Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFB445C200E11ECB964E804D8A014CE.roa
File: 6FFB445C200E11ECB964E804D8A014CE.roa (raw, json)
Hash identifier: Tx+G6COQCU98+ySfyt/8cCFx/+8wWPe2wmj3rFCt6GM=
Subject key identifier: 5B:5F:CA:F9:26:E8:CB:39:65:A4:AA:7E:FA:18:B1:3E:DF:3D:5A:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFB445C200E11ECB964E804D8A014CE.roa
Signing time: Tue 28 Sep 2021 03:44:52 +0000
ROA not before: Tue 28 Sep 2021 03:44:48 +0000
ROA not after: Wed 28 Sep 2022 03:44:48 +0000
asID: 140547
IP address blocks: 45.207.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:44:48 2021 GMT
Not After : Sep 28 03:44:48 2022 GMT
Subject: CN=61528fb4-71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:45:f9:ad:ce:2a:85:85:e5:8c:06:20:e2:
96:02:b4:1d:d1:d6:3c:9d:40:66:04:8e:71:e9:89:
96:78:37:63:5b:68:92:dd:c9:88:fe:3e:c2:f4:19:
39:22:04:ea:a5:c2:a2:14:5a:e1:5f:18:ea:67:64:
a5:e7:a5:b6:3a:d1:71:21:5a:36:02:dd:09:0c:b1:
6c:02:d4:67:25:33:8f:c9:01:71:cb:32:df:b5:ab:
d4:36:12:61:82:d8:a3:9e:8a:a4:90:19:77:30:a9:
87:70:c2:c9:8b:98:ff:3e:a9:d3:e9:d1:0c:cd:c4:
48:94:28:c2:51:04:b5:e4:22:43:c4:a0:be:ce:37:
bc:a6:0e:88:7b:c1:fa:ee:b4:75:0e:02:8a:55:65:
c4:43:64:7a:ef:7c:11:00:81:74:31:1e:a2:43:1e:
26:2e:7b:56:e5:66:42:ce:7a:4d:f5:19:12:e9:ad:
a4:b2:9e:da:59:43:81:53:79:00:29:9c:d1:c7:35:
7d:a1:66:79:33:a8:d7:9f:a6:29:f6:a6:e1:b2:b8:
c3:6c:00:a4:05:8b:5a:56:f3:2e:7b:70:b1:a6:57:
03:3d:c1:da:33:a2:1b:e9:34:b0:3c:fc:6c:3b:b6:
4e:b0:05:62:d8:5f:09:e4:7e:b0:f7:a5:9a:95:46:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:CA:F9:26:E8:CB:39:65:A4:AA:7E:FA:18:B1:3E:DF:3D:5A:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFB445C200E11ECB964E804D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cc:38:ab:0b:86:22:ba:14:dc:c8:b5:22:4b:a6:8b:97:3c:
2b:c9:bb:7d:81:b7:57:5f:cd:dd:44:d2:1f:bc:69:38:4a:38:
40:43:39:58:c5:24:ca:6d:2c:5a:65:cb:d1:0d:94:f0:86:77:
ee:f4:45:44:4a:d7:e4:2c:1f:2b:da:43:63:db:98:f9:7f:3e:
aa:70:01:e5:c6:68:4d:86:6d:bb:03:8c:96:f5:ac:46:23:25:
80:9b:66:73:38:8c:e4:db:bd:e4:6d:3e:14:53:20:d3:7b:b4:
d4:32:01:ec:95:bb:73:03:64:08:5c:69:52:52:d8:86:b2:77:
89:fb:fa:7c:86:1a:2e:08:99:01:74:4d:b2:8c:4a:ae:92:12:
2a:7e:42:8c:5a:75:b9:3d:40:b2:ba:38:a9:3b:7c:9d:b1:c9:
eb:70:86:7b:17:57:00:0f:98:c3:b9:30:09:bb:da:69:53:a2:
4a:6c:3c:4e:62:73:96:2a:59:c9:f2:99:e4:95:ea:7b:f9:9d:
96:da:7a:0c:72:5d:88:da:74:b1:e7:0f:aa:f0:6e:b1:d7:e6:
57:8d:ff:08:ed:fa:32:fa:e3:1e:a8:4e:7a:8f:ee:30:a8:76:
7d:bd:6e:55:c6:a8:80:3c:ba:bd:35:4d:7a:c5:39:dd:6f:b5:
a6:b8:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org