Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7296C636DD11EC850A9367D8A014CE.roa
File: 8D7296C636DD11EC850A9367D8A014CE.roa (raw, json)
Hash identifier: baDRp21HSmnLM0GhaFfEzhcyrjzIp2xTHoeGYQRaf1c=
Subject key identifier: E5:F7:61:CD:D3:B1:05:2F:F9:6D:F5:7A:15:58:E0:69:AE:A2:CD:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7296C636DD11EC850A9367D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:22:53 +0000
ROA not before: Wed 27 Oct 2021 04:22:50 +0000
ROA not after: Thu 27 Oct 2022 04:22:50 +0000
asID: 58895
IP address blocks: 45.206.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:22:50 2021 GMT
Not After : Oct 27 04:22:50 2022 GMT
Subject: CN=6178d41d-9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:f7:97:72:68:87:dc:1f:be:7a:28:27:e2:
8f:a5:ad:e2:71:03:00:b9:a4:95:8f:98:90:f5:59:
47:59:17:89:8f:7c:9b:b1:04:6a:64:2f:e8:72:4c:
83:96:73:f6:ac:dc:44:6f:56:71:c2:df:0e:35:18:
8d:82:40:ba:29:b4:fd:3e:ff:cf:2d:b0:d6:ef:4c:
c2:9b:08:c3:b5:c4:35:a9:23:a6:b1:28:cf:fc:46:
a0:68:d3:37:64:35:d3:52:1b:fb:d1:66:e4:24:b5:
d4:58:c4:ef:32:2b:f9:6c:3a:06:c0:27:71:0d:2b:
bc:ea:a8:8d:39:dc:10:47:f0:10:53:6a:d4:62:a0:
2f:84:c2:ad:57:97:b5:d7:5e:9e:9c:ae:74:30:21:
dc:28:ba:b4:16:2d:be:d3:e6:1a:40:65:da:3e:67:
cc:88:0f:6d:c2:40:1f:cd:c5:7e:48:b4:30:5d:91:
29:26:34:6a:38:81:42:5a:f1:b9:29:88:b6:44:05:
27:19:e7:e0:39:63:d6:2a:8b:7b:15:1b:59:44:19:
91:87:e1:dd:ab:8f:9a:13:d4:51:39:a0:5a:61:32:
0c:e6:ae:88:96:bc:68:d3:5e:c3:26:ca:57:f3:70:
eb:2e:a6:4e:24:a2:72:d9:1d:74:97:37:53:d8:19:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:61:CD:D3:B1:05:2F:F9:6D:F5:7A:15:58:E0:69:AE:A2:CD:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7296C636DD11EC850A9367D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.170.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:cf:45:84:60:11:08:84:92:3b:a6:e2:f9:a4:b5:ce:b0:
e3:b2:c4:ab:05:74:c1:46:f2:19:d1:a4:d8:b5:8d:7d:2c:74:
89:9c:e0:0b:f3:e1:88:ee:03:44:b3:8f:53:6d:9e:57:73:9b:
4f:25:90:ac:1e:ce:d5:f8:91:2f:0b:7e:9d:e8:a0:dc:f4:0c:
78:40:35:1f:86:f4:e2:13:30:f1:52:f7:93:20:2a:d3:70:a5:
cb:cd:67:ad:64:12:fb:f6:65:9b:67:fe:58:8a:a0:32:c8:41:
0c:1f:d2:87:f9:f2:ef:8e:a4:34:43:fe:89:61:80:18:3c:a3:
2d:0d:e4:1b:67:64:0e:cd:52:a0:27:b5:16:18:23:21:dd:07:
35:cb:67:16:38:ff:23:64:e1:51:ad:0f:66:53:dd:b3:e0:51:
99:5b:40:5c:dd:e4:65:ce:94:0a:87:53:01:30:2c:41:1e:72:
62:09:b5:32:0a:9e:1b:30:9c:ec:1b:d6:5f:44:ba:c1:b6:7b:
a4:bd:8a:b0:75:03:ec:f4:ef:3b:c7:ef:17:e4:a1:92:12:94:
ae:6b:ca:06:79:b0:1a:5d:59:73:17:9e:e6:72:25:a9:78:af:
85:df:79:23:55:ac:4c:79:4e:9c:46:16:cd:5b:8a:f1:95:49:
5a:e9:5f:18
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDIyNTBaFw0yMjEwMjcwNDIyNTBaMBgxFjAU
BgNVBAMMDTYxNzhkNDFkLTk4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdh/eXcmiH3B++eign4o+lreJxAwC5pJWPmJD1WUdZF4mPfJuxBGpkL+hy
TIOWc/as3ERvVnHC3w41GI2CQLoptP0+/88tsNbvTMKbCMO1xDWpI6axKM/8RqBo
0zdkNdNSG/vRZuQktdRYxO8yK/lsOgbAJ3ENK7zqqI053BBH8BBTatRioC+Ewq1X
l7XXXp6crnQwIdwourQWLb7T5hpAZdo+Z8yID23CQB/NxX5ItDBdkSkmNGo4gUJa
8bkpiLZEBScZ5+A5Y9Yqi3sVG1lEGZGH4d2rj5oT1FE5oFphMgzmroiWvGjTXsMm
ylfzcOsupk4konLZHXSXN1PYGaKjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5fdh
zdOxBS/5bfV6FVjgaa6izV0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhENzI5NkM2MzZERDExRUM4NTBBOTM2N0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzqowDQYJKoZIhvcNAQELBQAD
ggEBAITXz0WEYBEIhJI7puL5pLXOsOOyxKsFdMFG8hnRpNi1jX0sdImc4Avz4Yju
A0Szj1Ntnldzm08lkKweztX4kS8Lfp3ooNz0DHhANR+G9OITMPFS95MgKtNwpcvN
Z61kEvv2ZZtn/liKoDLIQQwf0of58u+OpDRD/olhgBg8oy0N5BtnZA7NUqAntRYY
IyHdBzXLZxY4/yNk4VGtD2ZT3bPgUZlbQFzd5GXOlAqHUwEwLEEecmIJtTIKnhsw
nOwb1l9EusG2e6S9irB1A+z07zvH7xfkoZISlK5rygZ5sBpdWXMXnuZyJal4r4Xf
eSNVrEx5TpxGFs1bivGVSVrpXxg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org