Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB23415A36E911EC8D2B487BD8A014CE.roa
File: AB23415A36E911EC8D2B487BD8A014CE.roa (raw, json)
Hash identifier: QPJE0lV/C/zok4IPfae/olw/Dx/NuYE3M03nJK1ZJSs=
Subject key identifier: 08:1E:76:AC:2B:D5:54:C5:3C:48:BC:7C:C4:05:97:65:66:0F:1A:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB23415A36E911EC8D2B487BD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:49:37 +0000
ROA not before: Wed 27 Oct 2021 05:49:34 +0000
ROA not after: Thu 27 Oct 2022 05:49:34 +0000
asID: 58895
IP address blocks: 45.206.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:49:34 2021 GMT
Not After : Oct 27 05:49:34 2022 GMT
Subject: CN=6178e871-7b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:40:3b:3c:b8:aa:31:ce:d6:d2:3f:a0:00:
0f:5c:ee:4b:d9:f9:cb:69:b2:fd:bc:23:22:66:12:
68:ff:6c:26:d1:98:e4:c3:ca:90:1f:49:38:7d:b8:
41:ba:90:0b:98:57:3a:db:a1:7e:89:79:5a:8d:f2:
1f:d4:42:bf:0f:35:cd:8a:ec:c4:0c:98:7a:e8:fe:
10:5b:c7:b2:90:a5:23:0d:7f:ee:56:cf:1a:0f:47:
98:ee:20:b1:58:54:cb:3b:4b:ab:ad:d8:88:69:bc:
eb:c1:4b:d6:88:ce:99:3f:7e:d7:79:61:48:32:34:
2b:26:42:55:13:02:9a:7b:10:96:c8:10:db:9d:f0:
8f:b0:52:87:d2:85:bf:92:11:e2:e9:db:85:99:f8:
99:9e:77:79:37:cc:c0:1f:79:0e:67:d8:04:54:59:
d7:a5:3c:6b:a2:e2:51:45:f3:40:e6:88:99:28:2c:
b2:b7:30:6c:23:a0:11:9f:eb:ac:d0:db:ee:00:a4:
3f:4e:9a:c8:ed:b1:80:aa:21:bd:f7:25:a6:b1:9e:
06:1c:8b:ff:3c:a2:3b:98:f8:64:6a:ec:32:62:7d:
9a:1e:a9:8c:f3:18:12:32:dc:72:cc:61:95:12:56:
23:bc:42:de:c2:f2:54:f0:df:b6:ee:6d:fa:74:ed:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:76:AC:2B:D5:54:C5:3C:48:BC:7C:C4:05:97:65:66:0F:1A:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB23415A36E911EC8D2B487BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.221.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b6:2b:99:b3:19:38:28:7a:dd:0b:54:5c:8f:1d:5a:58:0a:
51:49:e5:68:94:85:c8:ee:76:a5:a3:c6:c7:42:11:99:7b:be:
59:ee:a8:9c:bd:24:cd:0a:59:c7:77:8b:b5:c9:f3:05:02:1f:
e1:03:bf:b2:09:ec:e7:57:bc:15:a8:08:b5:ef:0c:e7:ff:fb:
d7:74:5d:c1:44:84:cc:0e:5a:f1:18:dd:27:8c:48:c7:60:58:
ee:ef:6c:0c:dd:46:8b:a0:bb:3c:28:5e:88:d4:85:83:63:cc:
b6:3a:52:4a:6e:2e:5b:6c:b2:0e:c8:ce:57:13:2e:be:f5:0b:
e4:b9:7b:cb:e1:bd:88:6a:ce:e2:c0:96:b2:43:f0:82:a8:d3:
b7:27:ca:f3:7f:99:52:ee:0e:32:1b:b2:64:ba:f7:0e:72:c9:
aa:19:79:2b:0e:6c:41:b4:52:0e:67:23:01:ba:43:59:21:d8:
bc:bb:61:4d:de:46:30:2f:21:c3:01:36:61:56:37:4e:54:5f:
8d:d0:f8:6e:9e:1e:bb:05:19:0d:40:36:08:a6:bb:ca:98:56:
67:8d:13:5a:f3:8d:61:f4:4f:95:31:78:f0:b7:d2:eb:3b:e4:
67:78:61:57:3c:f8:f8:3e:d5:d2:cd:a0:5d:26:62:74:33:d3:
78:24:87:c6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC88wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNTQ5MzRaFw0yMjEwMjcwNTQ5MzRaMBgxFjAU
BgNVBAMMDTYxNzhlODcxLTdiMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8CUA7PLiqMc7W0j+gAA9c7kvZ+ctpsv28IyJmEmj/bCbRmOTDypAfSTh9
uEG6kAuYVzrboX6JeVqN8h/UQr8PNc2K7MQMmHro/hBbx7KQpSMNf+5WzxoPR5ju
ILFYVMs7S6ut2IhpvOvBS9aIzpk/ftd5YUgyNCsmQlUTApp7EJbIENud8I+wUofS
hb+SEeLp24WZ+Jmed3k3zMAfeQ5n2ARUWdelPGui4lFF80DmiJkoLLK3MGwjoBGf
66zQ2+4ApD9OmsjtsYCqIb33JaaxngYci/88ojuY+GRq7DJifZoeqYzzGBIy3HLM
YZUSViO8Qt7C8lTw37bubfp07eCjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCB52
rCvVVMU8SLx8xAWXZWYPGuEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0FCMjM0MTVBMzZFOTExRUM4RDJCNDg3QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzt0wDQYJKoZIhvcNAQELBQAD
ggEBAGW2K5mzGTgoet0LVFyPHVpYClFJ5WiUhcjudqWjxsdCEZl7vlnuqJy9JM0K
Wcd3i7XJ8wUCH+EDv7IJ7OdXvBWoCLXvDOf/+9d0XcFEhMwOWvEY3SeMSMdgWO7v
bAzdRouguzwoXojUhYNjzLY6UkpuLltssg7IzlcTLr71C+S5e8vhvYhqzuLAlrJD
8IKo07cnyvN/mVLuDjIbsmS69w5yyaoZeSsObEG0Ug5nIwG6Q1kh2Ly7YU3eRjAv
IcMBNmFWN05UX43Q+G6eHrsFGQ1ANgimu8qYVmeNE1rzjWH0T5UxePC30us75Gd4
YVc8+Pg+1dLNoF0mYnQz03gkh8Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org