Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DABFF7058D211EC844BB6B25A40D577.roa
File: 9DABFF7058D211EC844BB6B25A40D577.roa (raw, json)
Hash identifier: irDT2tNxXVyTePd8YYLuQNHhqAIneTdIPA1p0Ka4feg=
Subject key identifier: FC:F1:6B:41:0C:DA:4B:24:E1:E7:14:1D:F2:63:35:09:43:A4:3F:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DABFF7058D211EC844BB6B25A40D577.roa
Signing time: Thu 09 Dec 2021 09:30:15 +0000
ROA not before: Thu 09 Dec 2021 09:30:12 +0000
ROA not after: Sun 30 Oct 2022 09:30:12 +0000
asID: 141711
IP address blocks: 45.206.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4288 (0x10c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 9 09:30:12 2021 GMT
Not After : Oct 30 09:30:12 2022 GMT
Subject: CN=61b1cca7-4811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:0c:c5:96:28:10:b6:0d:51:dc:c7:9c:e6:
1f:3a:3b:e8:a6:50:4a:79:5d:7d:c0:e6:9b:98:0b:
d1:8c:a4:d4:13:a6:80:17:d3:55:1d:9c:79:75:10:
f9:64:be:88:57:f6:0b:7d:3d:7a:08:ee:ee:4c:d6:
34:65:53:7d:f1:2f:a7:84:e2:c3:1b:ce:50:5a:cd:
ca:05:d6:b7:f1:28:df:9b:89:85:21:fc:2b:67:e1:
31:77:41:46:9b:02:0c:a6:00:f6:57:57:6c:43:95:
57:5f:83:db:f3:8a:b0:d9:56:c5:13:04:0f:69:34:
3e:93:77:f1:c4:b8:cf:e8:4c:06:22:0b:5d:a8:db:
b0:be:bf:93:ba:c6:54:87:84:99:43:d9:61:26:48:
4b:54:09:d7:bb:3e:9f:5e:e1:5c:d2:7c:02:bb:34:
fe:d5:06:43:d6:68:1b:52:85:20:e4:a6:7e:5f:da:
3e:77:fa:cf:f1:d8:d7:80:44:47:b2:cc:a1:78:b3:
1a:b7:14:cf:70:9e:74:cc:9b:8d:6f:ac:34:56:d1:
df:26:29:19:cb:b2:d0:6c:eb:a6:1f:b1:d8:b1:dc:
ef:91:93:67:63:a1:3f:6f:55:f7:6e:7d:39:bc:1b:
fb:e0:bd:16:94:33:e2:ca:50:61:8c:50:e9:c8:9d:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:6B:41:0C:DA:4B:24:E1:E7:14:1D:F2:63:35:09:43:A4:3F:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DABFF7058D211EC844BB6B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:04:8f:43:f3:5d:41:c0:33:f8:8c:25:75:80:92:79:63:e4:
9a:98:91:26:86:a2:8d:4b:71:ef:ca:bf:f3:d0:d4:0e:dc:cf:
49:88:00:5c:3d:80:2c:ca:2d:46:84:31:cc:24:c1:2b:25:55:
44:a5:ae:e5:5a:61:f0:35:c9:8c:3c:da:e7:29:85:8f:4f:47:
e8:91:32:71:e6:8e:0d:bd:6f:18:ad:33:53:33:98:d8:7c:87:
f7:b7:d7:dc:eb:85:1e:dc:1c:5c:c9:32:4d:e6:72:20:0f:c7:
41:56:15:4d:22:e6:42:ef:72:c8:a9:db:2d:f4:8e:24:4f:43:
79:ca:99:15:35:e5:b8:ac:df:9f:7e:71:a7:50:8a:fe:1c:20:
30:4c:c6:e8:de:fd:8a:a1:35:f4:b6:0c:02:48:1f:c6:34:ce:
49:42:5c:73:99:86:78:a6:5e:70:87:85:d1:37:e1:31:be:8a:
5a:90:0f:72:38:22:66:ce:d2:79:6b:7a:65:fb:36:26:17:a5:
e4:53:a6:00:0c:0f:ef:b6:c9:54:34:3a:c4:cc:81:88:7f:43:
0b:87:17:1f:7f:a5:1f:a5:d9:b6:c2:5b:a5:f1:cf:de:0f:8c:
91:d2:e9:61:39:c8:91:55:3e:e8:35:dd:81:a4:85:f1:7b:07:
2b:c0:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org