Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AE4F525D8211EB93B07835F8AEA228.roa
File: 38AE4F525D8211EB93B07835F8AEA228.roa (raw, json)
Hash identifier: 5AbJ5LMqEUI4sljNlYO+EOM9YiPri3ie0GHQOS4szRk=
Subject key identifier: EA:DB:DC:80:B8:16:9A:B0:D8:62:B0:3C:14:E4:05:30:D5:6C:18:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AE4F525D8211EB93B07835F8AEA228.roa
Signing time: Sat 23 Jan 2021 13:52:25 +0000
ROA not before: Sat 23 Jan 2021 13:52:19 +0000
ROA not after: Sat 23 Apr 2022 13:52:19 +0000
asID: 26636
IP address blocks: 156.248.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 13:52:19 2021 GMT
Not After : Apr 23 13:52:19 2022 GMT
Subject: CN=600c2a18-1407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:d9:c2:2c:1e:f9:65:0d:13:20:f6:f6:0c:
6c:a8:f9:bb:b5:b1:94:ff:11:9b:15:99:e1:2c:a0:
c5:6a:25:a3:67:c2:3c:2d:a0:62:9a:7d:34:8c:3a:
a1:69:59:c8:92:75:0d:eb:c5:45:66:1c:c4:95:f4:
dc:8e:e5:9f:a1:41:ea:df:46:c7:50:ac:e7:bb:45:
d0:43:cf:ae:c0:1e:d3:0b:0a:47:bc:be:fd:f1:25:
10:15:ec:50:07:cc:92:36:4f:cc:70:d4:bd:a3:8a:
0e:94:c4:f0:54:c9:23:df:5f:9d:aa:0b:55:5e:9c:
82:70:83:ac:a8:30:bc:4e:3e:78:ce:3e:64:3a:d4:
e4:c5:05:a2:b3:85:f6:73:3a:ae:5e:b1:6b:94:09:
58:2d:0d:9b:0a:97:b7:01:79:58:5e:8f:e6:33:f0:
35:3f:5f:0d:7d:3e:38:ff:89:38:5d:69:6b:88:bb:
aa:4d:75:9d:fc:72:45:1b:51:47:e9:12:d1:b3:29:
b9:42:3a:b3:31:2b:9e:31:51:a4:fe:6b:8b:32:1a:
dd:03:12:56:75:be:84:65:d6:67:60:7d:f4:0c:59:
f5:8a:dc:1f:e4:76:43:64:47:ac:c6:98:f8:09:5f:
1f:fd:e6:fd:13:75:e2:1b:10:98:73:e4:4d:ec:97:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:DC:80:B8:16:9A:B0:D8:62:B0:3C:14:E4:05:30:D5:6C:18:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38AE4F525D8211EB93B07835F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:79:5a:ff:55:b2:d9:c5:6a:b0:c5:6c:90:c0:91:f1:65:30:
fc:24:0e:80:03:a4:a2:c5:a3:29:5e:16:68:bf:3b:ca:57:70:
87:66:86:70:d5:59:bf:13:eb:de:2d:ca:3c:3d:f0:6f:48:af:
aa:f8:f9:4f:00:b4:49:85:71:4b:3d:ee:f2:4d:ab:7a:b4:0a:
a5:bd:3c:97:11:cb:b9:17:60:a6:8f:24:3a:ba:cb:04:c8:72:
e4:32:78:94:43:c3:b3:67:4d:3b:e8:71:6d:2b:5b:75:e6:00:
3a:0f:37:4a:11:ad:58:2b:87:7c:6c:96:42:77:58:9c:a1:ba:
81:b4:2b:b2:a7:c9:bd:be:76:8d:bb:f6:05:77:8e:56:d9:4a:
47:1b:fd:92:14:4b:9c:9c:da:96:30:9a:61:7a:c4:06:e1:81:
da:14:1f:b9:6e:fc:14:6f:df:f5:84:25:c8:ab:11:15:6c:b1:
62:b4:4b:c5:9b:23:fb:c7:a6:56:e4:01:90:6f:70:b4:86:67:
b7:28:cb:88:d4:2f:3c:7b:a9:97:57:55:51:79:7e:e8:3b:22:
aa:10:0f:55:8a:ae:35:29:6e:40:69:44:d7:bd:3e:ca:e6:d1:
7e:5a:a7:0c:b3:45:86:5d:d7:ed:77:25:64:9c:bf:86:12:04:
5e:bd:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org