Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
File: 6CF0BE8EDAAF11ECB5646CD7F1222468.roa (raw, json)
Hash identifier: KxfEbd81Bkl/ZFRGOA8YCIO6pgZFbRHpelggzfmp1LI=
Subject key identifier: 39:D1:9A:C7:C1:CC:EB:A6:C4:98:35:18:3C:23:29:43:80:1F:64:19
Certificate issuer: /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial: 02
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Authority info access: rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
Signing time: Mon 23 May 2022 15:45:52 +0000
ROA not before: Mon 23 May 2022 15:45:43 +0000
ROA not after: Mon 27 May 2024 15:45:43 +0000
asID: 328164
IP address blocks: 169.255.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Validity
Not Before: May 23 15:45:43 2022 GMT
Not After : May 27 15:45:43 2024 GMT
Subject: CN=628bac30-a2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:6f:12:da:4d:e8:22:05:a5:6a:d7:ba:b8:
27:0c:bd:ba:4b:31:84:98:6e:0a:75:d3:a0:98:b5:
0f:dd:27:43:77:23:99:f7:d4:a6:94:a2:94:f8:30:
f9:20:3b:d6:93:25:72:a6:f8:a1:7c:1c:d2:7b:1c:
eb:98:c8:42:78:73:f0:78:0f:7d:bb:b7:2b:2a:22:
92:4e:5c:bf:e7:28:65:4b:8e:7a:19:bc:4b:eb:23:
e1:35:99:cc:f6:c2:cf:d2:47:b4:31:47:83:e5:b2:
3c:ce:fc:39:5e:9b:8a:a3:80:d2:1c:70:ac:5a:f9:
f1:b8:f1:a4:c2:42:52:07:bb:b2:85:49:c5:63:3a:
95:35:c9:67:bc:8d:60:c7:2a:e3:77:68:3c:94:bc:
93:fc:a6:0e:e1:71:e8:f6:14:50:51:b6:c2:b0:b1:
6c:86:9c:db:a9:d1:98:ae:1f:81:24:49:f7:5c:ff:
38:89:72:b2:e1:28:2b:d8:ed:6a:5a:be:c7:f2:0e:
b4:3e:f0:ac:47:07:d1:c5:e6:5d:25:ae:be:98:58:
dc:fe:27:92:01:68:b0:37:87:0d:63:f2:54:0b:0a:
1d:db:57:12:cb:a7:43:a7:a0:86:77:95:ea:e0:15:
e1:07:1b:aa:6a:78:8e:34:18:c0:df:f9:3f:41:a9:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:9A:C7:C1:CC:EB:A6:C4:98:35:18:3C:23:29:43:80:1F:64:19
X509v3 Authority Key Identifier:
keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/6CF0BE8EDAAF11ECB5646CD7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:cb:b0:53:16:88:3f:a4:78:c1:3d:8c:c7:2a:2d:b2:14:9f:
02:d1:d2:51:f8:99:56:10:3e:8a:7b:29:cc:bb:4f:f8:7d:32:
d7:23:fd:f2:da:1e:18:36:56:aa:5c:dd:8c:66:80:94:46:9b:
32:b9:72:d2:54:01:7b:e3:7e:22:3a:3b:a3:f6:8f:f6:9c:dd:
36:29:0d:22:63:fe:5f:6e:89:2f:a2:d5:a8:4d:43:99:5a:ac:
94:ba:a2:fc:fa:fe:99:29:d4:e3:ec:5a:8f:c7:2a:9f:3b:d0:
3f:5a:f5:4b:57:60:a8:9d:14:35:ea:67:58:78:76:c2:21:b1:
45:00:bc:ce:17:75:2f:8c:39:27:8a:7e:ad:27:aa:89:81:b1:
d5:24:1f:af:6c:c5:e2:7e:e1:65:28:c9:82:67:25:8d:34:fe:
cd:b8:67:72:e2:da:d7:f2:84:33:a2:c8:83:b9:42:2f:7f:e1:
8c:6c:5f:38:dd:f1:00:da:31:b2:05:32:2e:6a:44:eb:d4:00:
a3:06:74:f9:da:27:10:99:fa:ab:2b:b4:b2:7c:4b:11:a1:11:
46:92:e2:a3:72:e0:d9:88:c5:df:4b:70:0a:f3:2e:74:57:df:
e0:a0:4a:14:c4:cc:f4:f3:65:04:4f:52:d4:14:1e:f0:6e:f0:
9c:8c:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:14:49 2024 by rpki-client on console-fra.rpki-client.org