Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/437E520436CD11ECBDC88C4BD8A014CE.roa
File: 437E520436CD11ECBDC88C4BD8A014CE.roa (raw, json)
Hash identifier: KYcDVkrtqk/rqrsvCuhlYTKHiL2NCAoURSf2ypZAKP0=
Subject key identifier: A8:27:67:8E:D5:A7:A1:80:98:1A:2E:DB:AA:9B:48:1D:49:9C:53:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/437E520436CD11ECBDC88C4BD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:26:18 +0000
ROA not before: Wed 27 Oct 2021 02:26:14 +0000
ROA not after: Thu 27 Oct 2022 02:26:14 +0000
asID: 58895
IP address blocks: 45.206.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:26:14 2021 GMT
Not After : Oct 27 02:26:14 2022 GMT
Subject: CN=6178b8ca-a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:9a:81:70:e9:86:36:f2:0d:80:80:89:45:
67:54:b5:2c:19:bd:4c:6e:fa:3f:a5:84:dd:70:59:
8b:2e:7e:4c:33:96:12:bd:aa:39:a8:1a:92:70:6e:
df:9c:df:d4:88:c4:72:c0:eb:78:73:3f:f8:42:9d:
05:85:6d:bf:2c:6f:df:21:60:77:0b:b2:5b:66:d2:
47:94:9e:44:b9:b2:9c:06:1e:e9:27:b6:44:e9:be:
d5:88:7e:cf:31:58:11:5e:2d:1d:11:15:39:5f:d8:
d1:ed:8d:18:8b:75:3e:da:9a:24:17:3e:ea:ec:d5:
d2:e7:d8:25:9f:fe:c9:09:c5:b7:49:d0:f6:d0:19:
05:5b:c3:e4:1a:d5:e2:90:26:60:56:9a:ea:04:47:
c2:b2:5b:5a:ed:7e:d2:fb:8e:75:74:85:1c:7c:e3:
ad:d1:69:7e:d1:94:9a:6a:d1:31:ee:ee:ba:d3:69:
08:20:86:31:a9:ef:09:5f:89:ed:b5:66:87:38:d3:
c2:79:1e:8d:6b:e3:a2:20:cb:e5:37:18:60:38:38:
b9:eb:e9:dc:1d:c9:17:54:c3:7a:a9:18:20:b7:f5:
fe:36:62:cb:ec:fe:01:5f:4c:b7:ba:09:4d:0c:89:
4f:b3:07:1b:84:a6:15:6c:e1:d7:db:c9:fd:ac:57:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:67:8E:D5:A7:A1:80:98:1A:2E:DB:AA:9B:48:1D:49:9C:53:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/437E520436CD11ECBDC88C4BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.144.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f0:94:e3:2a:de:82:6e:4d:f5:e1:6c:58:72:7a:2a:85:2c:
24:86:f6:fa:1f:b7:e0:58:6b:f2:d4:c4:cc:96:0f:5a:e5:eb:
3c:04:76:9d:ad:ce:fe:84:e5:7f:2c:28:22:b0:14:9f:21:f6:
89:62:e0:be:8c:73:2c:b1:bd:2c:bc:4f:8d:83:ce:70:0e:99:
96:f9:88:e8:b6:82:f5:0b:f7:b6:89:1d:07:7a:c7:ef:3f:3f:
d3:4e:55:2a:8b:ec:71:5a:40:95:03:af:a3:bd:f4:67:24:cb:
a8:74:35:86:6a:05:5c:03:16:f7:1e:df:99:18:0f:81:91:9c:
02:51:2d:a4:72:94:92:2e:2d:06:5f:dc:60:1e:c7:c9:20:80:
7f:16:f9:96:38:29:1f:86:d8:07:05:75:3f:9e:28:ad:d3:e9:
c6:82:07:b6:7f:1b:10:9a:1f:71:69:c7:6c:c0:94:1e:ec:05:
53:55:28:cb:f0:c1:85:7d:a9:21:7f:92:bb:e1:34:27:06:5c:
af:18:df:33:2c:fa:43:9b:4b:a3:c3:03:18:46:20:a1:7b:40:
60:5d:ea:08:d6:ba:b4:8f:74:78:ce:d6:fa:fa:42:2a:c0:8c:
33:82:b7:92:fe:f4:9a:1c:aa:9f:b9:71:00:53:b2:87:ba:46:
21:2d:e7:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCncwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMjI2MTRaFw0yMjEwMjcwMjI2MTRaMBgxFjAU
BgNVBAMMDTYxNzhiOGNhLWEzODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDc5qBcOmGNvINgICJRWdUtSwZvUxu+j+lhN1wWYsufkwzlhK9qjmoGpJw
bt+c39SIxHLA63hzP/hCnQWFbb8sb98hYHcLsltm0keUnkS5spwGHukntkTpvtWI
fs8xWBFeLR0RFTlf2NHtjRiLdT7amiQXPurs1dLn2CWf/skJxbdJ0PbQGQVbw+Qa
1eKQJmBWmuoER8KyW1rtftL7jnV0hRx8463RaX7RlJpq0THu7rrTaQgghjGp7wlf
ie21Zoc408J5Ho1r46Igy+U3GGA4OLnr6dwdyRdUw3qpGCC39f42Ysvs/gFfTLe6
CU0MiU+zBxuEphVs4dfbyf2sVyjpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUqCdn
jtWnoYCYGi7bqptIHUmcU6swHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQzN0U1MjA0MzZDRDExRUNCREM4OEM0QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzpAwDQYJKoZIhvcNAQELBQAD
ggEBAAPwlOMq3oJuTfXhbFhyeiqFLCSG9voft+BYa/LUxMyWD1rl6zwEdp2tzv6E
5X8sKCKwFJ8h9oli4L6McyyxvSy8T42DznAOmZb5iOi2gvUL97aJHQd6x+8/P9NO
VSqL7HFaQJUDr6O99Gcky6h0NYZqBVwDFvce35kYD4GRnAJRLaRylJIuLQZf3GAe
x8kggH8W+ZY4KR+G2AcFdT+eKK3T6caCB7Z/GxCaH3Fpx2zAlB7sBVNVKMvwwYV9
qSF/krvhNCcGXK8Y3zMs+kObS6PDAxhGIKF7QGBd6gjWurSPdHjO1vr6QirAjDOC
t5L+9Jocqp+5cQBTsoe6RiEt51Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org