Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C7E654BBDE11ECBDD6D8A45A40D577.roa
File: D8C7E654BBDE11ECBDD6D8A45A40D577.roa (raw, json)
Hash identifier: l9prfqNdAehetldlj2FPdzEfOZPl4Rq7x/ADXcVzCNE=
Subject key identifier: 7C:6D:4F:FA:9A:29:51:BE:81:17:6D:EB:45:C7:57:69:2C:36:8F:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1312
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C7E654BBDE11ECBDD6D8A45A40D577.roa
Signing time: Thu 14 Apr 2022 10:37:14 +0000
ROA not before: Thu 14 Apr 2022 10:37:10 +0000
ROA not after: Fri 30 Dec 2022 10:37:10 +0000
asID: 149009
IP address blocks: 45.206.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4882 (0x1312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 10:37:10 2022 GMT
Not After : Dec 30 10:37:10 2022 GMT
Subject: CN=6257f959-ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:a4:d9:14:be:3d:08:bb:2d:23:45:23:78:
94:f2:4e:83:6a:c8:6d:c2:43:d6:62:e7:1d:a6:4e:
90:68:fa:4a:16:5f:82:a1:04:fd:fe:d9:f5:f2:68:
d5:22:8a:39:2d:d2:25:0e:e6:76:0e:1d:33:74:42:
b1:1f:9a:96:6a:bf:eb:de:ff:eb:09:6d:0f:73:db:
9a:cc:82:2f:20:0e:08:48:d7:ff:89:7b:b7:a9:d7:
c9:de:20:99:ff:bb:65:7e:d0:0e:ea:43:26:6b:65:
4b:c8:6a:27:3e:5d:1a:6b:72:8d:a2:00:7f:ce:f8:
b0:2b:68:76:78:40:5f:3a:02:3b:f0:6d:00:a3:8b:
66:a0:b7:c8:84:28:88:e2:67:ec:11:1b:ec:f7:eb:
20:52:ba:64:89:9c:0b:9e:c3:7e:2f:66:22:9e:a3:
5d:03:a6:2d:f5:7e:46:32:ec:82:82:fa:2a:22:d6:
7b:55:80:28:2c:e3:ac:c0:3a:11:fe:7c:9f:9a:54:
46:a6:bb:58:66:50:77:e0:8f:e5:23:43:f9:3d:11:
11:dd:41:57:e3:35:67:1d:f5:f2:12:46:99:66:5d:
37:6c:eb:9e:01:51:28:e8:9e:70:a8:c7:97:00:6e:
49:44:1a:9a:7c:f0:a2:3f:e3:97:05:75:99:d4:ae:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:4F:FA:9A:29:51:BE:81:17:6D:EB:45:C7:57:69:2C:36:8F:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C7E654BBDE11ECBDD6D8A45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:90:48:1e:eb:0f:fa:bb:30:c1:c6:b8:bf:44:95:da:f2:00:
15:48:f2:9e:3b:e8:38:27:50:a4:4b:76:44:65:33:f1:c9:d2:
c8:f9:d7:63:ec:53:6e:ff:b5:86:50:d6:f7:bc:1a:e5:0d:76:
c6:80:26:54:9f:01:b7:e6:13:73:2d:93:bf:8a:d7:39:f9:af:
e9:60:0c:a1:de:60:a6:26:c1:15:e2:0a:a5:c1:33:53:fc:e5:
4a:8b:5d:32:46:61:98:d9:70:f8:9e:6e:b3:74:a4:cd:12:52:
92:8f:76:d2:62:ff:25:87:4d:a6:a1:45:26:d5:20:fa:e5:9a:
70:d4:28:6c:19:f9:61:a9:78:03:e8:4d:5f:ac:ee:e2:01:52:
2f:e8:4f:3d:54:af:e0:57:a1:2a:51:da:c8:d3:c1:52:5e:36:
b7:5b:0f:b4:46:0e:99:7e:ff:a6:50:06:2b:74:f0:4b:2a:88:
a9:d9:ef:64:c8:6c:2a:4a:f5:80:92:83:3b:71:ce:4a:5a:6c:
5a:e1:a4:2f:2e:54:d2:20:a9:80:d4:4c:77:13:92:77:5f:e6:
97:d7:b2:ec:0d:a0:a9:a8:2f:61:b7:25:15:3a:2c:d8:5d:24:
4f:ca:97:ff:8f:74:30:3e:ec:6c:16:11:e3:4d:52:b3:56:88:
f5:d7:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org