Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C18AF562E6C11EC97E21B19D8A014CE.roa
File: 7C18AF562E6C11EC97E21B19D8A014CE.roa (raw, json)
Hash identifier: 4PVyU0EjNxpXz7EQHjzlyPleP+N/6cweFf26VMsrL4g=
Subject key identifier: EE:66:24:4A:F1:CA:9B:29:67:3E:A7:11:74:C7:E8:33:E4:D7:AE:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C18AF562E6C11EC97E21B19D8A014CE.roa
Signing time: Sat 16 Oct 2021 10:33:22 +0000
ROA not before: Sat 16 Oct 2021 10:33:18 +0000
ROA not after: Fri 16 Dec 2022 10:33:18 +0000
asID: 141711
IP address blocks: 45.206.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 10:33:18 2021 GMT
Not After : Dec 16 10:33:18 2022 GMT
Subject: CN=616aaa71-67bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:a8:6b:c3:84:71:85:c1:d8:d8:c6:9a:ac:
b5:26:29:2f:47:91:32:35:b4:eb:1a:ba:7d:f6:de:
ff:94:9b:3d:9d:a2:ae:25:57:cc:04:20:43:9a:88:
40:e2:c3:a2:e4:f4:20:f4:d0:ee:f8:e7:3a:5e:ab:
97:df:cf:13:09:06:0c:a9:d9:f7:45:5f:8c:ae:c0:
e1:7a:45:91:a7:87:3f:bf:85:d5:48:70:c5:be:5d:
73:d4:7f:1e:3e:04:40:5d:6d:4e:cb:c9:c0:88:ef:
20:6c:9c:7c:e2:78:fa:0a:1b:0e:3e:8b:6b:93:4d:
1b:e8:f5:17:b4:c9:d7:8b:f5:e8:82:8f:25:8e:66:
7f:0c:2c:d9:04:d3:55:00:8e:be:26:da:6c:0a:e6:
d8:7b:65:e1:7b:03:8c:3f:5c:b4:ec:15:04:6a:4b:
7c:86:9d:09:ce:fe:46:7e:dd:fe:77:10:0b:8b:37:
61:cb:38:36:5e:8a:03:e4:28:8d:87:b1:18:d8:8f:
c5:b6:e2:a8:4b:ca:7a:b7:cf:90:62:8c:68:e3:60:
73:ff:df:61:09:c8:8b:e4:13:39:16:11:06:1a:66:
c0:71:c6:a0:7d:b7:fa:da:d2:f6:77:88:2c:88:87:
3d:b8:6e:a8:d9:6b:44:44:0a:af:04:dd:82:ed:e1:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:24:4A:F1:CA:9B:29:67:3E:A7:11:74:C7:E8:33:E4:D7:AE:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C18AF562E6C11EC97E21B19D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e1:10:75:7f:26:c1:c3:e5:23:7a:66:4e:76:50:c8:15:bc:
e0:c7:d4:26:15:b9:29:16:b1:4f:08:71:d2:80:e9:01:b8:4f:
d7:c4:77:03:0a:f0:0a:8d:9b:2e:bd:28:61:8a:2b:54:86:24:
9b:13:58:40:25:56:89:fa:4b:81:2c:4e:c2:c7:8f:a9:b0:e7:
8c:46:30:23:11:7d:0b:e8:c2:f9:d4:e9:c2:e4:d7:bd:2a:ae:
f6:89:fc:b6:19:ab:4a:98:31:51:2e:e2:27:50:9a:e2:1b:be:
4b:77:3c:10:87:13:d7:85:53:fb:a8:49:92:48:e0:1e:f1:6c:
bc:21:5f:7c:f8:2d:8e:3c:85:27:c1:35:3d:87:43:0b:ec:0e:
63:a1:eb:25:d0:5b:4d:85:fa:51:79:b9:49:5a:49:e4:75:7f:
c4:3c:5f:3b:a1:0f:7e:4d:81:7f:43:62:41:6d:1c:3a:da:fa:
7d:4b:5b:12:c2:eb:89:31:78:45:b5:b2:39:62:99:97:28:2d:
7f:96:6b:7f:51:6d:64:6d:75:4e:d6:cb:0d:17:3d:29:45:12:
c4:e5:6d:7e:9a:5b:46:41:b7:32:3e:11:d8:04:9a:76:4f:e8:
9f:3b:37:05:b7:e8:9a:f8:ef:5b:cc:86:84:65:cc:08:f5:ca:
ed:ae:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org