Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89D48CE36EB11EC88D0D300D8A014CE.roa
File: B89D48CE36EB11EC88D0D300D8A014CE.roa (raw, json)
Hash identifier: uud1AzWOzs3sUafB8zHsLwpHRQaO4b0GpotOAYtpo3E=
Subject key identifier: 5C:E2:4F:E6:E2:48:58:02:8A:7C:EF:2E:55:A1:54:A2:93:2C:8A:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89D48CE36EB11EC88D0D300D8A014CE.roa
Signing time: Wed 27 Oct 2021 06:04:18 +0000
ROA not before: Wed 27 Oct 2021 06:04:15 +0000
ROA not after: Thu 27 Oct 2022 06:04:15 +0000
asID: 58895
IP address blocks: 45.206.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 06:04:15 2021 GMT
Not After : Oct 27 06:04:15 2022 GMT
Subject: CN=6178ebe2-9ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:66:35:0d:8c:40:d6:8a:5a:82:28:28:c0:
86:0b:85:41:37:be:df:31:75:89:9b:26:55:2f:05:
e4:44:55:0f:a8:7f:23:19:ce:a9:ef:2b:9e:dc:9a:
24:d7:ab:ac:f8:3d:54:5b:71:e8:15:19:99:81:66:
ed:1e:8d:46:f9:8a:3f:b9:d0:38:c4:1e:d8:eb:1c:
ae:54:f4:5d:88:67:0e:19:90:9d:a9:7c:0f:c4:e9:
29:a3:a3:ee:dd:73:92:13:b4:14:21:13:9d:2a:2c:
ef:7f:b7:74:f3:7b:d4:f2:f1:e2:50:5a:9d:16:53:
67:cb:e0:70:f6:7e:d0:c3:8e:c2:aa:de:1c:6d:1d:
b4:cc:b9:b1:7f:52:ce:44:dd:3e:74:ee:88:ff:3b:
88:99:6a:4c:15:78:92:0b:65:5c:c4:3d:96:18:b3:
57:c6:34:b2:e4:aa:85:27:d7:55:ff:a9:6b:b3:c3:
5b:44:78:5b:d7:57:cb:d1:9d:f5:95:0d:82:57:55:
ad:5d:ca:a3:7d:c6:8c:a1:90:5f:54:0c:a0:59:f2:
b9:8c:64:18:ef:c4:c3:4c:0c:39:0f:72:57:d2:9a:
52:3f:e1:d6:2b:9c:8e:4d:a2:b7:c8:3e:af:35:e8:
37:05:5f:31:af:57:64:42:00:50:b1:b4:85:d8:46:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:4F:E6:E2:48:58:02:8A:7C:EF:2E:55:A1:54:A2:93:2C:8A:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89D48CE36EB11EC88D0D300D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.197.0/24
Signature Algorithm: sha256WithRSAEncryption
32:95:61:95:e9:43:5c:7e:68:12:33:07:37:c9:ca:17:6b:9a:
c8:54:52:8a:3c:ff:f2:72:6e:4c:0f:df:ad:3b:a2:ce:1b:a0:
28:f9:32:ae:15:97:fd:5c:4b:3f:59:4f:c0:3b:05:4e:4d:d9:
e1:43:45:d8:86:9c:e0:7a:77:07:54:e0:b5:0e:57:94:5f:5f:
d0:1d:b7:58:e0:b8:3f:04:29:24:ff:77:15:36:e1:3f:53:a8:
9e:12:2e:88:25:ae:6e:a3:be:49:82:58:95:29:2a:3d:00:6b:
eb:0f:07:cc:45:f3:7a:7b:79:dd:4f:57:87:94:fa:f2:a7:53:
4f:fe:45:a6:40:16:d1:94:e1:35:4a:01:d8:a2:b2:1b:67:84:
95:1a:72:d0:c5:c8:cb:88:37:b1:f4:3b:09:14:83:63:00:55:
3f:a9:ab:79:fc:e1:ef:37:52:43:7b:5c:c3:21:5f:57:19:fc:
5e:7a:5b:d4:86:3f:4f:86:94:d0:67:9f:3b:92:58:8b:0b:76:
a8:6d:7c:cd:d5:b7:cb:08:3f:7d:52:cd:26:5d:ef:91:ad:17:
bf:81:95:f2:d4:23:43:d3:93:12:eb:91:eb:bc:5e:fe:41:94:
e7:c9:0e:6b:a4:f7:8d:c8:0d:f8:8d:97:88:09:4b:ad:f4:27:
96:c8:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org