Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A379F8436D611EC8C7D4D5CD8A014CE.roa
File: 4A379F8436D611EC8C7D4D5CD8A014CE.roa (raw, json)
Hash identifier: VEhCyYrwMlNf7+58o+4pZqCHW/LjUkOxxa3M5bmTKoE=
Subject key identifier: 56:8C:82:FF:1C:51:65:B2:FD:1E:97:2D:DB:8A:08:99:FA:6A:6F:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A379F8436D611EC8C7D4D5CD8A014CE.roa
Signing time: Wed 27 Oct 2021 03:30:54 +0000
ROA not before: Wed 27 Oct 2021 03:30:50 +0000
ROA not after: Thu 27 Oct 2022 03:30:50 +0000
asID: 58895
IP address blocks: 45.206.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 03:30:50 2021 GMT
Not After : Oct 27 03:30:50 2022 GMT
Subject: CN=6178c7ee-ee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:f9:7f:40:69:fb:3f:4c:f5:a8:7d:26:7f:
92:89:b3:49:2c:b0:f8:66:2b:5a:cf:2b:b6:a0:81:
38:04:b3:91:77:6f:2a:1a:02:a0:c7:95:24:b9:8c:
28:79:ee:a6:2c:15:a5:d7:e6:76:7d:01:6c:b9:63:
95:a3:61:b3:fd:00:63:c6:7b:3f:09:95:90:32:72:
59:f1:98:79:9c:13:e3:ad:86:09:a1:ee:f8:ea:36:
02:1f:fe:1c:29:9d:a4:aa:5f:10:13:57:b5:69:2e:
b7:30:25:b2:95:0c:53:84:3f:f2:bc:7a:e5:2d:a5:
12:fa:cc:d9:8d:10:79:b3:88:84:71:27:a6:24:80:
31:37:4c:94:15:75:25:d5:ac:b8:b9:78:29:65:9e:
e5:df:33:21:e7:59:69:81:bd:bd:57:25:b0:78:6a:
11:3d:86:1e:de:f9:85:86:ea:4d:93:f4:fb:f1:da:
db:b6:32:99:e9:ff:a4:fb:13:ef:b8:24:f4:1f:7e:
a2:c3:10:af:4b:14:6b:67:13:56:51:ef:02:41:d6:
39:5c:c3:df:43:52:3a:28:3d:d8:c5:ee:3b:70:5a:
c3:3d:30:9c:b5:25:b9:60:32:82:1d:3f:98:a0:b9:
4c:d5:31:e2:9a:d3:ef:2e:fb:a0:79:90:54:20:72:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:82:FF:1C:51:65:B2:FD:1E:97:2D:DB:8A:08:99:FA:6A:6F:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A379F8436D611EC8C7D4D5CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:aa:24:ab:99:15:af:59:05:c3:71:97:1b:5e:93:1a:5b:68:
5b:b4:1e:91:e1:ce:f5:1c:54:c7:a3:2b:f5:4e:92:f0:00:67:
6c:cb:ea:39:af:eb:32:d3:42:cc:d5:81:67:9b:c9:1b:ea:1b:
8a:63:1c:cf:b6:4f:6b:91:14:75:3a:3d:f7:f1:72:00:08:9d:
a0:29:b3:11:5c:3a:54:16:4d:bb:86:03:33:06:1f:34:82:86:
94:17:c5:6c:b2:61:4d:01:60:47:04:38:fd:06:51:28:f3:aa:
10:d1:fb:90:f5:af:7c:0e:f4:21:ea:cb:c8:71:9f:af:1c:3f:
cf:5e:f1:0b:8f:77:a1:5c:1e:4d:bc:6b:e9:d5:e8:db:12:57:
ae:eb:1a:2a:46:57:9b:a3:70:c1:d7:47:9f:35:79:14:51:eb:
e1:ab:37:ff:d0:f0:33:43:51:56:f8:1b:6f:d3:78:bd:20:37:
3d:4d:57:3e:9d:09:af:d2:90:ec:8f:7d:bc:fb:f6:7f:1e:45:
01:d1:be:e8:cb:bc:c7:4d:0f:32:66:ba:94:ca:0f:78:ac:bb:
cf:97:25:a1:61:4c:82:96:cd:b3:c8:ca:8a:d5:e3:85:52:e2:
ee:79:03:3e:c1:36:ce:3f:1b:df:35:62:11:52:98:96:31:ed:
fc:f5:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org