Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160FC05BB811ECB838D0C75A40D577.roa
File: 04160FC05BB811ECB838D0C75A40D577.roa (raw, json)
Hash identifier: imU/E5+2mEegYeJzSY62UlbtsW73fvBXqKBsnu9YdhI=
Subject key identifier: 8F:EF:E7:34:AA:78:3C:3C:2C:37:8B:89:82:1E:7C:7D:65:55:1E:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160FC05BB811ECB838D0C75A40D577.roa
Signing time: Mon 13 Dec 2021 01:57:24 +0000
ROA not before: Mon 13 Dec 2021 01:57:21 +0000
ROA not after: Sun 30 Jan 2022 01:57:21 +0000
asID: 1239
IP address blocks: 156.238.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4320 (0x10e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 13 01:57:21 2021 GMT
Not After : Jan 30 01:57:21 2022 GMT
Subject: CN=61b6a884-2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:37:6d:4c:84:f5:a5:61:2f:71:3e:75:21:
93:6e:d5:9c:65:00:c7:4a:ca:8d:f9:21:98:1f:2d:
b4:b9:a7:ad:64:0a:ef:aa:a9:51:83:c5:ce:d9:d4:
3c:21:62:a3:ca:0c:32:6a:23:ee:23:c0:6e:18:f3:
69:fa:98:db:c0:5a:84:21:14:78:c6:65:2d:95:38:
25:65:b0:00:e5:e3:1b:9f:cf:cc:57:eb:6f:59:3b:
7d:b9:20:03:6a:0b:9b:05:db:af:c0:b9:b6:82:4c:
6e:29:3b:13:b3:9e:9a:02:d1:e6:0a:4f:16:d3:82:
e0:ad:60:6d:2a:3b:6b:64:58:6d:83:3b:65:04:e2:
d9:49:97:29:0f:b5:14:b5:3e:cb:0a:50:a9:42:f8:
4f:6e:98:8f:16:81:82:d6:c6:6d:20:09:b3:ff:2b:
6e:4c:75:a5:6f:92:4f:84:3f:62:d4:f2:ac:fc:8b:
bc:d0:09:78:84:52:27:54:74:c7:d4:4a:fb:bd:32:
2a:f7:71:77:d3:1f:84:fa:e4:5e:4e:1e:c8:c6:f7:
e6:4b:84:a0:7e:ad:fd:a6:b4:0c:ac:61:e5:6d:75:
85:52:30:55:9c:ee:cb:20:c1:7b:ba:64:aa:ca:8e:
4b:28:c7:a1:f6:9c:ad:2c:f4:fb:87:8f:e2:63:2d:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:E7:34:AA:78:3C:3C:2C:37:8B:89:82:1E:7C:7D:65:55:1E:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04160FC05BB811ECB838D0C75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:43:9c:49:6e:4e:d8:89:78:ef:71:30:17:0a:ce:b4:0e:48:
d3:6d:7f:d7:9d:2d:5c:79:53:8d:72:63:15:b0:22:df:32:01:
ec:5b:b7:4a:09:60:70:eb:ce:45:11:f3:92:34:4e:db:53:26:
41:5a:ab:38:61:f4:8e:bb:c8:f5:57:3b:27:68:92:df:e6:ec:
b0:94:79:7c:3e:86:5a:00:3b:d4:3e:63:ed:57:1a:73:ab:7c:
ef:92:8b:c0:ad:d6:dc:cc:00:85:c6:67:71:11:af:78:bb:25:
19:54:5e:d5:cc:f9:96:cc:9b:9e:f1:ef:2d:2e:12:57:aa:aa:
6f:8c:65:21:c9:27:f4:73:a7:40:7a:74:d5:a5:4d:40:46:d7:
b4:e6:73:16:c6:92:67:68:c3:7d:ad:85:86:d0:ac:89:50:66:
e0:9d:2b:1a:ff:05:0a:87:c8:65:07:9b:65:fe:07:ac:14:0d:
91:31:bf:26:22:e7:3b:1a:d7:44:5b:8c:88:47:ca:07:ce:a0:
6c:11:22:2f:e2:cc:20:19:42:08:2a:dd:41:94:8c:95:c3:dd:
76:5f:f8:c4:a1:1d:a3:44:c4:13:18:71:4b:59:f1:db:55:6c:
d9:e1:5b:f1:a8:83:3e:fe:00:0d:84:d0:90:af:3d:07:7c:a8:
03:fd:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org