Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41B64CC36CD11EC980BDE4CD8A014CE.roa
File: E41B64CC36CD11EC980BDE4CD8A014CE.roa (raw, json)
Hash identifier: UuIYlInQD7LC+aWwa5cRt9zM7EJNOOUcTeZzpD51bsw=
Subject key identifier: 96:7A:0B:23:2F:17:2B:62:D3:AB:1F:18:D4:48:D4:D7:DC:36:C8:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41B64CC36CD11EC980BDE4CD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:30:46 +0000
ROA not before: Wed 27 Oct 2021 02:30:43 +0000
ROA not after: Thu 27 Oct 2022 02:30:43 +0000
asID: 58895
IP address blocks: 45.206.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725 (0xaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:30:43 2021 GMT
Not After : Oct 27 02:30:43 2022 GMT
Subject: CN=6178b9d6-bff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:01:a8:f6:0f:95:91:d2:a5:65:ab:cd:8b:
85:a2:1c:40:70:a6:be:01:64:5f:2c:72:fc:2b:cb:
6f:7d:7b:a4:a4:fa:b7:9f:1a:51:fc:88:42:1e:30:
12:95:e3:c6:9e:90:18:ee:a1:a2:00:80:47:d1:b1:
90:73:99:1f:ce:1b:a1:42:4b:94:ce:d9:c9:be:c9:
d4:ba:d3:ff:48:8c:6e:7b:b9:21:72:fc:e2:72:f5:
1a:53:6b:94:b8:b5:52:ba:5c:3d:ea:89:f8:50:99:
92:6d:07:61:e0:7e:38:42:c2:76:7c:cd:c0:7a:04:
a6:5a:40:20:f1:d3:ee:52:34:f2:b0:b3:fb:1a:57:
9d:57:53:61:bf:c1:05:bf:9a:d1:f7:b1:47:d8:d4:
73:95:97:db:77:f0:bf:16:fe:1d:4d:c1:0f:cc:ee:
ca:1d:78:1d:ee:94:46:5b:83:fc:2e:1d:40:63:0c:
53:cb:32:f4:56:c8:58:0e:74:f4:65:f3:24:9d:b7:
9e:f2:50:a7:40:c3:8b:d3:67:b1:55:d2:74:4f:be:
27:be:ee:8c:ca:df:c9:66:e5:77:d1:1a:be:a6:17:
88:ec:c3:01:e3:1a:a1:9a:3c:cc:dc:9c:2e:c8:b9:
d3:83:f3:07:a5:47:67:e0:5a:f4:d2:a8:49:75:11:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:0B:23:2F:17:2B:62:D3:AB:1F:18:D4:48:D4:D7:DC:36:C8:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41B64CC36CD11EC980BDE4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.152.0/24
Signature Algorithm: sha256WithRSAEncryption
76:78:58:e2:ef:76:7e:3d:8c:1e:3b:07:6b:6c:1d:9e:55:0b:
78:56:10:d2:80:b9:12:29:d2:0c:39:18:1f:36:a7:75:c1:13:
a2:fd:44:7d:4c:4f:8e:18:f6:c1:29:ca:6b:3f:16:da:00:d5:
c0:e2:8b:e6:03:42:9a:af:26:a6:80:e3:4f:f1:c0:c8:82:7a:
8c:93:fa:53:19:32:87:1f:6a:25:a1:f4:3a:b3:1a:9d:c5:ae:
bf:87:fc:d4:4a:70:bc:91:2b:96:eb:55:c6:ab:ea:19:af:9d:
3f:41:bd:fa:8c:82:91:8a:c7:cc:51:f7:d4:a0:24:3c:b0:c8:
ff:68:18:0f:a3:3e:c1:50:c2:1c:4e:3f:90:f7:23:02:ea:bb:
e6:7e:8b:a4:20:a7:34:5f:ec:75:b8:ff:84:d7:fe:30:a3:69:
53:08:5d:7e:f7:7c:40:f9:4d:49:43:be:f2:fa:49:47:a5:10:
19:89:ea:8b:c8:9d:d9:58:96:c0:be:4e:18:80:e1:0c:d6:b4:
aa:bb:cd:db:2d:68:96:56:32:70:41:1b:1c:05:bb:bd:49:c1:
3d:0c:68:91:2f:fa:3f:bd:38:31:51:b7:77:06:9a:67:c0:0e:
b3:e9:c0:53:27:9b:36:c3:34:44:82:53:d7:86:e9:2d:a2:88:
7e:3c:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org