Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4369DD20784E11ECBB85A0C65A40D577.roa
File: 4369DD20784E11ECBB85A0C65A40D577.roa (raw, json)
Hash identifier: MPCz4OHoGmZQ75Wy347Y/6xKdL+NGy0ZMqBAxTAq0OU=
Subject key identifier: 6F:D8:99:B2:5A:BC:7B:9C:2F:A2:39:52:CD:B2:5D:EC:E0:7D:6C:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 119F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4369DD20784E11ECBB85A0C65A40D577.roa
Signing time: Tue 18 Jan 2022 11:03:28 +0000
ROA not before: Tue 18 Jan 2022 11:03:24 +0000
ROA not after: Sun 30 Oct 2022 11:03:24 +0000
asID: 136525
IP address blocks: 45.206.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4511 (0x119f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 11:03:24 2022 GMT
Not After : Oct 30 11:03:24 2022 GMT
Subject: CN=61e69e7f-b994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:31:f3:a0:4e:80:36:ae:09:89:6e:64:f5:
e9:8a:6c:43:fb:37:1d:46:ba:83:5f:7c:f4:c0:60:
ea:9b:fb:f0:35:2e:50:7d:26:9c:5c:64:50:d1:81:
5c:a4:6b:39:e3:28:32:1d:22:87:84:92:91:fc:f8:
d2:9e:c9:24:db:bd:50:7d:b9:1f:25:ed:66:a6:9c:
c4:08:3f:9d:c0:17:4d:31:a1:68:8e:86:ee:f9:38:
d7:0a:db:fc:eb:f8:93:1f:b6:95:39:0e:06:a6:7e:
d0:13:7e:97:3f:19:ec:93:f8:2e:70:1f:53:c9:05:
79:75:3a:94:72:9d:2b:cc:0a:8e:9f:80:fe:bb:f8:
bb:b4:fd:c8:87:a3:9b:3c:5c:4a:4f:17:78:ff:de:
2d:7d:e1:4b:c2:08:bb:6d:29:79:64:c3:fd:ed:8d:
0f:5a:ef:24:80:fc:60:e4:fb:b6:d7:22:15:eb:77:
aa:15:2b:a4:18:cb:3d:e7:22:b5:4f:59:f1:0d:e7:
24:e8:dd:14:a4:de:dc:00:d1:2d:79:75:ab:20:e5:
97:79:4c:8d:ec:33:9f:2d:e8:d9:70:56:dd:32:be:
e7:d7:8f:69:8a:30:d0:a8:52:45:7c:eb:16:62:35:
77:1e:03:a0:a9:42:33:23:db:30:f2:87:53:2b:99:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:99:B2:5A:BC:7B:9C:2F:A2:39:52:CD:B2:5D:EC:E0:7D:6C:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4369DD20784E11ECBB85A0C65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:11:b7:0c:cf:23:7c:df:dc:22:78:15:12:6e:2b:c1:53:bf:
a9:96:7b:10:2f:96:32:4e:c8:1f:1c:cb:29:9d:b8:26:00:a3:
48:46:dd:9f:45:d0:f8:88:f6:3f:02:9c:14:3a:29:e6:03:76:
16:49:a0:2f:55:dd:f5:10:2b:2e:de:73:0f:64:a5:c8:40:db:
f0:20:b9:ea:d3:4e:ba:db:c8:5a:f5:23:6b:9b:9f:e6:d8:75:
e4:ea:b1:9c:0e:e2:96:d5:f6:75:75:84:3e:f0:98:a5:e6:0f:
75:d0:af:4c:e1:f5:0f:a2:77:e9:43:d8:4c:25:fe:2e:17:75:
f3:28:c4:cd:70:0f:87:c4:33:ca:24:0e:b2:81:61:10:65:70:
df:23:e3:b5:96:9b:3d:5d:6a:41:20:6f:cb:df:13:1e:37:68:
44:16:d5:46:ca:97:2c:47:fe:9a:69:a4:57:ae:8e:05:69:ef:
96:cb:1b:64:fc:8c:06:f7:b8:db:73:d2:e8:24:84:c8:e0:00:
76:2b:6a:21:8a:01:9c:37:da:f6:4f:24:0e:dd:60:d6:01:72:
0a:56:8b:58:79:29:f2:f6:72:bf:ac:52:61:a0:b3:9f:fa:9a:
57:a0:4a:c4:7c:6d:31:26:2f:e5:61:2c:a6:f7:e1:4d:9e:7d:
45:b6:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org