:b4:b7:8e:53:62:13:97:
da:8d:17:1c:81:42:1c:85:57:98:cc:85:bf:b0:69:
fe:e4:57:5e:b2:88:be:ab:31:52:39:a1:ab:76:b2:
64:18:32:24:64:54:b6:7c:8d:a6:6b:90:95:06:2a:
aa:f1:32:71:d2:b1:c8:21:85:d5:f0:3d:cf:b5:5d:
4a:c6:0a:b0:e5:8e:05:dc:d3:ac:44:25:43:28:84:
3e:f6:de:0a:45:bb:d1:08:07:1d:25:f3:ce:da:a6:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B1:28:5D:80:C9:41:E1:F0:C3:DD:61:6C:7C:37:0C:AA:B9:45:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CAEB3E36DE11EC9C7FE168D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.178.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c7:7b:b0:f7:4f:7b:76:03:d5:b3:7d:4f:f6:17:86:17:6c:
7d:29:f2:f0:e6:4b:61:8a:69:b8:2d:7b:e4:65:bf:a3:08:15:
9c:7d:4e:68:46:31:da:2f:78:8d:89:34:87:83:50:a4:b2:62:
d8:64:a4:8e:64:16:5a:d5:6c:ed:51:04:4c:31:ec:23:a7:23:
f1:61:6e:90:bf:89:e7:49:f2:c5:39:2b:99:7e:9b:13:8b:a2:
56:81:07:f5:1b:85:4a:63:d1:f4:f8:89:1f:6e:ad:32:68:9f:
3f:48:86:cb:a1:75:dd:ed:66:1e:69:69:7c:fa:c4:bc:c3:a1:
9c:e9:68:2b:cb:c9:33:87:cc:48:04:44:04:89:83:c9:1e:44:
4f:82:ba:94:80:55:97:e8:ff:60:ba:26:39:9a:ea:22:dc:d6:
4d:52:65:0d:7d:d8:37:b5:af:a3:31:dd:8d:3d:f0:ce:15:c4:
c6:5f:9d:7e:2f:53:d3:ae:67:37:d6:a1:ef:c6:85:5b:b7:e7:
b3:fa:16:52:59:54:b7:35:26:1f:e4:07:1a:91:cb:4b:63:de:
b9:7e:b8:ba:82:58:07:8d:69:2e:a7:29:ca:3b:04:84:ad:b1:
07:e6:d1:ae:85:c4:d2:66:76:ca:9f:5f:76:70:d2:c7:60:ae:
95:e5:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org