Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B808B236CD11ECBFD58A4BD8A014CE.roa
File: 40B808B236CD11ECBFD58A4BD8A014CE.roa (raw, json)
Hash identifier: /8DVI5sbC2ieo2VsNZqVMoDxhcbp04ne7p/ysw09ALA=
Subject key identifier: 7F:CC:BE:A6:3D:A0:22:60:BB:89:03:FC:2D:03:31:D3:B7:8B:BC:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B808B236CD11ECBFD58A4BD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:26:12 +0000
ROA not before: Wed 27 Oct 2021 02:26:09 +0000
ROA not after: Thu 27 Oct 2022 02:26:09 +0000
asID: 58895
IP address blocks: 45.206.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2677 (0xa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:26:09 2021 GMT
Not After : Oct 27 02:26:09 2022 GMT
Subject: CN=6178b8c4-1bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1d:74:48:d2:08:a8:c9:1d:1d:0f:9f:ce:a9:
43:41:e0:9d:ba:7b:f7:94:a7:3e:95:66:d8:11:91:
0d:85:ee:86:6c:fb:6c:8b:72:01:7e:29:4c:4f:20:
28:04:2a:10:03:a9:42:d6:8e:a4:e8:5f:e1:02:16:
9c:d1:e5:42:64:97:06:b0:9d:64:09:4b:c4:11:70:
c9:cf:5e:4d:b5:dc:fb:85:5b:e3:fe:88:32:0e:3e:
55:29:f0:cc:6c:ce:4d:ee:e5:31:80:8b:9d:a2:5a:
34:cc:84:45:75:82:cd:82:31:51:1a:86:b2:42:f3:
9d:04:79:c7:ad:8a:5b:a0:1f:75:9a:ff:95:e3:5e:
02:e8:93:9a:bd:4d:21:ca:1e:be:5c:b4:38:0a:1f:
42:23:9e:38:6f:a3:a2:84:59:0e:81:fd:c0:f2:3c:
7c:77:67:86:6e:59:09:23:a5:a0:11:5c:4c:fd:d3:
7e:71:47:5f:08:f7:a5:b3:51:47:cb:4a:10:97:5e:
4a:70:94:ad:52:bf:66:38:08:4f:34:0f:70:44:60:
93:d4:56:8a:05:62:45:f8:5e:fb:d6:d9:02:da:8c:
e6:92:f0:e2:64:6b:0e:55:1d:80:cc:28:39:1a:84:
e5:5c:0a:18:42:9b:45:a4:f8:45:7f:cf:13:46:b9:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:BE:A6:3D:A0:22:60:BB:89:03:FC:2D:03:31:D3:B7:8B:BC:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B808B236CD11ECBFD58A4BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:12:5c:48:37:b6:2d:f0:36:cd:ed:51:b1:31:f9:a1:e2:21:
d1:84:5c:57:78:6c:1e:e8:49:6f:85:70:56:b3:ec:59:5e:7b:
28:84:d9:76:92:7f:88:68:4a:23:0b:22:db:39:1c:a6:c1:fd:
26:9e:2c:f4:fd:68:ca:1f:75:66:38:e4:c5:e5:37:7c:70:00:
73:82:61:f9:f5:db:ce:45:c7:99:5a:3f:f3:ec:be:85:d7:7e:
74:3f:71:83:6f:56:06:45:25:93:2d:df:04:1b:8c:75:69:56:
93:76:dc:0f:e9:50:52:a2:87:b9:5b:f2:01:46:e1:78:b8:08:
c2:24:41:ad:ce:a3:65:e2:b0:c5:2f:c9:48:1a:98:80:8e:59:
6e:cf:ff:cc:9e:97:64:9d:21:ee:05:79:12:e3:2f:d3:1a:63:
ee:7d:7a:44:82:20:b5:44:10:24:3e:e2:6a:1c:c9:d0:da:3b:
91:cd:12:d3:c6:0b:75:c1:29:e4:10:84:d7:15:98:a5:36:98:
dc:39:ca:ce:b8:84:1c:f5:ae:0e:dd:c6:52:f7:4b:9e:a6:b4:
d5:36:35:5d:f2:98:e1:cd:c9:00:d9:09:20:13:46:17:8c:1c:
b5:c8:d5:d8:e4:0f:2a:97:4b:fc:95:54:64:41:83:81:1c:33:
90:8e:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org