Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056EA5D8FDB811ECA4A2A5EEF1222468.roa
File: 056EA5D8FDB811ECA4A2A5EEF1222468.roa (raw, json)
Hash identifier: fzM3SwWlnvUqaRis3SBf2uOvMQNxKIarAC9c7euVYyw=
Subject key identifier: 5D:A5:A7:CE:34:F8:D3:F1:4A:ED:51:3C:D9:1C:C4:EA:7D:DD:FA:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1544
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056EA5D8FDB811ECA4A2A5EEF1222468.roa
Signing time: Thu 07 Jul 2022 05:45:35 +0000
ROA not before: Thu 07 Jul 2022 05:45:31 +0000
ROA not after: Fri 30 Dec 2022 05:45:31 +0000
asID: 328608
IP address blocks: 156.235.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5444 (0x1544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 05:45:31 2022 GMT
Not After : Dec 30 05:45:31 2022 GMT
Subject: CN=62c672ff-1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:74:d9:d7:74:a4:93:63:54:5a:2a:8e:4e:
17:b6:98:b7:21:04:5b:d0:b5:1f:95:72:5c:b6:28:
c9:48:dc:fc:6a:6d:99:9f:6c:d4:ff:a1:f0:09:5d:
e5:26:8d:7c:ff:43:81:e2:6a:74:c9:35:f7:c4:83:
0d:01:bd:5a:41:b8:49:f8:e7:d6:b5:1c:d6:d7:2e:
2d:d7:43:03:cd:c4:f4:44:74:f2:3a:fa:c4:54:bc:
e2:d7:4b:36:d3:1d:82:d2:0b:6a:42:ef:ba:e7:8a:
a4:48:61:0f:d6:62:aa:97:d4:d5:13:83:0b:4e:d1:
6e:6c:78:68:f8:9c:74:6a:5a:b8:0f:e9:e6:4e:31:
00:05:cd:6f:a3:5f:5a:c6:66:ad:60:a1:e8:b3:8f:
1b:2b:6e:4d:45:70:4c:17:78:cd:ca:c7:23:64:67:
e8:ef:e9:37:2e:4f:ac:ed:60:ac:a1:d3:35:89:c0:
84:68:34:9b:f9:37:c4:da:2a:89:bb:15:57:38:ba:
24:32:cd:b7:a7:10:7a:99:5d:41:57:31:09:a1:2b:
b8:f3:fa:c4:64:84:ba:30:23:70:71:d3:a9:72:2b:
fd:07:82:66:7a:1e:b0:57:9b:e0:14:41:04:91:a7:
c6:04:4c:4b:90:b8:6a:10:97:11:80:c8:54:9d:8b:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:A7:CE:34:F8:D3:F1:4A:ED:51:3C:D9:1C:C4:EA:7D:DD:FA:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/056EA5D8FDB811ECA4A2A5EEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.89.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7b:9e:46:ea:f9:32:cc:76:73:77:ab:51:46:0b:f8:02:8a:
b2:d6:d5:f6:94:c3:c1:32:6a:0d:e5:ab:b6:81:40:e1:25:2a:
56:24:29:90:4c:8b:7b:be:45:fc:99:5c:9b:f8:60:b1:63:4c:
48:71:f9:5f:17:f0:76:11:d2:b1:ed:0d:6b:46:40:ac:e3:e5:
17:7f:3d:ae:fa:58:29:a0:ff:c4:8c:e6:d5:73:87:80:cc:0c:
82:10:5c:0b:07:d0:53:f3:68:f0:13:5b:16:da:97:ec:6b:fe:
04:ee:da:5d:79:39:83:b1:af:2c:3d:77:d8:15:cb:7e:29:6c:
34:7d:b6:67:6e:60:a3:63:6d:f1:84:cc:f0:92:c0:88:be:11:
c2:58:fa:c7:fd:1e:69:d9:70:1a:b8:be:05:fe:b3:e7:02:4e:
21:c4:8b:6e:cf:fd:2e:8f:a8:4b:18:69:8a:3e:2e:d1:02:ff:
f2:08:ed:aa:d9:9c:87:62:db:37:8c:fb:31:d5:77:a3:c5:7d:
cd:40:17:35:6a:2c:a8:39:c1:7d:4c:4c:5c:43:21:d3:fc:6c:
54:30:c5:93:19:9e:33:a2:f9:e4:51:de:e0:70:bb:52:aa:f5:
a9:d5:1d:e6:73:9d:0f:5e:af:2c:3c:8e:28:5d:be:f1:08:71:
44:40:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org