Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6429ACC36D611EC840F765DD8A014CE.roa
File: F6429ACC36D611EC840F765DD8A014CE.roa (raw, json)
Hash identifier: 1aVLGHtWd1fCPIIp3zr/8iSciq+/hHI6KLV7Qk6P3zo=
Subject key identifier: 86:F0:C8:C8:06:68:17:B0:D5:B7:65:D2:14:4E:6E:1E:63:BB:F8:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0AFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6429ACC36D611EC840F765DD8A014CE.roa
Signing time: Wed 27 Oct 2021 03:35:42 +0000
ROA not before: Wed 27 Oct 2021 03:35:39 +0000
ROA not after: Thu 27 Oct 2022 03:35:39 +0000
asID: 58895
IP address blocks: 45.206.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 03:35:39 2021 GMT
Not After : Oct 27 03:35:39 2022 GMT
Subject: CN=6178c90e-c71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:56:0f:af:2d:e2:b2:61:84:ad:8f:b6:ca:
51:bc:a6:d4:9f:8b:a4:67:f3:59:5a:2e:14:82:dd:
4a:d6:a9:16:bf:8c:0d:e3:d3:54:b1:14:c4:91:fc:
35:73:89:9f:29:61:50:50:fd:c8:b1:d6:ae:52:ec:
3c:22:58:f5:dc:a8:61:81:f7:9f:48:02:60:b2:77:
61:1b:db:18:82:ff:1d:e7:c4:58:38:07:22:74:a7:
99:dd:74:2b:a6:51:05:20:1a:83:50:27:fd:87:97:
f3:e5:66:44:b9:ae:e5:00:26:24:1e:30:08:86:85:
77:d8:f8:b9:74:40:d0:3e:35:e9:62:8a:c7:c2:76:
9a:93:39:d4:77:a8:ec:5f:ec:aa:bb:5f:45:b0:3e:
1a:49:3e:1d:61:35:c8:4c:57:dd:97:36:bf:9b:52:
d1:81:9b:94:71:64:73:06:b8:8a:ac:ac:83:97:87:
d4:7c:5b:d2:49:70:13:b5:3c:d3:4d:54:c8:15:d1:
74:30:d1:f7:a1:da:5c:d8:7c:dd:d3:6b:c7:1a:ce:
bc:dd:1d:7f:5f:51:13:60:92:c1:82:2b:d0:ec:eb:
c6:ec:87:e6:9e:25:68:dd:4d:a6:97:e2:74:2c:99:
5b:36:59:61:2c:57:b1:77:80:d7:f0:44:68:50:7e:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:C8:C8:06:68:17:B0:D5:B7:65:D2:14:4E:6E:1E:63:BB:F8:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6429ACC36D611EC840F765DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fe:5b:c9:46:02:c5:ed:52:24:de:42:b2:fd:1f:f7:1a:8b:
c5:2b:1c:6f:19:a0:c1:f0:45:b6:40:0c:8f:6f:e3:38:77:35:
5b:9e:9e:d0:b1:42:d1:50:97:96:77:00:95:7d:6b:3b:44:4a:
dc:db:24:7e:b1:5a:1f:35:75:39:10:fc:db:cd:95:cf:ad:b1:
66:f1:7e:68:5c:1f:8a:fb:5d:27:eb:f4:6d:fc:53:ec:77:e8:
29:5d:20:c0:e6:65:2a:bc:40:aa:ce:ee:89:59:4b:5c:de:ff:
3a:54:da:f6:e4:39:9a:69:b5:13:7d:9a:e4:45:40:38:d0:24:
55:f7:43:95:71:67:e6:e6:d7:c6:a2:15:f6:b0:3f:2a:69:64:
d5:58:65:d3:d6:9c:84:69:2c:2a:4b:e8:28:fe:b9:a7:b9:fd:
b6:ad:0b:40:fa:d3:25:13:2f:96:f1:d3:71:15:da:1a:1b:db:
ad:80:40:23:e1:d1:34:2d:4b:16:d8:99:ff:b0:dd:b8:f6:b0:
02:71:82:00:e3:43:5e:c7:64:02:a4:97:2e:a4:18:b7:3f:50:
c9:45:98:b4:b3:07:62:11:34:2f:05:1e:19:50:e3:0f:1b:f4:
cd:fd:25:47:4e:ae:81:b8:4f:a1:e6:2e:08:ad:76:5f:7d:c2:
50:97:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org