Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3809A3E2E6C11ECB9DFA219D8A014CE.roa
File: C3809A3E2E6C11ECB9DFA219D8A014CE.roa (raw, json)
Hash identifier: dngSCyUixFNINV99r8EBhnvAnV13xChAykJGLS7DcuQ=
Subject key identifier: A0:C1:E3:10:72:89:9D:D1:E2:72:E7:FF:4B:69:59:36:FC:42:6A:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3809A3E2E6C11ECB9DFA219D8A014CE.roa
Signing time: Sat 16 Oct 2021 10:35:21 +0000
ROA not before: Sat 16 Oct 2021 10:35:18 +0000
ROA not after: Fri 16 Dec 2022 10:35:18 +0000
asID: 141711
IP address blocks: 45.206.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2604 (0xa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 10:35:18 2021 GMT
Not After : Dec 16 10:35:18 2022 GMT
Subject: CN=616aaae9-dc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:ae:3f:c8:83:f9:53:26:81:6d:d2:c4:db:
a6:54:62:e3:aa:65:8b:dd:64:f1:aa:dd:5a:2b:3e:
45:54:b6:d3:e1:58:b5:72:c8:24:7e:39:46:4c:37:
ef:48:79:fb:de:fa:a4:ac:9b:fc:b6:6f:27:41:71:
e9:76:30:fd:0c:4f:72:3b:e0:12:3c:fd:53:cd:a1:
d1:3f:d4:34:3a:8e:78:51:4a:b3:8a:38:ba:54:d8:
a7:8b:92:96:47:8a:83:df:d7:4b:bd:0b:69:2e:dc:
74:44:5b:9e:99:e1:5a:94:00:9d:42:d3:f8:6b:4c:
db:36:07:43:f3:09:ad:d4:8b:e4:0a:c5:3c:48:24:
35:c5:0f:b7:50:c0:8c:8c:4a:5e:94:e1:cc:d9:3f:
46:6e:0c:1d:be:d4:79:95:09:ea:e1:6f:5d:2d:00:
92:51:d9:78:55:52:c7:b1:69:58:81:0c:10:79:df:
6b:af:43:5f:5c:0e:33:5a:5b:91:f4:56:25:36:62:
de:87:9d:38:cb:88:db:a7:53:1c:b9:77:8e:c8:2d:
ab:8c:6a:93:b7:4c:b4:74:75:dd:64:cf:cd:a3:fa:
9e:5b:0c:fc:15:b4:57:4d:a4:e0:84:5d:82:ec:10:
12:89:28:71:56:00:d8:e1:48:f9:55:6a:2f:59:4b:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:E3:10:72:89:9D:D1:E2:72:E7:FF:4B:69:59:36:FC:42:6A:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3809A3E2E6C11ECB9DFA219D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:69:c5:a3:8d:2d:53:ed:5c:25:03:f5:2a:cd:9a:ee:c3:2a:
b5:03:29:5c:e9:8b:c1:7e:1d:04:16:01:dd:33:d5:d0:68:c8:
20:c2:0b:76:d5:b9:13:d0:7f:2c:12:5a:69:2e:15:70:0d:0d:
c6:cf:c3:dc:94:41:ff:6a:7f:6b:b6:dd:40:ae:8e:08:98:e2:
95:cf:30:8c:3b:7d:fe:0a:24:04:ec:d3:d1:96:20:f7:43:7e:
62:53:c6:9a:4a:73:6e:97:73:c5:2a:ee:53:66:55:08:bb:9f:
5f:f7:7e:c8:12:40:78:86:a4:1a:23:f2:f1:32:ec:15:79:5b:
72:5a:08:21:aa:c9:a0:76:70:5e:02:b1:b8:8e:68:b8:ab:11:
4a:1d:47:56:43:bf:ff:3c:21:30:8a:23:52:ea:69:b7:6c:93:
8d:0d:83:f7:8a:6e:8c:af:36:f0:40:90:3b:ee:1d:52:9d:bd:
e9:26:c1:17:d5:65:05:d2:6f:50:5d:b3:bb:c3:7a:aa:6e:a9:
51:34:06:49:0e:b6:51:4d:2a:ca:8f:80:ac:f9:9b:8f:5f:7c:
0b:f2:26:7a:cd:c5:a2:b9:17:06:ce:0f:74:d4:63:12:24:de:
cb:d0:15:d5:42:0e:d3:cc:1c:b1:ce:93:13:b9:1c:40:f6:3b:
c7:ef:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org