Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3873036E36EB11ECB81C417ED8A014CE.roa
File: 3873036E36EB11ECB81C417ED8A014CE.roa (raw, json)
Hash identifier: 2iI+WJxdW3mzJjmFAaABc9OJSAk1IB9O3/EWQG4alvM=
Subject key identifier: 23:B3:5E:62:9C:54:D1:3F:A5:28:7E:D9:C3:BC:74:89:C2:EC:AB:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3873036E36EB11ECB81C417ED8A014CE.roa
Signing time: Wed 27 Oct 2021 06:00:44 +0000
ROA not before: Wed 27 Oct 2021 06:00:40 +0000
ROA not after: Thu 27 Oct 2022 06:00:40 +0000
asID: 58895
IP address blocks: 45.206.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 06:00:40 2021 GMT
Not After : Oct 27 06:00:40 2022 GMT
Subject: CN=6178eb0b-068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:fb:20:72:4b:ba:64:73:32:4c:23:ca:c0:
40:ae:78:df:58:f1:36:27:b8:7e:3d:8e:17:bd:26:
d7:8a:05:f2:fc:60:d4:6f:30:1f:de:a4:95:57:f0:
64:da:a2:af:d2:78:1e:56:c4:ed:45:c4:74:a5:eb:
03:53:23:4e:ee:1e:a9:e0:b2:87:9a:45:48:74:00:
d6:8a:8b:49:bc:f7:49:2c:dd:54:d8:a9:f8:77:9b:
15:ad:34:57:e7:a0:5f:d9:f0:89:59:f2:dd:af:94:
ad:ba:5b:fa:bc:d4:32:51:92:80:94:dd:a9:c1:fa:
a5:38:01:aa:1e:da:f3:57:00:48:f5:fc:d7:a3:bc:
6a:7b:83:fc:18:6b:98:7a:3a:db:9d:52:76:b4:a5:
73:cb:22:10:03:a9:fa:f6:44:b0:b8:24:af:6f:71:
08:56:d0:0f:f4:76:4e:31:65:53:2b:c9:fe:8b:13:
42:05:63:b4:a9:ea:7d:62:52:75:96:d6:bf:42:71:
c3:1e:ac:de:5e:e6:98:b8:83:60:38:75:6b:87:15:
89:24:80:7b:0b:69:b9:12:d4:71:0a:bd:79:09:32:
31:b5:c8:c0:63:34:e8:1e:46:38:ef:ad:13:e1:c8:
07:8d:10:f3:83:f4:c6:ad:08:63:60:1c:db:96:a2:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:5E:62:9C:54:D1:3F:A5:28:7E:D9:C3:BC:74:89:C2:EC:AB:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3873036E36EB11ECB81C417ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:92:6c:96:85:38:f1:a7:52:14:c6:dc:42:69:9b:fe:ac:81:
31:85:a8:5c:5f:25:08:cb:ce:09:52:b5:2b:64:5d:14:23:0a:
8c:7c:38:16:94:9d:6f:4d:c2:86:d3:82:1a:cc:04:fd:7c:45:
34:45:af:d9:fe:ac:92:29:d3:e1:21:90:a3:57:e4:e0:37:9f:
62:22:df:33:0d:1f:1e:95:c2:5f:7e:74:33:7f:c7:af:d9:ad:
e0:6b:99:cb:a0:61:7b:4f:f2:bf:0e:b1:39:de:01:46:99:9e:
92:ce:8b:1a:31:13:ab:d1:66:ea:0d:ec:1c:d9:4f:cf:96:48:
54:81:bb:e6:f1:81:89:70:53:7f:30:06:6c:04:cb:d3:c8:40:
ae:0d:a2:03:a0:dd:b1:d5:8c:34:5a:57:4f:39:f9:70:3c:19:
d5:fd:1e:13:01:08:94:a4:88:ad:46:1d:b4:15:35:cd:ee:ea:
17:cd:06:b6:36:77:1b:27:5a:05:e3:d8:f6:a7:0b:2c:e3:ac:
00:72:43:33:a2:0c:e8:e5:1f:3a:82:19:b1:4e:32:10:fb:89:
75:89:67:85:8e:9d:18:23:25:50:b6:24:02:c3:a8:72:ec:91:
e0:14:3e:45:bf:61:96:55:fb:dc:5b:78:ef:0d:10:31:72:e6:
c2:27:c4:dc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNjAwNDBaFw0yMjEwMjcwNjAwNDBaMBgxFjAU
BgNVBAMMDTYxNzhlYjBiLTA2OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ4fsgcku6ZHMyTCPKwECueN9Y8TYnuH49jhe9JteKBfL8YNRvMB/epJVX
8GTaoq/SeB5WxO1FxHSl6wNTI07uHqngsoeaRUh0ANaKi0m890ks3VTYqfh3mxWt
NFfnoF/Z8IlZ8t2vlK26W/q81DJRkoCU3anB+qU4Aaoe2vNXAEj1/NejvGp7g/wY
a5h6OtudUna0pXPLIhADqfr2RLC4JK9vcQhW0A/0dk4xZVMryf6LE0IFY7Sp6n1i
UnWW1r9CccMerN5e5pi4g2A4dWuHFYkkgHsLabkS1HEKvXkJMjG1yMBjNOgeRjjv
rRPhyAeNEPOD9MatCGNgHNuWoiUTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUI7Ne
YpxU0T+lKH7Zw7x0icLsq0EwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzM4NzMwMzZFMzZFQjExRUNCODFDNDE3RUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzu8wDQYJKoZIhvcNAQELBQAD
ggEBAHuSbJaFOPGnUhTG3EJpm/6sgTGFqFxfJQjLzglStStkXRQjCox8OBaUnW9N
wobTghrMBP18RTRFr9n+rJIp0+EhkKNX5OA3n2Ii3zMNHx6Vwl9+dDN/x6/ZreBr
mcugYXtP8r8OsTneAUaZnpLOixoxE6vRZuoN7BzZT8+WSFSBu+bxgYlwU38wBmwE
y9PIQK4NogOg3bHVjDRaV085+XA8GdX9HhMBCJSkiK1GHbQVNc3u6hfNBrY2dxsn
WgXj2PanCyzjrAByQzOiDOjlHzqCGbFOMhD7iXWJZ4WOnRgjJVC2JALDqHLskeAU
PkW/YZZV+9xbeO8NEDFy5sInxNw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org