Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4120ABA236EA11ECB0475D7CD8A014CE.roa
File: 4120ABA236EA11ECB0475D7CD8A014CE.roa (raw, json)
Hash identifier: QlzEVBqzv1eP5gaTC7896VrqYWDIzPgRXC4yW/4jmTE=
Subject key identifier: 2B:54:C4:A1:A5:AE:BA:92:7D:0C:D4:1B:34:B9:2E:E2:EB:98:C0:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4120ABA236EA11ECB0475D7CD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:53:49 +0000
ROA not before: Wed 27 Oct 2021 05:53:45 +0000
ROA not after: Thu 27 Oct 2022 05:53:45 +0000
asID: 58895
IP address blocks: 45.206.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:53:45 2021 GMT
Not After : Oct 27 05:53:45 2022 GMT
Subject: CN=6178e96c-ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:0c:03:c5:b5:b6:20:eb:45:ca:98:cd:60:
c2:c6:fc:57:25:2b:f0:e0:5a:b8:8b:45:4b:09:ac:
94:15:ca:b3:b9:eb:db:cf:e1:6b:38:48:dd:88:b1:
78:f0:71:ae:9b:8c:8c:b9:31:27:13:0d:58:7b:c5:
c9:55:38:2f:4f:df:45:63:d9:28:6c:5e:13:a3:eb:
8c:17:53:47:6c:43:3a:d9:99:90:6f:84:6c:c9:ea:
b9:68:7e:1d:2f:a0:0f:f8:35:bd:1e:13:b7:e2:dc:
ae:46:8a:ac:7d:65:f1:07:d5:23:13:40:d2:62:d1:
ef:fc:ee:1a:38:bd:35:ad:d1:73:10:67:19:63:b0:
98:a9:ea:86:2f:d6:d4:60:fb:71:b9:af:a1:42:e6:
41:7e:86:64:e2:4d:8b:9e:dd:42:a4:3f:67:9d:bf:
e7:dd:ef:2e:cb:d8:68:1a:44:7b:c5:de:9b:b3:8a:
fa:f4:5e:80:85:e5:e7:63:e9:53:9f:c8:43:24:1a:
95:95:f6:fe:75:6b:4d:0b:ff:68:ec:dc:40:db:ee:
ea:c2:2c:e8:d4:d5:e9:31:8f:c4:16:5e:ac:55:d6:
b7:d7:d0:1e:aa:8e:f4:7d:2e:17:7b:d7:ab:8c:ae:
60:46:0c:12:0d:5b:92:8b:de:40:eb:9e:e8:6c:59:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:54:C4:A1:A5:AE:BA:92:7D:0C:D4:1B:34:B9:2E:E2:EB:98:C0:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4120ABA236EA11ECB0475D7CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9a:6c:80:ec:c2:ac:39:4d:58:c9:6b:99:a8:93:fe:d9:9c:
bd:2a:d4:71:3c:ed:9e:75:06:39:ca:fb:b9:c3:29:54:87:ce:
e4:06:ba:20:01:5e:9b:0b:35:54:4b:d3:76:e6:88:24:f2:a6:
f3:79:af:a6:d2:c8:83:14:cf:66:a8:6e:c6:7a:5f:1e:44:3d:
b4:e6:b9:94:cf:6b:ad:62:37:fa:ed:6f:9f:c9:5b:e6:ea:2c:
ab:db:6f:33:fe:99:27:d7:7e:8a:ea:14:20:65:a6:91:a1:4c:
0a:99:25:8d:3e:79:fa:8a:fe:1c:6e:31:2e:f4:80:91:0b:7d:
58:18:01:49:27:89:fe:f3:9d:30:84:a2:8f:2b:6f:63:c7:98:
20:2c:7c:ea:de:6a:07:bc:1c:d4:a8:98:1e:aa:9a:64:61:e3:
a7:46:67:6b:f7:4a:7c:c2:a5:e1:fb:25:ff:f8:19:7e:0b:ce:
63:de:be:bc:96:1d:ff:11:cc:45:ce:32:18:81:e6:67:8b:5c:
6d:92:46:19:65:b0:01:3a:2f:d4:33:8d:81:34:d7:3b:eb:fd:
84:0e:28:7c:47:b4:ea:ff:14:0a:b3:58:8b:07:03:3a:1f:b7:
40:ba:8d:a8:a8:6e:33:70:14:85:ac:a7:95:97:a3:8e:e5:a7:
ed:1b:5f:5f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNTUzNDVaFw0yMjEwMjcwNTUzNDVaMBgxFjAU
BgNVBAMMDTYxNzhlOTZjLWVhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5KAwDxbW2IOtFypjNYMLG/FclK/DgWriLRUsJrJQVyrO569vP4Ws4SN2I
sXjwca6bjIy5MScTDVh7xclVOC9P30Vj2ShsXhOj64wXU0dsQzrZmZBvhGzJ6rlo
fh0voA/4Nb0eE7fi3K5Giqx9ZfEH1SMTQNJi0e/87ho4vTWt0XMQZxljsJip6oYv
1tRg+3G5r6FC5kF+hmTiTYue3UKkP2edv+fd7y7L2GgaRHvF3puzivr0XoCF5edj
6VOfyEMkGpWV9v51a00L/2js3EDb7urCLOjU1ekxj8QWXqxV1rfX0B6qjvR9Lhd7
16uMrmBGDBINW5KL3kDrnuhsWeIhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUK1TE
oaWuupJ9DNQbNLku4uuYwIEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQxMjBBQkEyMzZFQTExRUNCMDQ3NUQ3Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzuQwDQYJKoZIhvcNAQELBQAD
ggEBALmabIDswqw5TVjJa5mok/7ZnL0q1HE87Z51BjnK+7nDKVSHzuQGuiABXpsL
NVRL03bmiCTypvN5r6bSyIMUz2aobsZ6Xx5EPbTmuZTPa61iN/rtb5/JW+bqLKvb
bzP+mSfXforqFCBlppGhTAqZJY0+efqK/hxuMS70gJELfVgYAUknif7znTCEoo8r
b2PHmCAsfOreage8HNSomB6qmmRh46dGZ2v3SnzCpeH7Jf/4GX4LzmPevryWHf8R
zEXOMhiB5meLXG2SRhllsAE6L9QzjYE01zvr/YQOKHxHtOr/FAqzWIsHAzoft0C6
jaiobjNwFIWsp5WXo47lp+0bX18=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org