Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3BCBA7836CD11ECAC3C9D4CD8A014CE.roa
File: C3BCBA7836CD11ECAC3C9D4CD8A014CE.roa (raw, json)
Hash identifier: pRsMGwXyHe+RhoTVI6GP3h4C4UN3bEC73iBdP/gpnSs=
Subject key identifier: F5:FC:5E:7B:15:63:8A:86:31:52:FC:AC:6A:E5:A4:D7:28:76:F3:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3BCBA7836CD11ECAC3C9D4CD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:29:52 +0000
ROA not before: Wed 27 Oct 2021 02:29:49 +0000
ROA not after: Thu 27 Oct 2022 02:29:49 +0000
asID: 58895
IP address blocks: 45.206.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:29:49 2021 GMT
Not After : Oct 27 02:29:49 2022 GMT
Subject: CN=6178b9a0-ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:07:72:55:bf:36:4a:ae:18:19:32:fc:a8:
71:70:37:78:ee:20:22:7f:d0:df:53:bd:58:aa:f6:
b0:15:1c:4d:03:18:17:ed:23:8e:ca:e9:c6:a9:7c:
cf:09:96:05:be:33:83:55:61:2c:e0:0c:d1:a1:01:
e5:98:92:67:de:b2:3e:c6:cf:9d:ed:c3:c5:14:c5:
12:83:f9:70:38:11:3e:75:33:27:43:44:61:84:f6:
16:48:c4:2e:6d:b9:ac:81:2c:2a:7d:c8:2e:08:f2:
f4:62:d9:84:9b:c8:c9:c4:53:14:2a:e9:ff:3f:7a:
e5:79:ea:89:54:46:ef:87:02:a3:49:b0:32:50:ff:
db:0c:b0:fe:03:49:db:02:68:df:ec:c4:55:9a:1a:
ef:e0:1c:a2:05:2c:99:45:ae:e9:f7:6c:98:53:be:
14:3d:ce:1f:48:2c:3a:c8:9d:bc:e4:b7:39:a7:22:
7f:84:67:dd:47:4e:26:56:89:bd:a9:2d:67:b6:9a:
88:37:b5:52:e8:b8:b6:b0:4a:9d:cf:6b:58:46:b4:
2b:21:2e:f6:a4:c9:1e:5c:8f:20:06:ad:e6:f1:fb:
c5:62:2b:06:1d:78:d5:c1:1a:dc:bb:d1:c5:83:4e:
35:eb:53:1e:d6:d1:85:80:96:e0:e4:29:d7:0b:2d:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:5E:7B:15:63:8A:86:31:52:FC:AC:6A:E5:A4:D7:28:76:F3:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3BCBA7836CD11ECAC3C9D4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1d:69:26:f9:55:3d:3d:36:4d:e2:0d:d9:54:17:ce:1e:6a:
70:5d:2a:9d:69:3a:14:88:80:eb:5e:a7:a8:f7:cc:7d:97:6a:
8c:4c:77:dc:7e:65:63:6b:ea:c5:40:e7:44:c8:c1:8c:3c:0a:
12:77:09:61:41:fe:95:7d:0e:38:b3:26:17:28:2a:2e:82:63:
61:c8:a3:1e:34:c4:f9:46:28:8a:75:72:30:bf:8a:b8:2e:06:
3f:bd:a6:6f:27:99:8a:3c:3c:36:e8:18:a1:21:0d:db:c4:5f:
31:d2:c0:6c:81:eb:08:ea:c9:d4:d7:14:72:88:ea:e6:55:12:
45:f6:1d:77:f4:d8:d7:1f:c4:5b:1f:9f:44:74:a3:c2:aa:d9:
7c:16:da:1e:72:ad:53:92:74:9c:9a:b9:4b:73:c0:e3:d1:7b:
39:bd:74:f2:48:84:3a:07:4f:fb:7c:8f:d3:b0:7a:d1:83:96:
23:82:bc:79:f9:ac:3c:ac:d0:01:f2:58:ab:ed:6e:1e:72:05:
6f:20:92:fe:25:f5:2e:77:1d:1f:72:0e:34:74:68:1c:50:c1:
23:e6:77:f8:0a:11:19:6b:6b:c7:22:9e:da:07:e9:de:35:fd:
e4:de:27:d2:72:d2:4f:74:cb:bf:ba:10:79:21:ac:83:f1:8e:
e6:34:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org