Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8101D9BAD7DD11EBB50B192BF8AEA228.roa
File: 8101D9BAD7DD11EBB50B192BF8AEA228.roa (raw, json)
Hash identifier: 3mV+Z2bAtAXaDI2wmMWaoce5N4l8lC7c1s0CUusMi6E=
Subject key identifier: C9:EB:DF:94:6B:A5:F4:45:42:A0:A2:4F:A0:C4:46:02:37:77:09:1C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 031B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8101D9BAD7DD11EBB50B192BF8AEA228.roa
Signing time: Mon 28 Jun 2021 06:53:12 +0000
ROA not before: Mon 28 Jun 2021 06:53:08 +0000
ROA not after: Mon 26 Jun 2023 06:53:08 +0000
asID: 1239
IP address blocks: 192.142.135.0/24 maxlen: 24
192.142.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 28 06:53:08 2021 GMT
Not After : Jun 26 06:53:08 2023 GMT
Subject: CN=60d971d8-ca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:36:1f:6c:db:c7:e6:bc:40:51:4c:f7:1e:
7f:07:c0:11:22:9f:c1:c0:2e:24:66:7e:28:f9:b9:
db:e0:12:28:bd:79:e8:5a:34:f0:49:54:49:bd:8e:
ba:57:a3:12:13:7f:93:d5:1b:31:25:95:4a:7a:85:
1e:02:23:83:4c:44:37:29:6b:58:be:1c:82:5d:81:
ea:00:29:c5:23:26:01:eb:ee:76:b7:e3:fc:7a:31:
39:c0:d8:65:e0:94:38:d9:74:b4:88:73:31:f0:bf:
8a:9f:46:95:ff:ed:d9:1e:b8:00:00:1f:b8:36:9d:
84:c3:f8:89:2a:49:50:b3:db:dc:76:d3:e9:fb:67:
6a:9a:af:0d:ee:63:42:4d:b7:a6:6f:cd:46:4a:02:
2e:05:1e:89:f1:9e:bb:99:12:56:62:05:31:24:77:
6b:95:06:a9:68:2e:b3:9f:da:fd:57:39:f8:f8:7a:
3a:1f:ba:bb:f0:f1:10:f0:ce:02:fa:85:7d:21:51:
4a:2c:29:de:a8:74:3f:94:79:33:04:0c:6c:d7:02:
8e:83:14:8e:5e:21:3f:68:a8:aa:ff:3a:66:bc:1e:
e6:85:e2:27:1b:b9:b3:8b:4b:83:98:b9:a4:68:03:
3a:23:9c:96:af:72:8e:c9:d2:de:bc:24:b1:10:4d:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:DF:94:6B:A5:F4:45:42:A0:A2:4F:A0:C4:46:02:37:77:09:1C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8101D9BAD7DD11EBB50B192BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.135.0/24
192.142.169.0/24
Signature Algorithm: sha256WithRSAEncryption
45:97:7f:20:ff:74:92:20:ad:1c:0a:30:a0:ae:1e:44:aa:36:
30:39:cb:09:82:46:72:6c:06:fd:86:60:b2:9e:0d:77:3a:5a:
39:c2:aa:66:37:b5:60:e5:f8:f3:3c:31:3d:d3:1a:bd:78:c7:
5e:a0:cb:c1:a9:9d:f2:26:be:1c:e9:b7:b9:4c:46:f4:b8:fa:
f9:b0:bc:88:e1:a4:92:3f:ff:4b:0f:33:02:88:74:7c:97:96:
6a:f9:87:b8:1d:ce:44:ff:79:41:59:00:5c:9d:84:84:0e:55:
09:70:23:c1:d5:bf:b5:d1:32:ca:92:1f:b4:0b:99:99:30:d8:
d1:47:87:52:80:2e:7d:e9:f3:da:e7:23:fd:72:04:74:a2:55:
b9:5b:82:6f:8c:ab:84:c3:f5:8b:75:47:27:4a:73:3c:6f:8f:
51:b5:ff:e6:bd:88:02:3e:20:d2:7d:58:de:55:18:9d:a5:4e:
a4:0d:02:8e:96:7b:19:f3:50:8f:c2:ca:79:ab:a4:6d:95:3f:
48:36:31:8c:cf:56:dc:17:da:dd:dc:09:4b:90:ff:2a:1f:6f:
1b:d3:3d:79:b9:aa:6f:fc:42:c8:81:38:9f:2c:16:fc:3d:7e:
ca:63:98:17:8a:25:f1:e6:1c:6a:73:90:df:d8:ca:9a:af:0e:
0e:4c:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org