Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B4486436E111EC9D09226FD8A014CE.roa
File: A2B4486436E111EC9D09226FD8A014CE.roa (raw, json)
Hash identifier: 5WYQtKLJvU2gsrgIp8O2akoF0yRdAzsIVRc2EWCj+7c=
Subject key identifier: 9F:C9:CD:23:76:83:42:E7:80:1E:CE:6A:86:20:8E:8B:07:2E:1A:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B4486436E111EC9D09226FD8A014CE.roa
Signing time: Wed 27 Oct 2021 04:52:07 +0000
ROA not before: Wed 27 Oct 2021 04:52:03 +0000
ROA not after: Thu 27 Oct 2022 04:52:03 +0000
asID: 58895
IP address blocks: 45.206.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993 (0xbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:52:03 2021 GMT
Not After : Oct 27 04:52:03 2022 GMT
Subject: CN=6178daf7-0ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:ea:18:35:63:d8:55:ed:62:b9:1e:8d:72:
e7:0d:03:fe:07:d2:4a:9e:97:c3:bc:13:6c:87:5a:
7e:a3:01:f5:bd:b8:41:f0:40:02:e2:46:59:b0:8c:
41:a3:d2:4e:24:a9:2a:a2:af:cc:07:32:4d:e0:0d:
7c:7e:5a:51:67:e8:3b:19:6f:5f:13:25:f5:bb:42:
95:56:6e:7d:5e:81:55:44:74:f6:84:3b:18:4a:0e:
74:ef:ea:59:a0:87:a5:e4:33:ac:4f:58:5d:7c:49:
4e:29:eb:f1:62:8d:05:d9:a4:c2:11:9b:b5:3c:b1:
9c:ac:b1:25:3f:5e:f2:e9:1b:8f:39:32:1e:67:6a:
98:77:e0:af:00:2f:2c:97:0f:ff:c0:c5:98:0c:1d:
41:0d:53:d0:4b:7a:94:6a:c5:05:8a:12:e6:23:71:
ff:7a:3c:57:99:63:60:1d:c8:5b:2f:b2:30:8e:33:
d9:3d:f8:bd:6f:00:c8:2e:e1:9a:5b:1d:ad:07:4a:
53:b9:b1:6a:c4:82:e1:69:33:94:b5:dc:e3:44:f3:
09:d7:4e:f4:a8:66:c9:3e:08:eb:bb:fb:6d:e6:91:
84:d7:ce:d3:27:11:a3:68:cf:89:b1:9a:9e:a7:f4:
06:63:49:42:1a:aa:11:c1:4d:d5:d6:7e:37:8c:e2:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:CD:23:76:83:42:E7:80:1E:CE:6A:86:20:8E:8B:07:2E:1A:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B4486436E111EC9D09226FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.133.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a5:7a:ca:43:cc:c4:5a:9b:10:20:7b:7d:3a:a3:7a:ea:3b:
0e:8b:bf:ad:20:fe:f8:1b:ec:f5:34:b0:e0:98:f5:b8:d9:d7:
6b:fb:de:0c:91:5f:d5:7f:bc:a7:31:2d:5d:89:63:b2:00:ec:
9b:e9:2d:79:42:8c:89:06:f0:ee:0c:ac:91:ce:4c:a7:f4:03:
f4:57:49:55:7e:a0:aa:55:a5:13:26:2d:dc:46:4b:b6:4a:0e:
43:e5:2b:5e:6d:d5:db:b7:e7:19:3d:95:e0:db:57:d9:7b:b1:
8a:9c:ae:c9:27:1e:c4:d1:b8:d9:c9:8e:80:6d:75:5d:67:fb:
9f:1e:39:74:3d:1c:3a:5f:ac:60:15:32:6c:a2:93:12:b7:4a:
16:e3:29:69:62:c4:d2:33:cc:c1:71:17:58:42:8c:82:8b:9a:
59:00:d0:99:1a:02:f8:cc:09:cb:ef:ce:82:0b:ad:e2:3a:62:
a1:7f:19:1c:30:7b:f0:33:b5:d6:86:27:bf:1b:1f:b1:21:3f:
3c:81:6c:b5:8d:b8:85:94:df:ae:7e:15:35:89:3b:1c:6c:0a:
91:c4:b5:7a:5b:2e:3b:e2:b7:81:ef:2f:06:c4:85:22:fb:4f:
5e:b6:17:de:bf:57:41:d5:fa:a4:ae:75:a1:cb:ec:8f:c2:5a:
84:41:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org