Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9F33A636DE11EC99521E69D8A014CE.roa
File: 5B9F33A636DE11EC99521E69D8A014CE.roa (raw, json)
Hash identifier: QyQiGOe1fKAoKuXkTzVx+NH8xRgv6ERpCfgh4NSHSF0=
Subject key identifier: E0:C8:C0:40:0C:4A:8D:82:6C:5D:18:C6:58:35:5F:F8:52:9F:39:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9F33A636DE11EC99521E69D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:28:39 +0000
ROA not before: Wed 27 Oct 2021 04:28:35 +0000
ROA not after: Thu 27 Oct 2022 04:28:35 +0000
asID: 58895
IP address blocks: 45.206.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:28:35 2021 GMT
Not After : Oct 27 04:28:35 2022 GMT
Subject: CN=6178d577-c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:92:68:97:d8:69:68:ef:40:93:40:dc:af:
88:c4:ce:a3:dd:2d:7b:61:91:e3:b4:11:f9:40:c5:
73:0e:08:47:8e:f3:c6:80:06:ae:e4:3c:7f:80:48:
19:f1:8e:e9:84:61:1c:e9:31:08:96:ae:ac:9c:b7:
fd:11:c9:c0:88:0e:7c:7a:a2:a2:2b:ef:d4:69:db:
45:db:5b:c8:ec:d8:8f:3b:37:c4:3a:fd:60:a0:39:
b7:a1:bf:a5:34:be:bf:25:17:fb:ef:8a:c1:af:77:
38:46:b5:2f:6f:23:03:35:b2:1c:3e:c7:0a:fb:8e:
57:7e:66:eb:be:28:fb:2c:29:d8:6e:b3:c4:d7:aa:
34:26:29:33:e6:f3:bd:b0:96:41:76:47:08:13:d7:
46:2b:bf:e4:36:53:36:4d:03:31:ce:bf:44:fd:00:
a5:a7:b2:ce:37:58:e6:f5:60:c4:bc:50:38:2e:24:
79:d8:c0:7e:7a:87:32:4b:d0:e4:88:a9:c1:f4:27:
5d:45:ae:62:ba:54:90:9c:1d:bb:4c:83:60:b6:26:
97:9f:e3:02:d1:f5:4d:e8:52:24:f7:97:8e:26:fb:
44:36:7a:63:6f:52:f7:94:72:03:71:02:70:42:8e:
af:19:a9:9c:d0:ac:c2:c4:2a:81:30:05:a9:34:6d:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:C0:40:0C:4A:8D:82:6C:5D:18:C6:58:35:5F:F8:52:9F:39:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9F33A636DE11EC99521E69D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:04:55:85:07:3c:de:8b:7c:26:a7:ab:d1:ec:a2:fd:89:e7:
03:a8:37:b0:c5:12:15:13:3d:74:f3:14:14:14:ad:38:55:ed:
bb:09:f8:1e:f3:81:66:cd:93:e0:88:87:2b:4e:6b:b4:d6:e2:
4a:64:13:c2:f2:6d:51:81:de:fa:a2:6b:4b:aa:c6:e5:b3:0b:
a4:c6:38:7e:69:6c:b0:74:0e:41:98:bf:74:55:1e:86:a1:cc:
80:87:d0:5b:2f:31:a8:25:08:38:18:aa:98:f1:a3:41:22:3d:
1d:c4:ba:37:d1:dd:f9:0f:80:b6:b0:de:42:b2:70:94:f5:26:
e4:b6:dd:de:57:0c:ad:f3:c9:da:ed:02:1e:f9:3b:6e:e0:6f:
72:58:30:75:23:94:da:94:f6:e9:6b:e9:ba:21:8a:77:45:d0:
09:f6:31:42:78:b2:c2:76:66:10:d0:61:bf:c3:38:f6:ae:e9:
c2:1c:f8:eb:4e:2e:7d:03:7b:9d:95:e1:95:44:17:f2:41:3d:
1d:2c:eb:3f:70:dc:10:57:1f:34:07:2a:13:1f:a2:60:94:55:
88:20:85:89:ff:21:84:04:1c:af:83:3f:c0:4e:57:e7:63:f6:
3c:12:ee:77:e4:88:a8:ca:e9:b2:7f:60:80:3c:b0:f8:45:0f:
92:97:54:54
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDI4MzVaFw0yMjEwMjcwNDI4MzVaMBgxFjAU
BgNVBAMMDTYxNzhkNTc3LWM0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3qZJol9hpaO9Ak0Dcr4jEzqPdLXthkeO0EflAxXMOCEeO88aABq7kPH+A
SBnxjumEYRzpMQiWrqyct/0RycCIDnx6oqIr79Rp20XbW8js2I87N8Q6/WCgObeh
v6U0vr8lF/vvisGvdzhGtS9vIwM1shw+xwr7jld+Zuu+KPssKdhus8TXqjQmKTPm
872wlkF2RwgT10Yrv+Q2UzZNAzHOv0T9AKWnss43WOb1YMS8UDguJHnYwH56hzJL
0OSIqcH0J11FrmK6VJCcHbtMg2C2Jpef4wLR9U3oUiT3l44m+0Q2emNvUveUcgNx
AnBCjq8ZqZzQrMLEKoEwBak0bS0bAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4MjA
QAxKjYJsXRjGWDVf+FKfOUowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVCOUYzM0E2MzZERTExRUM5OTUyMUU2OUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzl4wDQYJKoZIhvcNAQELBQAD
ggEBAB4EVYUHPN6LfCanq9Hsov2J5wOoN7DFEhUTPXTzFBQUrThV7bsJ+B7zgWbN
k+CIhytOa7TW4kpkE8LybVGB3vqia0uqxuWzC6TGOH5pbLB0DkGYv3RVHoahzICH
0FsvMaglCDgYqpjxo0EiPR3EujfR3fkPgLaw3kKycJT1JuS23d5XDK3zydrtAh75
O27gb3JYMHUjlNqU9ulr6bohindF0An2MUJ4ssJ2ZhDQYb/DOPau6cIc+OtOLn0D
e52V4ZVEF/JBPR0s6z9w3BBXHzQHKhMfomCUVYgghYn/IYQEHK+DP8BOV+dj9jwS
7nfkiKjK6bJ/YIA8sPhFD5KXVFQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org