Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8352BE36DD11ECB2AE0667D8A014CE.roa
File: 4B8352BE36DD11ECB2AE0667D8A014CE.roa (raw, json)
Hash identifier: 3BPp9xWIqGzcvuo3aUvtHyZaP9+QYjCQevWsqbjyVsk=
Subject key identifier: 0A:E5:8A:80:BF:16:D8:5F:16:69:19:CD:C6:3A:4C:39:9D:EF:4A:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8352BE36DD11ECB2AE0667D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:21:02 +0000
ROA not before: Wed 27 Oct 2021 04:20:59 +0000
ROA not after: Thu 27 Oct 2022 04:20:59 +0000
asID: 58895
IP address blocks: 45.206.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2833 (0xb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:20:59 2021 GMT
Not After : Oct 27 04:20:59 2022 GMT
Subject: CN=6178d3ae-0cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:d9:cb:fc:40:55:05:26:62:48:23:0b:fa:
6e:23:cf:a0:0c:7e:bd:65:30:3f:e4:af:ba:d1:ed:
f6:bc:95:e8:c3:fa:42:4d:bd:b3:e7:35:bb:e4:48:
cd:2d:5b:78:5c:fb:5f:f0:13:99:4c:c4:f4:05:b2:
73:f2:2c:59:a7:55:30:cd:64:e4:5b:46:2d:9a:3c:
9a:20:ac:69:f3:dc:9b:87:1d:9d:a0:c0:e0:73:40:
af:14:89:dc:36:a2:e8:02:67:1e:a0:ab:89:6b:93:
5b:6f:95:f3:0e:ea:87:da:64:61:30:47:a8:b4:68:
32:08:3a:89:e7:20:d5:0b:84:06:8d:3d:21:a1:87:
43:84:02:b6:aa:cd:a4:3c:8d:e6:76:51:a6:85:63:
31:21:ae:34:a8:d2:d1:fb:be:11:89:29:c8:30:2c:
63:7f:db:0b:9c:64:97:f0:73:70:54:b0:d6:1a:76:
e5:ef:e6:3c:60:f4:29:75:3a:f3:b4:b9:f0:69:cd:
d2:69:54:b5:eb:25:16:1c:4e:8a:69:9a:7a:59:a4:
39:3e:03:0d:f9:e2:0f:66:05:9e:e7:0c:18:95:bb:
7c:65:e3:3b:b9:dd:2e:fb:64:96:55:06:1d:a2:9b:
23:1f:c3:23:19:dd:63:ea:b5:94:af:91:06:81:5a:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:8A:80:BF:16:D8:5F:16:69:19:CD:C6:3A:4C:39:9D:EF:4A:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8352BE36DD11ECB2AE0667D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bb:21:a7:d4:25:ce:5e:4c:b0:42:ad:bb:58:b4:4a:2b:5f:
cf:0c:7f:76:ee:a0:b0:df:f1:4c:26:04:38:42:a3:45:3a:ee:
1d:aa:18:72:f1:a1:38:12:ab:dc:1a:28:8a:ff:14:00:02:1f:
7e:62:f2:11:05:0b:25:ff:5d:29:22:db:cc:58:47:c5:a5:be:
b5:bc:92:36:2a:70:4e:46:46:2e:66:43:a7:64:e7:2f:86:cd:
ce:f6:95:67:bd:3e:d8:f7:23:98:ff:7d:56:72:ba:ae:71:ee:
68:f0:c1:c3:90:9b:62:26:9b:87:21:2a:99:54:ca:71:9f:45:
d8:79:67:b7:35:bc:9b:e0:1e:99:c5:d6:be:3c:2c:d0:33:64:
3c:6d:14:25:54:37:6f:f4:c5:2b:bb:c7:32:43:3d:b7:08:0d:
84:ef:1c:d0:f0:4c:df:50:08:9f:cf:4d:c5:f5:2a:7c:73:5d:
6f:fb:6b:10:b5:8a:02:f6:a0:f9:06:19:72:44:1c:de:6a:63:
3c:cb:05:bc:ee:cc:d1:e0:11:72:b4:40:f9:f1:78:86:d2:d0:
b4:d4:f5:fc:5b:9d:48:46:bc:af:f0:c4:51:4a:2d:06:48:85:
be:96:4a:e1:c0:ef:52:eb:55:23:46:73:cc:36:4e:be:3f:be:
26:47:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org