Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649F774836EA11EC93B1AA7CD8A014CE.roa
File: 649F774836EA11EC93B1AA7CD8A014CE.roa (raw, json)
Hash identifier: 8d/mMM494xaJ31zMLT0hH8lVZJFxsloOlsP8mowmR8g=
Subject key identifier: D5:A5:41:11:90:48:55:0C:7A:99:51:24:15:C1:B8:99:FC:FD:77:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649F774836EA11EC93B1AA7CD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:54:48 +0000
ROA not before: Wed 27 Oct 2021 05:54:45 +0000
ROA not after: Thu 27 Oct 2022 05:54:45 +0000
asID: 58895
IP address blocks: 45.206.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:54:45 2021 GMT
Not After : Oct 27 05:54:45 2022 GMT
Subject: CN=6178e9a8-aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:47:aa:4a:96:8f:6f:0d:84:b1:96:49:c8:
d6:f5:83:c3:93:d3:e8:22:68:b9:6d:6a:56:be:e9:
2a:dc:db:4a:1c:64:49:98:4b:97:a2:a0:dd:53:07:
80:3a:2e:d2:3e:27:37:a3:0a:3a:d7:73:30:e6:b8:
15:f7:3e:b2:ab:78:97:24:70:dc:a9:27:85:c3:b2:
57:a9:12:ce:e6:7d:fa:db:d8:f5:a7:dc:4d:55:57:
9e:26:47:71:72:8d:33:a6:89:4e:92:cd:e3:7e:7b:
34:0e:0f:df:b2:f4:66:72:39:3e:6a:15:69:34:85:
70:be:16:78:c3:cb:c6:4e:de:7f:ce:9b:55:66:13:
d2:c8:12:db:a3:45:91:f0:47:17:6a:57:df:34:ac:
67:f0:ac:cb:5b:41:ba:3e:97:e5:09:0d:16:d7:c8:
78:5b:af:dc:0a:bc:1d:3a:d6:4c:4a:50:54:aa:33:
10:36:6b:6a:c0:7b:5c:37:87:d3:72:fe:7b:3f:16:
8b:a2:6a:70:80:24:eb:c5:00:e7:54:58:47:60:3f:
9b:51:51:3d:e2:13:40:37:c1:c0:2e:83:8d:e1:e7:
b2:4a:14:33:31:77:e7:65:f2:55:fd:c1:0f:36:53:
8f:c4:b1:46:01:52:3e:3c:e4:ba:92:ee:16:62:30:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A5:41:11:90:48:55:0C:7A:99:51:24:15:C1:B8:99:FC:FD:77:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649F774836EA11EC93B1AA7CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.57.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:67:59:13:cc:89:53:aa:fd:c9:1f:04:88:55:20:41:0f:
73:c4:2b:cf:d8:b1:ca:d7:53:f0:1e:c8:86:2d:7b:6c:88:76:
db:a2:c2:8a:0a:52:be:0c:9b:fb:da:bf:a3:03:8c:bf:06:42:
e2:1c:55:b2:5b:fc:c0:f2:cd:b2:c8:39:68:7a:05:3e:76:f2:
28:3c:88:20:40:8b:4c:2e:4e:68:46:08:73:0e:c5:91:c6:b7:
c3:ce:3f:7d:72:89:4c:19:b7:66:f1:99:0e:33:ad:e7:5f:7a:
7c:9f:6d:81:a1:6d:b2:3d:31:10:b0:36:89:cf:5e:7d:f1:24:
ae:a5:13:24:55:a7:99:e8:0f:f3:ac:7c:bb:8d:a2:63:87:e8:
2c:cc:7b:c6:96:19:53:5f:d8:36:83:c8:86:42:96:9b:a7:cc:
73:be:de:71:41:ad:aa:e1:58:45:7b:af:b8:8a:99:1c:c3:ed:
87:54:43:28:a5:4a:c2:ea:57:00:04:47:4f:06:ae:ce:39:f6:
1a:bb:93:dc:54:1d:a0:2a:aa:7f:10:31:37:32:3a:51:18:6b:
09:36:ab:36:3b:ee:a4:54:58:ac:7d:08:6f:3a:c9:40:e8:f6:
ee:be:d5:8f:1a:1c:d5:a3:8f:24:b7:aa:14:7f:82:e5:59:3d:
d9:07:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org