Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
File: DFB5ADEC36DD11ECB9094368D8A014CE.roa (raw, json)
Hash identifier: kzk7HyTXcXbzdNKpmejQxh/qvOhCF9zjuyQ3AhflDt0=
Subject key identifier: ED:6E:A2:1A:1F:57:01:B9:E3:0F:D8:AC:07:3C:E8:15:AC:25:A6:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0B2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
Signing time: Wed 27 Oct 2021 04:25:11 +0000
ROA not before: Wed 27 Oct 2021 04:25:08 +0000
ROA not after: Thu 27 Oct 2022 04:25:08 +0000
asID: 58895
IP address blocks: 45.206.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:25:08 2021 GMT
Not After : Oct 27 04:25:08 2022 GMT
Subject: CN=6178d4a7-8093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:7a:61:45:87:fa:4a:22:2c:18:c2:58:79:
a1:9b:7f:0b:3f:2e:b2:0e:23:55:e1:ac:95:fa:2a:
a7:a1:46:39:b0:e1:a3:12:73:68:74:7d:a3:ab:3f:
38:bd:d1:30:05:7c:42:16:4b:43:e4:a3:4a:0d:8a:
23:24:2b:3c:63:82:e8:88:3c:eb:0e:b5:ea:c0:8d:
f2:b3:45:4d:fa:06:b2:a6:bb:b7:e8:2c:80:d4:39:
8b:96:a5:f8:80:bf:79:b2:01:ef:ca:1e:e3:02:fa:
72:ee:75:28:8a:5a:f2:28:04:d4:99:6c:ab:15:6c:
d8:b4:ba:99:c9:57:66:43:17:c1:92:7e:f2:89:22:
63:bd:93:10:3a:c3:ee:82:ca:e0:ae:dc:cd:c7:56:
02:58:ba:fa:12:1f:ed:e0:b9:c6:c9:cc:fd:ec:54:
e9:74:2a:59:a6:05:33:48:fd:02:61:28:32:54:01:
12:83:48:c8:e7:46:2d:f1:3a:e0:b2:24:34:14:d5:
10:c2:e3:56:7c:80:2b:97:15:0f:65:89:7a:f1:3f:
39:cc:b5:3e:a1:86:1c:cd:c5:53:31:b6:7b:e5:e5:
bb:8a:ec:b7:bf:cb:43:68:94:af:90:ad:92:b7:79:
31:27:85:fd:94:3b:74:3b:56:b6:df:63:30:a4:53:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:A2:1A:1F:57:01:B9:E3:0F:D8:AC:07:3C:E8:15:AC:25:A6:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB5ADEC36DD11ECB9094368D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:00:14:d1:d3:65:81:b5:40:f5:29:2c:2e:b0:cd:62:2b:
8c:48:5f:77:b3:bb:39:26:23:02:e7:8a:51:cc:ea:85:da:79:
f5:a2:5a:4b:44:a6:7b:2d:fb:74:8a:c2:f4:ad:33:6d:59:6a:
8d:c2:23:2b:f4:c6:ba:7b:10:41:18:5b:14:22:e5:2a:b2:20:
c0:28:54:d3:0f:56:89:ae:59:4a:f2:da:4e:2d:24:9f:b9:f8:
bd:18:cb:63:23:89:b0:c9:23:57:a9:3c:c8:94:40:c9:78:cf:
4f:87:54:e2:e6:58:16:fc:8a:32:78:32:41:85:82:c3:7a:86:
4a:16:61:87:a6:14:28:d4:a5:b3:00:4d:b8:64:e1:80:25:0d:
4d:5b:9d:a2:04:4c:24:e6:7a:33:ad:3c:0a:0e:84:28:fe:7d:
71:b5:e9:9d:2c:36:47:a8:6e:b8:9d:fc:cc:f4:2c:8c:c1:a8:
62:8f:ae:ea:a0:85:6a:32:48:77:1d:9e:a4:4c:ea:5c:85:6b:
c2:5e:9a:62:eb:eb:68:5d:35:09:52:ee:15:f2:8f:f6:f8:a7:
e8:56:5b:f5:72:2d:db:50:ca:7b:39:dd:01:74:53:15:9a:3a:
26:10:83:79:89:38:d8:17:a7:cf:de:b4:dd:10:d8:d8:9c:59:
11:14:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org