Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CB4F036CD11ECBC93CE4CD8A014CE.roa
File: DB8CB4F036CD11ECBC93CE4CD8A014CE.roa (raw, json)
Hash identifier: YyCiFtF11F+n4EdfoN3LRLyT+VnOBUqKOWmBNe3Umi4=
Subject key identifier: 0D:88:1C:B0:C7:23:0D:5A:30:0B:5D:98:07:11:D7:3F:90:8E:1A:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CB4F036CD11ECBC93CE4CD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:30:32 +0000
ROA not before: Wed 27 Oct 2021 02:30:29 +0000
ROA not after: Thu 27 Oct 2022 02:30:29 +0000
asID: 58895
IP address blocks: 45.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:30:29 2021 GMT
Not After : Oct 27 02:30:29 2022 GMT
Subject: CN=6178b9c8-c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:92:bd:4a:c0:5c:43:8f:b6:d9:c6:be:ff:
a0:24:65:3b:cd:a8:e5:57:fe:7e:d5:78:d2:a8:a7:
d4:30:ea:a8:ca:e7:a6:ca:c1:64:72:46:9f:f7:da:
de:0e:9e:f7:f4:73:45:ee:6d:3d:8d:b5:16:ab:9a:
11:df:53:92:a8:5b:8e:c2:83:14:31:fa:dd:a8:ab:
51:38:fa:a8:4d:94:dc:75:7b:77:17:ac:2a:f2:ce:
f2:f2:fd:a1:21:88:8b:1f:a6:7d:4a:d6:37:76:d0:
ce:44:57:44:d8:a1:73:ab:c2:c6:1b:78:3b:40:8c:
cb:99:cf:34:93:fc:c8:b1:4b:b1:6d:6a:ac:1b:2b:
39:08:0d:81:15:d7:ec:bc:28:b3:ce:b4:dc:64:f8:
81:d2:fe:b7:04:d2:0a:c4:45:0b:89:99:09:19:63:
2f:d5:92:4a:fc:2e:ae:c8:d9:5b:65:ee:0d:67:dc:
bf:ad:7a:f9:bd:60:56:b4:28:bf:c6:b3:0b:9e:ac:
f1:ff:e7:58:9b:cd:7a:ff:8f:9d:a8:3b:67:03:50:
b3:ef:58:f2:06:5b:e6:04:1a:42:c9:c2:55:7b:91:
d7:a2:0f:99:92:65:fb:f3:b3:23:07:f7:76:6f:6d:
7f:3b:99:68:f9:1f:27:91:1f:13:35:72:1e:46:db:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:1C:B0:C7:23:0D:5A:30:0B:5D:98:07:11:D7:3F:90:8E:1A:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CB4F036CD11ECBC93CE4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b5:73:22:54:bf:f1:7b:1a:ea:e0:15:bd:76:a1:81:50:de:
f2:14:25:04:57:8e:5c:e9:1b:95:18:6a:0e:8d:a8:89:b6:13:
92:c0:ef:5f:4b:a5:52:e5:ce:9a:4c:23:39:f5:b7:4a:e4:25:
b3:71:45:35:cc:f5:a6:5f:e1:ca:74:6d:0a:cf:76:f9:a1:ae:
c9:93:0c:cd:20:59:18:b1:1f:ff:0f:c2:04:a5:fd:26:69:c7:
61:4c:35:7e:01:6f:8b:b6:eb:ba:bd:db:27:62:14:76:33:b8:
c2:1a:58:3c:b4:a7:8b:a5:4e:1e:08:5f:7e:d4:92:e2:26:6b:
cd:6c:a1:aa:a9:e7:b0:cf:e8:61:e7:e7:0a:44:25:78:a0:7d:
6f:55:7c:43:e7:ed:38:03:87:5e:aa:bd:dc:db:fd:2d:ad:60:
ea:48:75:e2:6f:9d:20:de:02:07:5e:ec:43:d6:0a:10:28:0e:
f0:65:8f:d7:b9:b6:7a:6a:7e:b9:ae:4a:d4:ae:2a:0c:40:bd:
2e:20:76:53:c7:d6:88:52:a1:07:3e:f4:4b:af:e0:04:52:8f:
b9:24:ef:ca:35:61:b5:d7:c5:9b:35:34:f7:89:e2:ae:54:7d:
8a:48:59:83:1a:b9:f3:d4:a9:ef:19:52:d6:a3:10:39:7c:b9:
be:cf:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org