Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC00F88A36D611EC9ED7395DD8A014CE.roa
File: CC00F88A36D611EC9ED7395DD8A014CE.roa (raw, json)
Hash identifier: sIbNFC8HuiHT4S2CtMqdeFjx8Q90xiNHBgSy6MCGTFc=
Subject key identifier: 20:B7:8F:60:05:F5:54:14:FF:CC:90:E4:9B:EA:3C:71:47:6D:0E:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC00F88A36D611EC9ED7395DD8A014CE.roa
Signing time: Wed 27 Oct 2021 03:34:31 +0000
ROA not before: Wed 27 Oct 2021 03:34:28 +0000
ROA not after: Thu 27 Oct 2022 03:34:28 +0000
asID: 58895
IP address blocks: 45.206.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 03:34:28 2021 GMT
Not After : Oct 27 03:34:28 2022 GMT
Subject: CN=6178c8c7-e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:04:47:2c:a5:58:7f:f0:00:b1:12:93:ec:
e9:7b:8e:03:de:72:ea:d0:f1:c3:83:a0:84:64:5b:
4f:18:da:5e:be:4b:3b:94:06:0c:1c:d0:c4:b9:79:
0f:61:d3:c0:2d:d8:5f:21:e4:d3:f4:0d:0a:9e:de:
ec:fe:f7:1c:20:d3:10:95:3f:3c:85:3d:91:45:88:
2d:82:4a:d0:ff:98:0e:47:a6:e3:64:99:d2:89:dc:
72:ed:fd:e3:44:33:0a:b2:b2:a8:c3:27:36:2d:85:
1b:92:02:25:ec:51:75:dd:40:fc:f1:78:56:2e:d9:
45:a6:e7:78:36:c1:5d:1d:06:34:94:c4:c2:b1:d7:
ea:0c:44:2d:22:6f:dd:ee:0a:75:d7:81:5e:31:79:
e0:f7:e3:8f:69:3c:46:46:6a:88:27:94:87:13:cb:
00:12:d2:0e:1e:dc:84:1e:31:f5:40:30:01:f1:46:
80:ee:28:ed:09:22:86:e3:a1:9d:20:99:99:54:81:
07:d2:45:ae:61:34:2b:00:e9:a5:c8:15:56:c1:c1:
2b:33:52:c0:9d:2a:4b:7c:97:76:ab:39:7b:88:3b:
0b:c0:3f:8e:92:a0:d6:08:26:98:ad:b4:b8:d4:c0:
c9:4c:6b:e5:a5:18:c3:5b:2c:d6:0e:2c:6b:b0:7c:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:8F:60:05:F5:54:14:FF:CC:90:E4:9B:EA:3C:71:47:6D:0E:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC00F88A36D611EC9ED7395DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4e:2f:fa:93:d5:47:ce:d3:9b:6b:9a:d9:f2:a2:9e:fd:2a:
cf:9c:6e:30:60:e1:8d:53:b5:bb:13:f9:9b:e9:70:f8:07:b6:
91:36:aa:7d:af:43:75:cd:3e:88:f8:f0:73:4a:d1:0c:c3:69:
8e:2c:f3:28:91:ab:b4:05:c4:ad:21:71:74:b7:ac:32:4d:16:
ec:aa:a9:96:92:eb:ca:39:46:6a:b0:15:09:d7:e6:27:1d:6a:
37:37:fb:ee:57:79:7f:11:76:d1:c9:97:5e:3e:c9:2a:18:65:
2c:78:b3:0a:23:35:2f:4f:c4:43:e7:d7:47:f4:c7:f5:b1:06:
75:fc:c1:5e:2b:96:e4:22:80:c2:29:76:ee:81:f2:76:a4:7f:
48:9c:33:72:3a:49:12:4f:a0:ac:55:e2:04:e9:8c:80:e2:5c:
44:20:de:b4:e0:ad:e7:32:f7:a4:a0:ed:ef:ca:0f:b0:4e:27:
44:b0:80:35:82:75:9a:13:15:44:31:1c:5b:29:f5:a3:fd:fc:
bf:32:2e:c9:44:59:1f:f0:3b:16:6c:6e:35:dc:e1:01:51:d2:
dd:1f:64:ef:d0:64:39:11:bc:8b:ef:bc:88:c2:0e:dc:f0:b8:
58:d3:47:27:5d:8a:dc:71:f4:9e:83:1d:6e:2d:19:d7:4d:04:
65:af:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org