Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73697EB836D611EC8D658D5CD8A014CE.roa
File: 73697EB836D611EC8D658D5CD8A014CE.roa (raw, json)
Hash identifier: fFBV25TS0gtn5ibxfQ9WLp9NdZ75CeQKfVvocJFJHqI=
Subject key identifier: 85:F0:9E:C4:AF:8F:D0:9E:A1:2D:8B:75:EA:66:D5:E1:81:62:E9:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73697EB836D611EC8D658D5CD8A014CE.roa
Signing time: Wed 27 Oct 2021 03:32:03 +0000
ROA not before: Wed 27 Oct 2021 03:31:59 +0000
ROA not after: Thu 27 Oct 2022 03:31:59 +0000
asID: 58895
IP address blocks: 45.206.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 03:31:59 2021 GMT
Not After : Oct 27 03:31:59 2022 GMT
Subject: CN=6178c833-ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:f9:56:c6:72:ab:cc:d5:1c:44:cb:6a:fd:
a4:15:eb:e6:19:40:47:9b:eb:e8:54:a9:68:38:78:
dd:52:b1:0d:1a:dd:e6:40:ae:56:1c:1b:a6:79:09:
78:06:2e:e9:a4:01:3f:a7:2e:de:9d:49:3f:ea:d7:
7b:a3:61:6e:a0:dc:85:2d:b3:0f:58:e2:f9:e8:dc:
b3:b2:6d:14:ec:cf:9d:5c:e7:b6:b7:ba:2f:20:63:
88:d2:32:a0:2c:51:dd:95:54:d2:17:cf:8f:40:91:
ca:04:8d:4a:a9:51:ab:c1:d4:25:d9:b1:ec:a7:61:
49:81:9b:d4:fc:e8:59:ef:18:95:c2:d2:99:68:0e:
08:3c:fc:5f:3f:a6:a3:e1:e8:80:9f:82:cd:72:d9:
69:5c:b3:dc:1b:f3:29:68:40:42:5f:f5:82:fd:89:
22:05:d8:51:1f:6a:8d:73:50:e8:51:5e:c2:4e:9c:
b8:91:9c:88:e6:17:9e:a5:3e:b6:1a:86:7b:20:c7:
bd:d7:1f:e3:2f:44:94:fb:8c:e3:2a:41:2c:a4:43:
a4:db:3f:3e:c9:26:b7:23:b2:32:90:45:24:f6:da:
c7:61:e5:f6:0d:09:ea:da:7d:4a:5a:67:4e:1d:68:
6b:ed:7a:bd:ce:29:4d:64:66:99:6f:fe:5d:cc:fd:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:9E:C4:AF:8F:D0:9E:A1:2D:8B:75:EA:66:D5:E1:81:62:E9:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73697EB836D611EC8D658D5CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.38.0/24
Signature Algorithm: sha256WithRSAEncryption
06:30:d4:03:93:16:59:46:9d:47:fa:a9:3b:8d:f1:fd:85:00:
b7:a3:9f:6b:3e:ac:9b:5f:a1:bf:17:9e:2a:1d:9d:e0:03:6c:
b1:4e:e2:65:be:99:b0:bc:61:f3:06:d7:9a:0f:ac:07:da:99:
a0:ed:96:b0:10:b5:ae:de:12:45:df:5c:2c:08:de:59:fd:a7:
e2:f4:6a:69:63:59:9b:6d:ab:77:17:ce:b6:a5:e7:1e:8f:28:
70:b5:bc:fa:8b:16:7c:98:a7:c3:28:06:fe:e9:f1:92:d5:04:
40:bc:61:42:bb:ea:bc:cb:37:dc:b0:1b:fa:48:57:f6:32:23:
ad:83:1b:04:29:4f:c1:0d:1a:6b:46:16:1f:ba:dd:b6:35:5c:
b0:e9:81:8e:b0:34:96:1c:b4:b4:55:46:32:83:a5:da:da:13:
95:8a:d0:fc:9e:65:d8:63:7b:49:e6:f1:29:92:22:4a:f5:17:
b1:79:b7:cb:4b:c7:16:82:f0:d0:b6:30:45:6d:98:9f:cb:44:
64:ec:b2:08:19:7e:3d:12:4e:b7:f0:d1:df:9c:d9:f7:0a:9f:
62:8e:e7:44:1c:fe:f1:53:37:92:88:2f:e3:8b:11:71:f8:44:
f9:da:61:52:02:c0:d5:80:8a:ea:4e:37:be:81:bf:5d:5c:12:
49:a8:c2:09
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwMzMxNTlaFw0yMjEwMjcwMzMxNTlaMBgxFjAU
BgNVBAMMDTYxNzhjODMzLWNhMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJIPlWxnKrzNUcRMtq/aQV6+YZQEeb6+hUqWg4eN1SsQ0a3eZArlYcG6Z5
CXgGLumkAT+nLt6dST/q13ujYW6g3IUtsw9Y4vno3LOybRTsz51c57a3ui8gY4jS
MqAsUd2VVNIXz49AkcoEjUqpUavB1CXZseynYUmBm9T86FnvGJXC0ploDgg8/F8/
pqPh6ICfgs1y2Wlcs9wb8yloQEJf9YL9iSIF2FEfao1zUOhRXsJOnLiRnIjmF56l
PrYahnsgx73XH+MvRJT7jOMqQSykQ6TbPz7JJrcjsjKQRST22sdh5fYNCerafUpa
Z04daGvter3OKU1kZplv/l3M/QDxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhfCe
xK+P0J6hLYt16mbV4YFi6TowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzczNjk3RUI4MzZENjExRUM4RDY1OEQ1Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtziYwDQYJKoZIhvcNAQELBQAD
ggEBAAYw1AOTFllGnUf6qTuN8f2FALejn2s+rJtfob8XniodneADbLFO4mW+mbC8
YfMG15oPrAfamaDtlrAQta7eEkXfXCwI3ln9p+L0amljWZttq3cXzral5x6PKHC1
vPqLFnyYp8MoBv7p8ZLVBEC8YUK76rzLN9ywG/pIV/YyI62DGwQpT8ENGmtGFh+6
3bY1XLDpgY6wNJYctLRVRjKDpdraE5WK0PyeZdhje0nm8SmSIkr1F7F5t8tLxxaC
8NC2MEVtmJ/LRGTssggZfj0STrfw0d+c2fcKn2KO50Qc/vFTN5KIL+OLEXH4RPna
YVICwNWAiupON76Bv11cEkmowgk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org