Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A829AF5036CD11ECA5A1734CD8A014CE.roa
File: A829AF5036CD11ECA5A1734CD8A014CE.roa (raw, json)
Hash identifier: Zj5h2sUqSeSrhdeqYU/aBEVpFm1V1JHaE4popaJ+ywQ=
Subject key identifier: 58:FA:BB:4F:48:4B:44:48:81:F0:AD:F2:AD:59:E9:5D:AF:6A:53:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A829AF5036CD11ECA5A1734CD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:29:06 +0000
ROA not before: Wed 27 Oct 2021 02:29:02 +0000
ROA not after: Thu 27 Oct 2022 02:29:02 +0000
asID: 58895
IP address blocks: 45.206.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:29:02 2021 GMT
Not After : Oct 27 02:29:02 2022 GMT
Subject: CN=6178b972-2729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:08:09:33:00:2c:f3:55:15:0c:77:bc:cc:
5a:a1:0e:e6:98:7a:fc:18:7a:d6:6a:2a:27:b7:3c:
60:da:62:20:b5:58:a5:92:2d:7c:19:4a:9f:a0:a7:
05:99:8c:23:02:b5:11:21:27:43:b0:b7:d3:8e:ca:
70:5c:d7:5d:1f:eb:e1:a0:63:57:78:a2:50:7b:08:
6d:85:f2:74:2d:50:bc:c9:9e:a6:31:86:21:80:2b:
d3:62:63:da:fd:17:3d:ce:62:41:13:ea:f4:f5:a1:
f6:44:9e:3c:3a:57:2a:1f:e3:c6:25:a3:d9:f1:dd:
05:81:7a:b8:04:7d:ee:77:50:4c:85:73:bb:6a:db:
2a:77:48:c4:17:d2:22:7f:ad:24:2f:f9:b4:d5:bd:
1f:9e:22:78:51:6f:27:a8:82:df:26:3e:5e:b2:ed:
d7:32:0e:89:dd:c9:f0:87:db:05:28:c4:31:cb:4a:
6a:6d:05:8e:ed:22:74:25:07:bb:35:29:3a:44:47:
0b:b1:14:27:f0:71:ba:4d:c1:c8:d3:7f:10:f3:64:
f8:1d:48:63:eb:e3:d0:8b:5a:9d:79:54:04:a0:b5:
ee:d1:68:21:3f:4d:2f:75:a1:7e:0e:90:91:cb:d0:
b2:01:44:a0:ed:26:a6:59:b4:ee:45:9e:82:8b:be:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:BB:4F:48:4B:44:48:81:F0:AD:F2:AD:59:E9:5D:AF:6A:53:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A829AF5036CD11ECA5A1734CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.149.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b9:40:22:ef:74:c6:17:65:c8:ec:4d:fd:67:88:7a:8a:87:
db:f2:5f:7c:57:e0:d7:42:69:45:cb:5d:36:88:7c:8d:0c:7f:
70:35:97:38:e9:f5:94:71:97:e2:28:ca:64:5b:b6:22:45:d1:
0e:35:ef:bc:82:d3:f4:91:24:dc:f2:14:62:0e:e6:54:e0:9a:
c4:52:13:9f:e0:1d:96:59:5e:bf:5f:31:37:eb:6e:a5:1f:9b:
0f:ff:eb:a5:64:05:10:db:b3:c1:92:bc:e0:82:47:e1:f9:05:
7d:96:d2:84:1a:0c:ea:8a:0d:ab:c7:79:ef:77:79:81:00:f1:
a1:35:22:42:99:b3:97:58:76:2d:43:f2:e4:fd:32:97:fb:df:
41:74:e5:75:e3:5f:88:9d:9d:32:87:6b:fc:07:83:88:91:94:
29:13:a5:5c:b7:d7:9a:32:62:c5:99:0d:55:5d:ac:0a:e3:77:
8a:78:fa:01:b1:89:1d:ab:8b:9b:24:62:81:fb:62:80:63:8a:
e8:b7:83:72:54:1a:79:86:c4:ee:87:b2:1d:9c:20:1c:58:d9:
4b:5b:db:1b:e9:ef:b6:4d:70:72:df:0e:d2:a4:5a:07:d1:8b:
c5:c0:73:54:d8:08:64:a9:8b:c3:45:3a:39:08:5f:61:8e:0e:
02:2f:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org