Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
File: 4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa (raw, json)
Hash identifier: Hz0YRm7amerCZRcXCcLUd7ZEBg6dx9ApwPCZp9M5HyQ=
Subject key identifier: B5:54:05:D9:A3:AB:2C:70:96:2D:24:1B:05:80:DB:4D:F1:81:75:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:54:13 +0000
ROA not before: Wed 27 Oct 2021 05:54:10 +0000
ROA not after: Thu 27 Oct 2022 05:54:10 +0000
asID: 58895
IP address blocks: 45.206.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:54:10 2021 GMT
Not After : Oct 27 05:54:10 2022 GMT
Subject: CN=6178e985-acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:d4:19:5b:c2:ab:c2:db:67:56:18:ee:81:
6d:84:1d:f2:7f:92:40:4c:39:b6:58:a1:ad:67:8a:
e0:10:be:23:02:99:b7:34:8e:41:91:63:3f:16:a3:
85:e6:b8:33:7c:5d:a7:55:88:12:8f:fd:f4:e1:46:
aa:36:0c:b4:a7:04:28:9d:d5:39:23:bf:7e:58:40:
20:d2:4b:3a:0a:5a:15:a0:ff:bc:db:76:57:1e:74:
7a:87:9f:9e:4a:7f:1e:40:32:99:5f:83:eb:7c:58:
2d:7f:09:ef:e0:b3:3e:5c:34:e3:f8:9f:09:ba:77:
55:d6:bb:82:87:44:6a:a3:87:74:15:ac:e3:e9:d1:
a6:64:ce:e5:a4:f7:16:8b:42:3c:33:76:6f:76:d1:
22:de:37:63:67:f2:e6:d3:d2:ac:12:d1:cb:69:76:
bf:b3:1d:7a:7f:0a:0d:8a:c4:9a:fd:c4:4b:f9:8a:
bc:17:57:7e:03:53:13:ef:d0:e2:68:b6:bf:6d:d3:
d8:da:57:f1:fe:80:3c:6b:e6:bc:e1:a0:75:db:09:
73:d1:2c:9e:cc:a0:ae:9d:37:13:be:d9:1d:d4:89:
96:ba:73:18:c8:7b:89:3d:c5:4d:93:e1:f5:cc:6a:
fe:7c:f7:08:08:f8:16:e7:ce:cc:b7:3c:e9:a5:4c:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:05:D9:A3:AB:2C:70:96:2D:24:1B:05:80:DB:4D:F1:81:75:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9FB84E36EA11EC9BAA8F7CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:80:09:42:6c:51:39:9a:bb:bf:2e:36:3f:52:e1:bb:10:7d:
73:3e:30:34:02:f3:aa:e8:cf:4b:53:4d:9c:a8:5b:af:42:9d:
d7:95:03:6e:35:ff:9a:21:5f:8c:e2:af:f9:a5:0a:f4:64:3c:
60:0c:f0:62:b4:08:4d:9b:22:ea:a2:17:58:ac:e2:8d:1a:a7:
1a:ca:f5:96:d3:2f:c0:56:ad:73:aa:92:76:02:ff:15:b4:ce:
f4:48:ef:67:5c:cb:f0:95:0e:70:f7:fa:b5:e2:20:76:66:2d:
c4:a0:16:0f:3d:67:2a:ad:31:9f:91:ed:51:79:0a:1c:ea:32:
53:ab:63:16:dd:de:ed:30:06:7a:c9:6c:50:17:94:69:19:ad:
dc:48:73:3c:30:0e:4f:40:7d:47:bc:7a:f6:60:6b:cc:6b:0f:
1b:9f:6e:66:e0:fb:4e:75:8b:e8:28:15:ce:ad:8f:71:c9:f6:
ba:17:53:71:70:ab:16:8f:3b:51:f8:5a:7b:8e:c4:a5:e8:f8:
1f:1b:0a:a1:bd:ac:5c:be:f1:be:99:e6:f9:fa:27:8d:92:0d:
ba:af:f9:40:91:da:0f:0c:bc:74:86:ba:a1:d6:93:84:33:9d:
9e:56:43:a5:18:ac:03:8a:c1:27:7b:20:39:2c:a5:a3:91:3a:
5b:fb:66:9b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC+swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNTU0MTBaFw0yMjEwMjcwNTU0MTBaMBgxFjAU
BgNVBAMMDTYxNzhlOTg1LWFjZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKj9QZW8KrwttnVhjugW2EHfJ/kkBMObZYoa1niuAQviMCmbc0jkGRYz8W
o4XmuDN8XadViBKP/fThRqo2DLSnBCid1Tkjv35YQCDSSzoKWhWg/7zbdlcedHqH
n55Kfx5AMplfg+t8WC1/Ce/gsz5cNOP4nwm6d1XWu4KHRGqjh3QVrOPp0aZkzuWk
9xaLQjwzdm920SLeN2Nn8ubT0qwS0ctpdr+zHXp/Cg2KxJr9xEv5irwXV34DUxPv
0OJotr9t09jaV/H+gDxr5rzhoHXbCXPRLJ7MoK6dNxO+2R3UiZa6cxjIe4k9xU2T
4fXMav589wgI+Bbnzsy3POmlTIF5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUtVQF
2aOrLHCWLSQbBYDbTfGBdUYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzRGOUZCODRFMzZFQTExRUM5QkFBOEY3Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzjgwDQYJKoZIhvcNAQELBQAD
ggEBALSACUJsUTmau78uNj9S4bsQfXM+MDQC86roz0tTTZyoW69CndeVA241/5oh
X4zir/mlCvRkPGAM8GK0CE2bIuqiF1is4o0apxrK9ZbTL8BWrXOqknYC/xW0zvRI
72dcy/CVDnD3+rXiIHZmLcSgFg89ZyqtMZ+R7VF5ChzqMlOrYxbd3u0wBnrJbFAX
lGkZrdxIczwwDk9AfUe8evZga8xrDxufbmbg+051i+goFc6tj3HJ9roXU3FwqxaP
O1H4WnuOxKXo+B8bCqG9rFy+8b6Z5vn6J42SDbqv+UCR2g8MvHSGuqHWk4QznZ5W
Q6UYrAOKwSd7IDkspaOROlv7Zps=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org