Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/56F7F520C7C811EB9C868B6DF8AEA228.roa
File: 56F7F520C7C811EB9C868B6DF8AEA228.roa (raw, json)
Hash identifier: SwOr38H3mEZhur/9OGA3laaO3kfRPA90RLmObJ5GkCI=
Subject key identifier: 5F:70:4D:0D:B7:FC:D0:6D:08:A0:BB:6B:41:F4:DF:27:CA:4C:17:98
Certificate issuer: /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial: 05
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Authority info access: rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/56F7F520C7C811EB9C868B6DF8AEA228.roa
Signing time: Mon 07 Jun 2021 19:41:23 +0000
ROA not before: Mon 07 Jun 2021 19:41:20 +0000
ROA not after: Tue 07 Jun 2022 19:41:20 +0000
asID: 206283
IP address blocks: 169.239.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Validity
Not Before: Jun 7 19:41:20 2021 GMT
Not After : Jun 7 19:41:20 2022 GMT
Subject: CN=60be7663-4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:15:1f:f2:11:da:fa:2d:18:0e:53:b3:6d:
a3:47:58:e5:b0:8f:01:88:c8:78:a9:c0:15:b3:4e:
a6:a1:80:0e:82:6a:a6:2b:60:cb:8d:cf:52:67:9d:
16:43:79:9a:26:d5:fd:97:46:1a:d5:b0:aa:ab:c9:
96:d1:7b:b2:ef:51:14:70:d5:81:81:00:12:c2:4d:
7f:24:a5:27:99:3f:60:c9:b8:c7:a4:5a:dc:be:08:
4a:9b:e8:31:05:e6:84:47:76:5c:3b:c4:27:f8:93:
94:5e:85:40:a9:2d:8b:9b:64:74:fe:b3:31:2f:00:
c8:cd:2b:2f:37:11:87:f5:96:f5:7f:87:1d:2d:33:
1d:3c:ba:32:4a:fd:44:54:7d:4b:a3:a7:f9:d7:95:
59:e6:ee:34:7b:0d:3b:06:6e:36:90:e0:93:c2:41:
6c:f1:81:30:5e:b3:38:5e:ac:a8:a3:cf:18:15:ab:
f8:87:94:74:52:a2:3d:bb:a1:4a:b2:bf:f1:56:57:
c8:35:00:ec:32:b3:28:7f:f1:e5:cf:8a:d3:7e:45:
bd:bc:20:03:dc:32:7b:f0:fb:f6:b7:d3:83:1f:4a:
63:f9:84:38:dc:d5:99:a3:f4:91:88:6f:35:b4:a2:
e5:28:69:25:24:5d:cc:f2:62:1e:33:42:c6:46:1f:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:4D:0D:B7:FC:D0:6D:08:A0:BB:6B:41:F4:DF:27:CA:4C:17:98
X509v3 Authority Key Identifier:
keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/56F7F520C7C811EB9C868B6DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7c:f8:0c:6d:5f:6f:5c:42:7e:c5:db:a8:57:00:6d:61:1e:
6f:37:4f:77:05:cc:96:63:aa:2f:c3:b6:27:cf:cc:4f:75:c3:
78:06:c4:79:88:c9:80:57:9b:34:7d:94:5e:75:54:71:ee:fe:
6d:d8:95:13:a0:8e:a7:dc:af:d9:8e:bd:a9:0e:d1:1b:55:d8:
da:d6:bf:94:4e:d9:8f:be:56:a3:22:3c:49:e9:0a:fb:56:36:
37:f1:d8:51:57:57:99:c4:c8:a3:67:55:7e:9e:61:ed:e9:3d:
3d:d7:89:56:36:14:64:67:5e:9f:46:9f:f8:27:76:bf:a7:e3:
4a:ef:98:16:be:bf:4f:6e:a2:f0:bb:b1:ce:7a:b6:a2:aa:dd:
47:31:36:c1:64:80:53:f0:70:e7:cf:db:bb:2d:93:d8:cb:2c:
f6:fb:5d:3d:4e:7e:6c:74:85:bd:aa:ff:e4:42:2e:79:7e:3a:
e3:ac:69:66:84:b3:99:d6:18:0c:a4:ed:6d:7a:d0:85:3f:5d:
a6:c9:c0:1d:19:59:c4:1d:38:a8:ff:df:6f:3f:05:16:36:ff:
82:56:81:4e:8a:88:dd:c1:1a:e1:2d:b5:31:70:25:d2:ee:f8:
37:35:6a:77:40:8c:43:2f:02:22:1f:a6:aa:6d:84:f6:99:49:
25:87:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org