Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E85D5C36E111ECB612E86ED8A014CE.roa
File: 89E85D5C36E111ECB612E86ED8A014CE.roa (raw, json)
Hash identifier: 4euR5UP8UsEGG1NVlPA/HaZ5xDRmNMj5GRx6SKIKYN4=
Subject key identifier: 27:18:3A:1C:A1:A5:43:B7:F5:73:4F:7C:8D:56:94:2D:AC:7B:BE:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E85D5C36E111ECB612E86ED8A014CE.roa
Signing time: Wed 27 Oct 2021 04:51:25 +0000
ROA not before: Wed 27 Oct 2021 04:51:22 +0000
ROA not after: Thu 27 Oct 2022 04:51:22 +0000
asID: 58895
IP address blocks: 45.206.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:51:22 2021 GMT
Not After : Oct 27 04:51:22 2022 GMT
Subject: CN=6178dacd-0ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:56:17:de:4e:86:cd:84:4f:71:77:7a:6d:
31:05:63:87:ee:35:00:fa:4a:fa:06:6a:6f:91:89:
ff:9a:1d:cb:ba:23:4a:be:dc:0b:03:7b:f3:80:74:
71:61:0f:11:c5:0f:bc:53:13:4e:be:88:e0:cc:ba:
2a:c5:f0:49:21:bf:88:66:3c:f6:10:bf:f5:38:7e:
28:e0:72:49:f5:74:7f:83:98:39:66:79:63:0e:53:
ca:62:88:04:73:b7:1c:a8:4d:f3:1e:55:02:cd:ca:
99:3b:3c:cd:b1:d4:11:93:00:cc:9b:64:9a:08:4a:
c5:38:43:b3:7c:68:4e:d8:10:ef:32:a7:40:28:82:
f8:5b:31:c4:44:3d:88:ef:42:ee:00:0f:f9:f0:9e:
72:93:fa:45:e4:1f:46:11:fc:8d:2e:61:b4:67:00:
b6:66:2c:c4:91:d6:f0:c3:89:e2:9d:18:5f:9c:44:
d0:ae:5d:88:89:6c:e6:68:55:f5:8b:7c:0c:24:60:
c9:8e:57:71:d7:80:6b:7f:d5:39:63:68:60:4d:26:
91:30:65:bc:05:2c:05:0c:35:22:48:34:b0:e4:a9:
c3:1b:71:7f:4f:d1:c7:ac:c6:2a:ba:92:1d:67:2c:
ea:b1:8f:96:27:ed:f9:b6:fa:00:00:67:ee:d3:ab:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:3A:1C:A1:A5:43:B7:F5:73:4F:7C:8D:56:94:2D:AC:7B:BE:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E85D5C36E111ECB612E86ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.132.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e3:4b:d9:7b:0c:b9:f3:3c:bd:ff:c5:f8:37:74:d7:2a:49:
a8:12:62:c4:7e:4c:5e:fd:b2:f2:86:25:f7:52:c7:ff:61:0a:
ba:6f:20:7e:c6:6f:4e:c9:15:ee:54:85:d6:0d:97:2e:3a:55:
5d:30:0b:d4:2c:35:e9:67:78:b3:7e:39:5a:b9:87:41:04:bd:
cc:84:38:51:6c:9a:e4:47:6c:7b:31:cf:88:d9:73:a3:b5:97:
c4:f2:32:c4:60:0b:9d:85:a5:25:35:62:a6:ce:54:71:35:39:
d9:50:ce:3b:53:b0:0a:8c:ab:6b:6d:b0:44:99:81:c5:22:cf:
37:46:c3:f9:9d:79:06:07:f6:71:d0:55:83:0b:7e:a6:fa:1b:
04:3f:27:f8:47:28:53:b1:bb:36:6f:33:d5:d5:e2:9c:e7:cc:
9b:72:8f:42:54:aa:69:0e:89:bf:b7:c4:c4:a0:e6:88:01:c5:
6e:18:50:07:93:d7:41:37:16:10:0b:2e:d1:93:df:1e:dd:d3:
fd:8a:8f:4f:be:8e:53:09:59:c2:0d:05:d6:bc:bb:05:21:20:
a5:12:f0:a9:19:6a:16:5d:8f:45:5a:ab:73:53:1c:ba:ba:d5:
55:62:16:2c:db:c5:13:5e:5b:1a:02:e0:34:48:c8:27:f1:6d:
40:c3:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org