Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C48CA236DD11EC9050FA67D8A014CE.roa
File: B9C48CA236DD11EC9050FA67D8A014CE.roa (raw, json)
Hash identifier: j0nOA2eu8KC3POSYd9CaQp3pBr5yJIkzI+zPZGohgsw=
Subject key identifier: 41:1D:9E:C7:91:C8:0A:25:F9:C4:26:B3:FB:69:0F:34:45:29:CE:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C48CA236DD11EC9050FA67D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:24:07 +0000
ROA not before: Wed 27 Oct 2021 04:24:04 +0000
ROA not after: Thu 27 Oct 2022 04:24:04 +0000
asID: 58895
IP address blocks: 45.206.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:24:04 2021 GMT
Not After : Oct 27 04:24:04 2022 GMT
Subject: CN=6178d467-4c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:d7:31:2e:fc:d0:7d:b6:08:82:9c:91:fb:
02:02:80:5e:a9:9f:26:d6:d8:08:d6:24:80:46:b5:
d5:eb:01:d1:c1:f3:2b:06:57:17:1e:33:2b:b7:90:
15:33:56:43:3d:1e:6c:82:64:64:77:5a:0d:ef:ba:
17:0c:eb:bc:0c:a9:22:c2:a8:53:d5:99:d4:5f:83:
49:59:c7:01:b8:5c:69:0f:74:f3:81:40:9f:ab:30:
d8:2f:11:02:0e:2a:86:d6:e0:b1:c7:b6:7e:d8:ce:
c4:63:c3:08:39:e4:2f:55:0b:c9:b4:6c:a9:7d:bf:
da:a5:84:27:af:cf:bd:28:e1:f9:ba:7a:6c:d1:64:
6e:1f:d2:e1:5f:6e:45:90:23:5b:af:a1:96:99:c3:
8b:08:4e:4d:54:53:d0:a5:2f:12:3f:50:02:de:94:
6b:1d:2c:0d:b7:73:a4:39:05:49:36:ed:67:ff:61:
26:05:9a:10:96:be:73:ad:2d:6a:24:cc:80:55:f8:
0d:f9:a0:cb:c3:24:10:e3:7f:51:94:81:89:9c:17:
cd:52:c2:5c:9c:5d:67:98:fa:01:b3:21:3f:8e:f6:
5a:b7:d8:54:1c:3d:78:3b:31:64:e8:e8:21:7a:62:
59:69:2e:fe:13:5a:a5:0a:25:94:0b:46:41:0d:d3:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:9E:C7:91:C8:0A:25:F9:C4:26:B3:FB:69:0F:34:45:29:CE:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9C48CA236DD11EC9050FA67D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.172.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7b:48:e9:b4:8d:5a:1b:80:4b:e7:dc:cc:e0:92:06:de:d9:
dc:49:56:91:27:2b:d5:cf:7f:28:c8:bb:94:68:49:61:55:ff:
ac:ca:d5:73:9f:4e:55:34:af:f8:12:f3:9b:9f:7e:ae:08:1a:
b3:34:90:07:30:45:d6:14:d3:37:8b:39:09:de:d4:c0:88:94:
4d:f4:64:2a:d5:4f:80:67:99:46:63:b1:13:a0:4c:0f:d8:fd:
6b:c6:31:4c:ad:af:b8:95:b3:82:73:a5:82:14:d2:64:d3:26:
a0:ad:1d:61:4c:8d:2f:7e:92:1e:02:5c:44:30:21:25:66:4f:
d5:43:dd:22:83:94:12:d5:4c:c2:57:e4:d7:6e:d4:31:42:d1:
75:39:cb:18:a7:1c:20:4a:e1:43:d3:04:08:01:85:40:17:b6:
0f:06:80:ab:ab:54:5a:7d:d4:0a:ed:d3:6a:78:f5:07:69:c6:
3d:7e:98:55:d0:65:1a:de:35:2f:7b:c4:2e:b1:b6:65:0f:47:
72:de:f6:4d:56:8f:26:8e:76:56:22:09:a3:2a:02:7c:32:5c:
84:43:a2:e7:81:c2:cd:dd:30:62:5d:e1:94:9a:c9:ad:9c:71:
a2:fd:b9:54:d1:1e:ed:87:9c:fe:a4:ae:64:65:57:a7:71:91:
42:b2:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org