Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE7CA8036EA11ECBFDA397DD8A014CE.roa
File: AEE7CA8036EA11ECBFDA397DD8A014CE.roa (raw, json)
Hash identifier: A2aiFQ+1xFwTvi9HgoKrzgdEjJeMJXP26mukX6a8Xts=
Subject key identifier: 37:50:0E:E0:B6:03:4F:9F:D8:B9:06:B4:38:B9:B3:D8:71:59:79:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE7CA8036EA11ECBFDA397DD8A014CE.roa
Signing time: Wed 27 Oct 2021 05:56:53 +0000
ROA not before: Wed 27 Oct 2021 05:56:49 +0000
ROA not after: Thu 27 Oct 2022 05:56:49 +0000
asID: 58895
IP address blocks: 45.206.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 05:56:49 2021 GMT
Not After : Oct 27 05:56:49 2022 GMT
Subject: CN=6178ea25-bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:d5:db:95:ea:0e:47:9f:51:04:b0:26:26:
8d:f6:d9:da:b3:e0:0d:d2:90:08:47:b8:00:09:4f:
da:7c:a8:79:c1:fe:d1:ee:f8:e8:cf:1c:31:2b:1f:
87:64:72:e0:43:da:c3:33:59:d5:6e:3d:80:eb:e0:
3c:b0:4f:5f:84:82:4c:8c:b9:e7:54:35:b8:5e:70:
ee:b2:87:05:77:64:41:70:38:6f:83:8e:73:b5:c4:
11:a4:71:53:8f:82:cc:13:c6:54:02:08:13:10:9b:
e9:a1:b8:b8:b3:c1:cd:f9:cb:19:2e:db:85:3a:6d:
d1:b1:43:0b:5f:5b:c3:43:94:93:75:83:91:7f:0b:
e4:e3:53:7a:6f:43:9c:48:6d:ca:fd:8a:31:8a:51:
99:4d:26:70:f9:85:00:d9:aa:ee:75:d8:f6:2e:c2:
2d:cd:eb:75:22:ab:0f:95:3f:5a:61:1d:66:8a:28:
d2:55:99:b2:3b:8b:0c:47:31:08:78:b7:1f:2b:78:
5a:24:1a:31:de:16:de:20:d4:87:a9:f8:97:25:c2:
85:a8:1d:4e:ea:9a:8b:7f:b1:7b:56:95:2c:45:b1:
7a:d2:aa:7e:c9:b0:b6:d8:27:6e:bf:81:33:09:52:
74:d7:75:34:b6:1d:37:4f:c9:ab:20:cc:36:3f:74:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:0E:E0:B6:03:4F:9F:D8:B9:06:B4:38:B9:B3:D8:71:59:79:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE7CA8036EA11ECBFDA397DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:83:c2:be:1c:2b:f7:f1:cf:79:7a:61:7a:14:6a:7c:87:44:
65:ad:bb:9d:1b:bb:08:8c:f9:ed:d6:3c:4f:2e:cf:c5:b0:11:
05:67:af:91:33:45:a7:c8:f6:28:61:ac:11:bf:8f:72:e6:d6:
22:72:02:f3:bc:2e:4c:2c:76:62:6c:7a:c3:fc:0d:67:7d:79:
49:cc:6a:78:ed:ca:6a:e9:c2:0b:c7:6e:0f:dd:71:44:de:8a:
75:78:3c:c1:e8:dd:77:9f:1b:d1:cc:83:ac:78:e6:28:95:28:
53:22:6d:2d:c5:56:f4:b8:ce:a2:c1:46:83:88:1c:d1:7c:af:
66:7c:c9:61:e8:76:54:44:da:cb:55:af:14:e2:ee:3f:09:8f:
09:81:59:26:07:6b:e9:48:40:57:be:04:30:83:95:a8:8a:7d:
3b:75:de:0b:8d:d1:da:61:4a:fd:84:1f:2f:63:44:07:b7:d1:
52:a4:aa:76:ae:26:4e:8a:b2:9c:ce:ac:92:de:5d:c8:e0:88:
fe:3d:16:d4:70:72:63:47:eb:86:64:6b:a3:34:44:77:7f:f6:
bc:0a:77:70:3d:36:08:32:f0:ce:f4:49:ae:23:b0:a4:16:d8:
2a:f4:af:a6:62:7b:73:ae:9a:25:4e:f0:0a:9f:8e:16:68:e4:
1d:b5:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org