Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB231C8A36E011EC9117B96DD8A014CE.roa
File: DB231C8A36E011EC9117B96DD8A014CE.roa (raw, json)
Hash identifier: bqJfs45YkVM1ItBH2le5zJaUgUTU9hYBj83rPVWQgso=
Subject key identifier: 69:42:05:59:55:A3:15:E9:74:F8:E4:11:92:F0:5C:79:B6:A6:47:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB231C8A36E011EC9117B96DD8A014CE.roa
Signing time: Wed 27 Oct 2021 04:46:32 +0000
ROA not before: Wed 27 Oct 2021 04:46:28 +0000
ROA not after: Thu 27 Oct 2022 04:46:28 +0000
asID: 58895
IP address blocks: 45.206.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:46:28 2021 GMT
Not After : Oct 27 04:46:28 2022 GMT
Subject: CN=6178d9a8-02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:24:09:6b:34:3c:61:f5:4c:69:1e:ba:9d:
34:d3:fc:90:de:ca:b1:df:a2:e6:8d:59:2c:8c:3d:
9e:ed:4f:56:0f:8e:7c:ed:d4:64:d5:2f:2b:6e:00:
2b:67:fd:01:d6:bc:be:b2:e6:0d:7b:86:19:6d:1d:
7e:30:8a:ee:f5:0c:e4:a9:22:39:e3:1e:45:cb:32:
78:e1:28:00:d2:12:25:b6:52:71:bc:0d:6a:39:16:
e5:c7:02:0d:a6:ee:44:06:ca:d6:d6:62:90:fa:8a:
b5:51:33:6f:0b:40:e1:ce:4e:37:d6:4e:ad:16:57:
fe:ff:95:9d:d8:56:79:29:1d:1b:13:16:05:43:fc:
c5:21:bf:35:d8:b0:a1:b4:d8:fa:89:34:65:b4:17:
c1:2d:a9:df:4e:90:f3:cb:8a:1d:24:11:c9:c1:ef:
16:e0:06:c9:b9:9d:eb:92:d6:63:4d:62:95:c6:71:
60:0d:ad:b6:3c:91:dd:eb:e7:0d:32:b7:41:4c:c2:
52:be:93:2f:f0:1e:45:22:16:9f:ee:4f:6f:4a:b4:
56:ec:ac:ed:2f:65:8d:18:4e:d3:1c:07:3b:10:ed:
48:2f:8a:b3:76:6e:a3:04:f2:3e:c3:9a:db:27:a4:
01:db:d3:25:55:b2:83:6a:b4:8e:38:cf:20:7e:72:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:05:59:55:A3:15:E9:74:F8:E4:11:92:F0:5C:79:B6:A6:47:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB231C8A36E011EC9117B96DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.124.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b7:cf:68:31:04:23:e8:6e:25:4f:d7:7e:05:e6:9c:82:8b:
51:f3:1a:c7:51:5e:f3:87:93:29:ee:90:c6:e5:4c:b1:0a:48:
bc:e9:34:6a:80:31:46:23:35:76:8c:82:2f:c7:c8:8b:a4:d3:
a9:ce:6e:a3:39:16:a7:ff:3a:43:62:4c:18:48:76:dd:d1:1c:
16:7c:24:a5:a4:99:94:28:29:6e:c3:8a:69:5b:ad:9d:9c:39:
c6:52:e6:f9:49:d2:b7:ac:34:0e:c9:e6:05:60:ab:06:1a:11:
33:de:f6:80:50:5f:2d:15:39:21:31:62:3b:e5:05:82:5c:4b:
85:86:39:34:f6:dd:80:47:02:ac:2f:05:e5:18:a9:a9:93:0f:
90:1e:91:bc:40:9f:59:f4:2d:af:4e:e2:6e:76:94:50:6a:8b:
27:49:c3:73:2b:48:6d:ad:90:ab:51:f2:ca:43:d8:9d:33:0d:
89:87:b4:32:b2:26:3f:75:04:7d:de:b0:c3:b9:40:66:2e:a4:
29:64:76:d5:c7:11:ce:83:81:d9:17:75:7e:a8:02:1a:f4:ee:
0a:06:4e:34:d8:3a:6e:c7:d1:d2:b5:37:3e:30:26:15:67:49:
69:9d:f0:42:a3:af:4b:a1:6b:6f:46:22:39:e0:01:6f:32:8d:
bc:f2:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org