Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F060E8A2060E11EFBB4B544C017001B1.roa
File: F060E8A2060E11EFBB4B544C017001B1.roa (raw, json)
Hash identifier: G69YrtyisDPP6uO91ZCIldDIHIEZv3Ce77YZR2yR5XM=
Subject key identifier: 33:DF:CB:33:73:F8:D6:9C:A7:99:A4:D6:72:FC:35:C7:5B:3C:02:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F060E8A2060E11EFBB4B544C017001B1.roa
Signing time: Mon 29 Apr 2024 09:57:50 +0000
ROA not before: Mon 29 Apr 2024 09:57:47 +0000
ROA not after: Wed 15 May 2024 09:57:47 +0000
asID: 5065
IP address blocks: 156.255.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34484 (0x86b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:57:47 2024 GMT
Not After : May 15 09:57:47 2024 GMT
Subject: CN=662f6f1e-a06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:35:87:57:c3:cd:b5:c4:bb:1b:7f:e3:4b:
d3:61:0e:44:b6:4c:f9:26:06:86:67:cc:c0:f5:9e:
c6:15:5a:5b:97:0d:f8:55:87:a3:79:91:3a:68:00:
10:af:e2:24:ac:7a:02:a1:72:de:24:ca:be:72:82:
b6:a0:d7:94:c8:1d:75:1f:4e:48:da:b3:20:36:d9:
fb:4b:f2:75:c1:09:10:4c:7a:29:a5:bd:0a:2b:11:
aa:1f:a4:01:1a:b0:63:8c:ef:ef:50:d5:a9:26:ce:
06:0c:c8:83:80:cd:df:24:37:6c:49:c2:73:07:76:
f5:7b:06:79:5d:c0:95:74:8f:07:42:08:94:2d:ec:
f2:dc:47:97:19:47:45:7f:a4:ab:32:76:41:bf:f6:
20:27:9b:42:a3:e6:3d:e1:3c:35:7d:87:66:6c:bd:
e7:72:f4:16:bd:e4:8d:ff:7d:e2:8a:0b:25:96:1d:
f6:73:9d:01:e4:d1:da:e0:1f:d9:40:e8:fa:bd:3d:
fb:fe:1a:df:44:db:66:cd:f7:e8:c1:f0:95:6b:34:
68:80:3d:f1:09:06:6e:45:58:83:fa:4a:bd:35:bd:
a7:93:4e:e1:f5:51:b4:c9:ea:16:72:32:cb:6d:41:
46:c7:31:1a:c0:0b:e5:43:37:a5:73:59:c9:30:8d:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:CB:33:73:F8:D6:9C:A7:99:A4:D6:72:FC:35:C7:5B:3C:02:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F060E8A2060E11EFBB4B544C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:25:7f:67:fc:f0:01:ad:4c:9a:9e:3e:aa:0d:e8:4d:c3:a5:
25:f3:02:45:01:45:71:4f:6e:51:85:dd:c6:25:f6:2a:d1:17:
9c:2c:e6:14:53:80:80:c3:99:88:c5:d9:40:20:9d:6f:c0:bd:
fe:48:9f:fb:3c:74:23:9b:d9:e7:8f:1e:43:d4:24:e2:5a:83:
64:10:81:7a:96:d8:39:c1:99:81:c1:f1:63:04:1c:d4:25:fb:
cb:22:a6:6d:54:d5:e8:eb:05:d6:c0:52:69:47:c7:c4:1d:29:
03:61:de:90:ba:0c:a0:4c:f7:ad:a2:a6:35:03:cb:0c:47:ce:
a3:df:5b:d4:c8:73:d7:70:61:e2:a2:13:bc:f6:e6:31:f5:e1:
5a:72:7f:7d:12:be:3a:22:7b:5d:c1:ec:14:6d:42:73:4e:b7:
9d:ae:1e:70:b0:01:6d:0b:7c:26:f3:ae:ab:5d:57:9e:fd:1a:
35:a0:67:1e:eb:35:c0:19:81:09:71:fe:12:7e:10:4a:6b:b8:
b3:34:e8:ef:98:67:c4:c8:97:91:6e:a6:86:ac:1a:bc:20:48:
5d:76:9e:38:cf:cb:69:8d:56:7b:e5:a0:0c:de:f9:29:66:05:
84:09:aa:a5:92:60:2a:3d:be:c9:95:2d:d0:bc:ab:11:6d:a9:
4e:ef:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:12:11 2024 by rpki-client on console-ams.rpki-client.org