Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0267D656F91711ED954F69174AD9E6FC.roa
File: 0267D656F91711ED954F69174AD9E6FC.roa (raw, json)
Hash identifier: eXsMLi/3I9z3t2C/rbGPsIlDymdmfbninjUZTLQC8G4=
Subject key identifier: 12:5A:A9:70:EE:15:57:42:D3:3D:67:49:D2:AA:0E:24:3F:30:23:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0267D656F91711ED954F69174AD9E6FC.roa
Signing time: Tue 23 May 2023 03:07:54 +0000
ROA not before: Tue 23 May 2023 03:07:50 +0000
ROA not after: Sun 05 May 2024 03:07:50 +0000
asID: 398968
IP address blocks: 156.229.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9908 (0x26b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:07:50 2023 GMT
Not After : May 5 03:07:50 2024 GMT
Subject: CN=646c2e0a-5032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:1c:ab:3e:50:8f:b5:8f:b2:99:13:d5:25:
54:5c:31:2a:46:63:0e:26:57:8b:d5:ce:23:b9:bd:
b8:4a:de:ac:bc:3d:47:81:ed:46:83:13:7c:f1:91:
be:98:03:f1:ac:7b:92:48:8b:4e:4e:94:8b:f5:03:
06:09:2c:57:92:60:32:2c:1a:ee:49:75:87:c8:d0:
f2:6a:c0:52:b6:2b:ea:f2:90:64:b1:f9:ba:49:9d:
3b:63:29:db:b3:b5:1c:1f:8f:12:e8:c6:42:f9:9b:
5b:41:8f:d0:56:d1:fc:20:5b:7c:11:a2:87:d9:86:
73:78:c5:1f:a3:9f:69:d5:11:5b:97:61:cd:6b:a7:
76:b0:55:ff:f8:c9:84:6b:97:9f:bc:ee:58:f7:10:
98:65:f1:05:99:22:58:d1:05:19:cb:2a:75:6b:fa:
ab:ae:0c:ef:37:e0:b3:99:e1:9d:c2:22:a0:4e:75:
f1:f4:70:4d:85:ee:14:59:11:13:4e:91:71:b0:97:
f4:21:d0:95:61:85:b9:06:7f:b9:d9:80:b7:ac:3b:
a6:d6:5a:fe:8b:50:ac:d6:f6:78:44:c3:c4:1a:e9:
cc:aa:19:29:28:64:c8:ba:97:cb:ec:b5:08:a2:c7:
35:d0:5a:f9:90:27:6b:8d:06:d5:14:f6:87:be:a2:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5A:A9:70:EE:15:57:42:D3:3D:67:49:D2:AA:0E:24:3F:30:23:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0267D656F91711ED954F69174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.132.0/22
Signature Algorithm: sha256WithRSAEncryption
81:a4:c2:f5:b4:b1:ac:07:b0:22:1c:83:5f:4e:cd:a3:bd:be:
4f:46:fc:e6:a3:c1:7c:99:f9:f4:88:02:8c:53:7d:5c:62:b7:
6c:c7:6c:61:d5:05:1e:38:00:b4:6f:80:ee:64:78:a6:18:ab:
b3:19:75:fe:25:31:5a:44:2a:30:55:72:93:a9:51:f5:3a:41:
78:2d:91:a0:ed:4c:48:09:96:bb:07:27:85:a1:43:3a:e4:8c:
da:ac:69:46:e2:4d:27:af:c0:ef:49:8e:d8:a1:1a:8a:54:d5:
de:c1:65:7c:92:b6:1a:89:ee:3e:9e:2d:73:5d:53:5b:db:2c:
ea:29:50:54:9b:0d:6c:65:7a:c0:42:10:db:2c:a1:ed:5a:15:
bb:99:89:b5:0b:d1:64:8e:16:d6:15:e6:01:44:cf:c2:40:1f:
e6:bb:f3:a9:f4:18:a7:d0:39:6d:b6:b2:0e:56:d4:df:b1:d6:
3a:59:4e:5e:21:0f:47:0e:b7:85:db:19:84:81:21:5b:9e:8e:
bf:c0:66:fa:d2:ff:d8:f6:40:fc:2e:3c:77:ad:a2:65:3d:a1:
1c:8c:5b:b8:46:d8:79:59:9b:ae:e3:8f:f5:38:79:ee:6e:b2:
76:65:67:13:c4:67:e5:71:09:4d:35:16:37:81:30:7f:16:45:
08:60:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org