Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE469E36CD11ECB6BDAE4BD8A014CE.roa
File: 59DE469E36CD11ECB6BDAE4BD8A014CE.roa (raw, json)
Hash identifier: uaBc/zNyDOQ5m4+ldnGnz8bhmt3EBjAAITkAvA7YwD4=
Subject key identifier: A0:66:4E:EA:A4:08:BB:A7:32:D3:B3:DD:59:F9:B0:0B:D0:19:95:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE469E36CD11ECB6BDAE4BD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:26:55 +0000
ROA not before: Wed 27 Oct 2021 02:26:51 +0000
ROA not after: Thu 27 Oct 2022 02:26:51 +0000
asID: 58895
IP address blocks: 45.206.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:26:51 2021 GMT
Not After : Oct 27 02:26:51 2022 GMT
Subject: CN=6178b8ee-d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:7c:a1:1b:61:a3:6e:45:ec:07:cb:b0:4f:
31:e8:e2:01:7a:47:ef:c0:11:2f:bb:72:4e:83:1b:
f3:59:30:74:8c:d6:28:13:23:9d:64:6c:93:21:d4:
e5:0f:8f:fd:29:3c:55:86:9b:50:47:fc:af:bf:1a:
3c:c6:61:b5:07:79:11:c1:0e:04:dd:e8:4c:e6:c2:
e9:00:a3:f3:5e:91:84:18:ca:e7:01:52:df:b2:1e:
b9:63:82:d6:03:eb:fd:16:aa:e2:40:dc:63:ee:64:
2f:f2:7d:26:fc:d4:9e:37:e8:e2:4d:08:65:28:85:
98:19:ae:9b:3d:59:d1:6b:3e:87:1d:6b:0a:e9:ab:
ac:35:c2:e3:09:b1:9f:ed:e2:ac:2c:89:ae:a1:bc:
49:34:4e:10:77:7b:9c:2f:56:ec:6c:6a:06:f8:89:
d9:8e:2c:6d:b0:ab:74:c8:16:4d:13:a4:1a:2e:36:
8a:cf:e6:8d:11:c3:1c:a2:c3:a0:17:89:a1:e5:ef:
b6:4a:0b:a7:67:f6:23:ef:01:e7:ac:de:df:33:77:
4f:97:9f:ee:3f:1e:f9:70:9b:0c:b0:95:ba:19:2d:
40:12:02:5a:f5:44:ad:ca:06:30:bf:c6:9a:c7:3c:
35:b8:16:6e:86:ee:d3:16:9d:f1:40:4c:b0:3e:b9:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:4E:EA:A4:08:BB:A7:32:D3:B3:DD:59:F9:B0:0B:D0:19:95:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE469E36CD11ECB6BDAE4BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.145.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b2:05:b1:46:ff:fd:9a:95:29:33:33:33:d4:57:45:82:f5:
bc:46:6e:94:d8:69:e2:76:17:d3:a6:ca:e7:1d:b4:8f:05:08:
f0:ba:a1:5f:8c:fd:2a:db:f1:6e:a8:df:a2:cd:a3:1c:67:94:
0f:1d:b7:e9:4d:24:74:2f:97:23:65:8f:46:48:db:28:5d:9c:
d2:da:b5:4f:2a:d2:16:e9:19:0a:ab:3d:93:34:ca:34:7b:8d:
ce:f8:35:f5:03:cd:a7:cf:60:0e:22:08:c8:49:26:77:90:93:
74:be:4b:79:90:14:34:99:02:4a:14:94:1b:ee:b6:5f:5c:7c:
ac:7c:89:f8:e0:a5:fe:dc:76:f3:72:3b:19:2b:60:12:13:0c:
cc:7c:7a:62:74:1e:d9:89:8d:a1:69:1a:9f:7d:df:ea:7a:c5:
4b:39:d0:4d:64:ea:15:19:6f:d9:ee:c1:4c:19:e7:c2:54:e5:
a0:ec:02:9b:54:02:b0:b6:65:15:a5:f9:30:1a:59:82:3d:20:
6a:3d:86:1a:cf:d9:8b:42:a2:42:e9:c2:0f:2d:45:a9:b3:e1:
59:29:33:34:f4:ff:f2:44:43:bd:f8:9f:ab:de:38:cc:e8:ea:
db:c7:41:e7:33:d4:4f:85:6e:53:25:f1:d8:bf:9e:2b:f1:c0:
fd:47:bf:ab
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMjI2NTFaFw0yMjEwMjcwMjI2NTFaMBgxFjAU
BgNVBAMMDTYxNzhiOGVlLWQwMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1UHyhG2GjbkXsB8uwTzHo4gF6R+/AES+7ck6DG/NZMHSM1igTI51kbJMh
1OUPj/0pPFWGm1BH/K+/GjzGYbUHeRHBDgTd6EzmwukAo/NekYQYyucBUt+yHrlj
gtYD6/0WquJA3GPuZC/yfSb81J436OJNCGUohZgZrps9WdFrPocdawrpq6w1wuMJ
sZ/t4qwsia6hvEk0ThB3e5wvVuxsagb4idmOLG2wq3TIFk0TpBouNorP5o0Rwxyi
w6AXiaHl77ZKC6dn9iPvAees3t8zd0+Xn+4/HvlwmwywlboZLUASAlr1RK3KBjC/
xprHPDW4Fm6G7tMWnfFATLA+uTThAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoGZO
6qQIu6cy07PdWfmwC9AZlWgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzU5REU0NjlFMzZDRDExRUNCNkJEQUU0QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzpEwDQYJKoZIhvcNAQELBQAD
ggEBACOyBbFG//2alSkzMzPUV0WC9bxGbpTYaeJ2F9OmyucdtI8FCPC6oV+M/Srb
8W6o36LNoxxnlA8dt+lNJHQvlyNlj0ZI2yhdnNLatU8q0hbpGQqrPZM0yjR7jc74
NfUDzafPYA4iCMhJJneQk3S+S3mQFDSZAkoUlBvutl9cfKx8ifjgpf7cdvNyOxkr
YBITDMx8emJ0HtmJjaFpGp993+p6xUs50E1k6hUZb9nuwUwZ58JU5aDsAptUArC2
ZRWl+TAaWYI9IGo9hhrP2YtCokLpwg8tRamz4VkpMzT0//JEQ734n6veOMzo6tvH
Qecz1E+FblMl8di/nivxwP1Hv6s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org