Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/05352C5A970611EBADC8AC31F8AEA228.roa
File: 05352C5A970611EBADC8AC31F8AEA228.roa (raw, json)
Hash identifier: NUNQEwFXB+oluomohmcHqVajdik3UuQZw3zOdq5Ro8E=
Subject key identifier: 62:57:38:7D:B9:2F:1D:67:FE:D4:D3:6A:8D:1E:9F:60:51:10:A4:4C
Certificate issuer: /CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Certificate serial: 02
Authority key identifier: 6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
Authority info access: rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/05352C5A970611EBADC8AC31F8AEA228.roa
Signing time: Tue 06 Apr 2021 18:29:28 +0000
ROA not before: Tue 06 Apr 2021 18:29:18 +0000
ROA not after: Wed 05 Apr 2023 18:29:18 +0000
asID: 328137
IP address blocks: 160.119.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Validity
Not Before: Apr 6 18:29:18 2021 GMT
Not After : Apr 5 18:29:18 2023 GMT
Subject: CN=606ca888-87fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:d2:9e:e9:54:98:5a:e5:06:2e:a5:5f:70:
40:7b:55:4f:72:01:54:b1:56:04:e6:80:3b:85:00:
92:43:9b:7f:77:94:eb:b0:c1:fa:b8:ae:1a:2d:30:
f0:cc:7a:aa:fb:64:26:5f:eb:02:3e:c0:10:1f:f5:
bd:38:4c:79:b3:03:69:09:a6:16:a2:dd:f9:ed:44:
3e:1b:aa:d3:ea:bc:ef:89:32:32:3f:12:87:73:48:
f4:16:03:93:11:31:23:40:5a:55:96:c2:3f:7b:65:
69:0c:1d:a8:d5:4f:3e:cf:4e:61:c3:a3:2c:b6:f7:
43:f7:36:ee:b7:2d:26:92:27:f0:df:1c:1c:c5:7a:
59:4b:a4:a9:9e:d1:07:0b:3f:61:ea:53:7b:81:dd:
26:b2:2e:2b:64:cc:99:f2:13:20:04:89:8a:97:57:
c5:15:ed:8a:43:ee:2f:b6:8a:21:39:98:a1:4e:e4:
e0:d4:86:dd:87:00:72:13:7d:d7:96:fc:bb:0e:68:
04:71:cc:7b:f0:18:10:f2:fb:8e:43:15:c5:86:c3:
92:e0:d6:cb:4e:fe:89:c1:d7:e1:3e:2f:d1:f4:81:
65:b4:d0:c7:7e:04:d0:54:fd:53:15:b5:67:c2:e1:
38:aa:e4:2c:40:26:97:30:25:75:a8:d1:c1:25:93:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:38:7D:B9:2F:1D:67:FE:D4:D3:6A:8D:1E:9F:60:51:10:A4:4C
X509v3 Authority Key Identifier:
keyid:6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/05352C5A970611EBADC8AC31F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:32:34:49:f5:ae:f8:cf:41:c6:f8:92:d1:e6:37:7b:62:0b:
7a:9e:65:eb:ee:8b:d6:3f:04:09:a6:3c:ac:36:a0:a7:55:d2:
20:b2:e0:bc:34:0d:63:63:96:c5:66:1d:1c:b5:6d:13:c7:b2:
0a:23:83:e9:97:1d:df:fa:a4:9c:73:e6:0d:97:51:fb:31:c4:
2b:5f:4c:16:14:b7:8f:e2:13:70:47:9a:7b:83:47:71:fa:29:
2c:7a:f6:8c:32:2f:f7:14:56:44:de:1a:93:ce:40:97:fb:93:
fc:78:d1:3b:f6:72:85:5e:fd:5f:01:85:0f:7f:4b:bb:22:34:
36:95:dd:cd:39:12:ed:67:38:02:a8:0e:23:92:4b:7c:ce:60:
9e:91:8d:a1:db:45:47:38:85:a6:3c:5e:ad:a5:b1:fa:38:5b:
f0:37:eb:ec:b3:2e:8f:38:e3:89:16:2e:1f:47:a4:56:3d:bc:
16:49:89:7c:d2:0d:35:24:f2:8f:ce:2f:e5:72:88:06:75:05:
b3:94:26:98:f2:3d:73:f8:ba:1a:a7:6d:7d:8e:83:e2:25:3a:
0f:7c:c2:6d:9f:bf:5f:4a:66:2c:ae:6f:3a:ac:b7:bb:f2:f3:
13:d5:98:df:aa:7b:a7:ab:61:1b:da:d0:3b:1c:93:b1:83:f7:
c6:26:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org