Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7F34C036EB11EC967E5C00D8A014CE.roa
File: 8A7F34C036EB11EC967E5C00D8A014CE.roa (raw, json)
Hash identifier: tmkART1fIyhyxjq9HG0y5ykDvQfnusKu9d9L/ktNyZI=
Subject key identifier: C7:2E:91:0E:B2:DD:EA:80:C4:0E:C4:C1:DE:1A:D6:AC:15:5E:7A:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7F34C036EB11EC967E5C00D8A014CE.roa
Signing time: Wed 27 Oct 2021 06:03:01 +0000
ROA not before: Wed 27 Oct 2021 06:02:57 +0000
ROA not after: Thu 27 Oct 2022 06:02:57 +0000
asID: 58895
IP address blocks: 45.206.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 06:02:57 2021 GMT
Not After : Oct 27 06:02:57 2022 GMT
Subject: CN=6178eb95-652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:e3:b0:01:b3:85:7b:de:b6:49:5e:c1:4b:
c1:b3:5b:1f:72:1c:8c:f1:ca:cc:bf:a0:db:99:14:
75:d4:98:05:cd:ce:cd:2f:a3:d4:e9:f2:f0:bd:f9:
f4:a8:70:04:cc:44:60:ec:65:89:21:58:52:c7:bd:
d2:43:80:da:ad:d2:0a:d0:73:b8:48:e6:9a:b0:a8:
90:e4:5f:d9:13:0e:60:26:40:31:86:5b:df:76:81:
83:2d:cd:a2:7c:1a:0b:79:3b:32:5f:36:f1:d4:14:
7a:1b:74:41:34:98:df:9a:d5:d7:42:67:87:d8:6d:
f8:7a:ad:1d:eb:11:b1:be:c6:41:3c:b7:03:a6:16:
26:89:ae:a4:74:46:68:d0:14:1c:9c:e7:12:b3:2a:
00:3e:c6:16:77:17:01:82:68:d9:60:b1:fb:ce:14:
3d:25:66:eb:7f:1b:47:d4:a7:e2:cb:fd:59:17:67:
61:ef:ea:f2:dc:d3:4c:40:44:34:fc:da:36:4a:fe:
12:3b:fa:2a:3a:f1:f0:b0:12:48:5a:0b:ab:e7:c3:
16:5c:27:5a:e5:fd:3e:e8:b3:69:b5:0a:5d:a4:4e:
9b:da:a6:79:86:c3:93:e2:a3:d8:0d:c4:9f:7e:89:
dd:e4:8e:32:cd:13:78:08:99:4c:cf:ba:44:29:70:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:91:0E:B2:DD:EA:80:C4:0E:C4:C1:DE:1A:D6:AC:15:5E:7A:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7F34C036EB11EC967E5C00D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:7b:4f:37:de:40:93:ef:50:1d:5f:4d:46:68:2f:34:67:
78:45:59:fb:b3:6d:40:4e:44:f4:7b:03:25:94:0b:33:cb:76:
c3:6c:66:39:53:10:af:ea:de:f9:5f:8d:0e:24:99:5b:35:0d:
08:ff:a5:af:18:f8:8c:2f:4e:a2:ee:1c:6e:8b:ac:c4:9d:7f:
bc:01:26:dd:46:ff:8c:b8:90:77:91:1c:68:a7:95:36:2d:db:
84:a2:8d:91:19:96:e2:3b:3f:4a:7d:a1:ce:56:2e:d0:80:dd:
86:d4:2d:49:98:42:3e:6c:49:a7:f2:d9:c5:ee:99:eb:70:2f:
dd:a0:69:6a:6c:9e:64:ed:25:55:df:03:7b:c6:d3:64:0c:98:
25:fc:ea:e4:2b:fb:c9:10:4f:10:99:67:3d:fd:52:17:67:ef:
29:c5:68:0d:7d:33:c3:34:a9:54:90:a8:bc:49:eb:33:4e:e0:
f3:7e:36:f4:de:e6:a7:f9:17:a0:3f:c5:f3:f8:b5:70:3c:da:
61:53:48:16:bd:b5:8d:a9:08:18:23:43:9b:9b:bb:39:ce:3d:
b0:4c:78:d8:ca:47:c4:fd:d1:6b:06:1a:7d:f8:42:a5:03:50:
9d:b5:36:b4:70:bb:4b:b1:76:73:65:cd:ff:7e:17:54:52:41:
f5:9c:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org