Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAAE159636CD11EC86CFE34CD8A014CE.roa
File: EAAE159636CD11EC86CFE34CD8A014CE.roa (raw, json)
Hash identifier: DbePqU3v27V5086revYDtmsZ7GYB16y9NTgQwWRwb3I=
Subject key identifier: D3:4F:F7:44:B0:DB:B8:36:67:76:27:90:2D:D8:D4:39:EE:54:A4:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAAE159636CD11EC86CFE34CD8A014CE.roa
Signing time: Wed 27 Oct 2021 02:30:58 +0000
ROA not before: Wed 27 Oct 2021 02:30:54 +0000
ROA not after: Thu 27 Oct 2022 02:30:54 +0000
asID: 58895
IP address blocks: 45.206.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2727 (0xaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 02:30:54 2021 GMT
Not After : Oct 27 02:30:54 2022 GMT
Subject: CN=6178b9e2-26a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:c6:da:23:9a:63:51:53:61:fb:f2:fe:ed:
ec:9c:dc:e9:88:11:4b:9b:7a:1b:b7:27:30:23:e5:
bd:fa:19:60:1e:ea:bd:93:ea:3c:19:f1:9c:e4:5c:
c1:7f:53:a9:6a:44:e2:55:b1:a4:f4:74:ca:88:eb:
24:0f:50:83:4f:ed:d0:fa:99:2d:70:86:ca:9b:7f:
52:40:48:a6:b1:84:23:c7:58:5e:41:e8:e4:51:2a:
03:33:6c:e9:49:33:8d:43:22:db:d4:e1:ab:26:a7:
10:ac:4e:10:00:85:42:7e:6a:28:a4:b9:71:4f:fe:
23:18:43:d5:08:15:19:10:3f:ba:a8:d1:f0:6b:e9:
5a:86:c7:48:99:55:f3:d6:68:df:a2:79:a8:81:f2:
5c:1b:c0:8c:1e:ab:b2:38:64:d2:29:99:8b:68:73:
95:22:25:93:76:f4:eb:f6:97:fc:18:3e:d1:5f:53:
63:b0:87:fe:dc:7e:ce:d3:63:f4:f0:0c:a2:01:4e:
f9:a3:99:02:e5:d7:d1:78:a4:ce:ae:38:e4:47:bd:
40:3f:ef:95:1b:0a:0b:c0:e4:c6:0c:28:8a:ae:ef:
54:2d:a1:5f:26:cc:5a:c0:94:14:d5:6c:35:9b:8e:
f1:29:b6:92:88:32:64:97:42:50:30:aa:c5:ed:78:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:F7:44:B0:DB:B8:36:67:76:27:90:2D:D8:D4:39:EE:54:A4:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAAE159636CD11EC86CFE34CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:13:50:c3:ee:21:16:2e:eb:2c:cc:d0:80:cf:90:e1:a0:db:
5d:0d:63:0f:13:bd:ba:47:8e:29:0a:04:f3:f6:22:76:d0:4a:
bf:b9:ad:72:0b:35:4f:37:75:8e:11:d8:25:0c:30:e0:35:72:
95:d5:eb:d2:09:1c:97:3c:d2:cf:b8:c7:d5:ae:d6:1b:1c:ab:
90:50:df:7d:e1:3c:29:43:2a:04:ea:d9:cc:f0:67:98:55:d3:
90:cf:55:1d:15:cc:14:08:03:83:e7:b4:7e:e7:9c:3a:13:91:
80:cc:4d:ab:be:27:b0:81:df:25:63:11:19:1e:9c:72:cd:24:
85:e5:87:7e:ba:52:87:26:e9:21:03:25:0c:2d:82:eb:8a:87:
d6:97:ab:2a:57:c0:be:f0:ac:2c:59:8c:35:bd:6d:df:29:0c:
85:a8:12:f4:56:d6:26:d1:37:7a:d4:96:1b:0b:8e:7d:ab:34:
6a:1f:f3:c9:83:21:b9:9b:ce:98:ab:38:05:5e:c7:a7:8c:9b:
1d:6f:27:13:1d:ee:8e:d6:b4:67:08:d7:45:56:de:bd:11:d8:
be:51:2c:5a:b2:57:cb:14:89:8f:fa:da:c7:f9:e0:9a:83:cd:
cc:89:30:43:71:0f:f5:25:62:a2:34:44:78:87:35:2b:9f:0e:
ea:96:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org