Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A64CE4BE0411EBB7277E21F8AEA228.roa
File: 05A64CE4BE0411EBB7277E21F8AEA228.roa (raw, json)
Hash identifier: rq3cWOOUY6JemVfVmvtrSbw0Q6a6iU0zhpawcWlpLps=
Subject key identifier: 32:FC:F2:52:79:B0:A3:E7:90:3F:D5:FA:62:57:C4:10:C8:B4:70:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A64CE4BE0411EBB7277E21F8AEA228.roa
Signing time: Wed 26 May 2021 09:23:25 +0000
ROA not before: Wed 26 May 2021 09:23:20 +0000
ROA not after: Sun 24 Jul 2022 09:23:20 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 09:23:20 2021 GMT
Not After : Jul 24 09:23:20 2022 GMT
Subject: CN=60ae138d-3ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:2e:f4:44:cc:d5:aa:04:08:0d:5a:0b:74:
f7:47:b1:0a:be:d6:e1:57:e4:64:1f:2d:3e:1e:54:
e2:8a:a4:f6:83:ac:ef:af:8e:63:37:d9:be:06:22:
5d:f7:c4:66:bd:5a:05:f5:e6:f1:2f:20:7f:df:08:
5c:7f:a0:80:58:54:63:b6:a7:6a:1a:9f:6c:3c:0d:
d4:4f:0e:6c:85:4d:ae:89:30:2a:90:20:fd:45:53:
5c:ee:e8:29:61:6e:f5:80:11:08:ba:45:20:19:17:
bf:68:5f:c2:fc:27:85:90:e4:8b:d6:13:81:ef:66:
42:fc:a3:f4:61:22:87:45:3a:59:95:ee:b6:a4:5a:
7b:cd:00:b4:7d:c9:d2:8d:79:59:8d:29:2a:d6:f1:
7d:cb:bb:02:37:be:d2:6d:d6:00:45:00:02:13:c6:
c0:97:44:39:db:91:3d:a6:13:29:64:0a:13:5e:16:
ae:26:60:75:3e:b4:a9:f7:25:90:29:b9:c1:ef:e9:
0a:20:2a:57:9d:59:4c:8d:04:90:07:4f:ce:77:98:
44:c4:22:71:ca:67:8c:9f:b3:10:3c:d0:64:d7:fd:
5f:47:0d:32:bc:ad:51:10:16:52:bd:ba:b5:03:47:
90:27:93:e7:77:fd:92:dd:08:fd:22:2f:cc:77:79:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:F2:52:79:B0:A3:E7:90:3F:D5:FA:62:57:C4:10:C8:B4:70:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05A64CE4BE0411EBB7277E21F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0e:84:25:29:12:d2:4c:a0:c1:e3:5b:d1:b3:46:30:7d:7e:
46:dc:8a:c1:6e:b9:f0:88:67:88:ba:5a:ad:27:46:5e:95:63:
e2:d0:11:bf:2c:c5:c3:3e:4c:ca:6e:af:70:f9:6c:97:cc:c5:
9e:dd:72:da:8b:ec:56:3d:a6:f3:62:80:9f:3b:5d:de:fb:c2:
ad:2c:a5:c7:21:bc:05:55:25:cb:48:5e:e9:59:66:92:39:64:
89:2b:0a:cd:4f:2c:76:f9:cc:47:5f:cd:64:2d:63:1c:48:00:
e6:07:84:e9:11:34:59:e1:bc:9f:d1:e4:ee:2e:af:2a:e3:66:
2f:46:01:9c:cb:4e:8d:85:03:61:94:7f:cf:23:ec:fc:f6:2b:
72:ff:33:52:4d:37:93:9e:8b:69:62:68:0c:c4:89:bc:7d:a9:
62:24:80:24:b3:c6:9c:6d:f3:f1:95:ec:c3:f3:19:6a:37:49:
c5:ee:02:7b:fd:0a:9d:4a:d8:81:d7:92:94:ef:da:bc:62:89:
dc:dd:3c:16:97:0d:c2:5e:3a:a3:e5:0e:07:e6:5d:a9:b2:42:
89:fb:cf:7c:fc:07:bf:54:4d:5a:57:81:ee:1e:8d:86:79:61:
5d:63:58:43:d2:11:90:a5:a2:3f:90:b1:4d:c1:76:9d:d5:97:
11:5d:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org