Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6289B001BE11ECA7BD0867D8A014CE.roa
File: 0B6289B001BE11ECA7BD0867D8A014CE.roa (raw, json)
Hash identifier: Dh+/X2FK2rDEP+9lzuHrujgli2OfTAcrDQgBNszJZzI=
Subject key identifier: BB:88:9B:B7:C1:8A:65:6E:27:59:E9:31:86:8D:1B:57:1B:FE:E5:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6289B001BE11ECA7BD0867D8A014CE.roa
Signing time: Fri 20 Aug 2021 13:54:43 +0000
ROA not before: Fri 20 Aug 2021 13:54:40 +0000
ROA not after: Tue 20 Sep 2022 13:54:40 +0000
asID: 135026
IP address blocks: 156.227.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:54:40 2021 GMT
Not After : Sep 20 13:54:40 2022 GMT
Subject: CN=611fb423-f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:11:8c:3b:ba:9c:e2:db:0f:fe:91:b7:fb:
86:5c:74:a6:23:f9:9f:f0:24:97:91:03:e0:d8:35:
d9:a6:8a:49:12:9b:ae:bc:88:2e:45:5a:18:43:c9:
9f:6f:8e:dc:23:69:f6:42:b4:73:ca:2c:f0:7a:e2:
43:13:51:99:44:71:aa:a3:e2:70:f1:d5:87:4c:cb:
34:42:cb:69:d3:73:3b:e6:96:27:ee:62:39:2d:7b:
e9:29:ac:da:52:02:43:e9:25:2e:f9:13:3c:2f:52:
49:ee:3b:92:4c:de:b6:24:11:a1:1b:11:b1:6b:7d:
73:99:47:c6:6d:1a:4c:17:fa:80:d2:b2:21:57:a7:
7a:e9:2f:95:f8:9d:6c:32:ac:c3:ee:b7:8c:df:ed:
1c:05:e2:c7:51:2d:3c:9e:08:4a:53:55:89:59:da:
4d:66:01:43:e8:03:e0:15:cd:68:aa:31:f7:7c:16:
4d:89:5d:b7:11:41:ed:e6:4b:53:2f:d7:24:9c:85:
ef:4b:b4:07:22:47:16:c1:bd:7d:35:a6:72:b2:49:
b5:b0:37:9c:f5:5e:84:d2:63:82:85:8e:43:9a:66:
86:4c:11:80:fb:80:2c:4e:0c:0d:d6:48:22:e1:12:
10:ff:9b:90:b0:cd:bd:4e:f9:d5:1f:a4:2a:67:f1:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:9B:B7:C1:8A:65:6E:27:59:E9:31:86:8D:1B:57:1B:FE:E5:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6289B001BE11ECA7BD0867D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:49:6b:70:f2:a2:8d:28:32:ad:d6:4c:63:51:d9:60:49:1f:
8c:aa:f9:4a:4a:d6:e7:e8:cd:b4:03:5a:75:45:27:10:d5:7b:
ed:90:43:08:39:f7:3d:90:5f:c0:d1:37:cc:1f:22:56:70:bb:
ae:cc:60:9c:92:53:ec:20:b2:6d:5a:ad:56:cf:04:d3:30:eb:
dc:94:d1:6e:d1:86:0e:b8:7c:86:69:01:76:b2:c9:1e:da:8d:
14:d1:cb:1c:db:bd:62:67:8d:17:68:8a:6f:19:7d:28:1d:5c:
6b:65:ce:79:e6:f5:09:0f:2d:69:82:40:3c:74:15:f6:b5:de:
5b:9e:54:2d:a8:6a:bf:25:ed:a2:b5:e2:0b:fa:cd:ac:c2:89:
92:e9:cd:4b:7c:36:42:00:10:42:df:90:ea:fe:75:d8:eb:fe:
52:a1:7b:db:62:15:30:3b:12:f0:14:ab:ab:4e:71:57:41:af:
f9:6e:ab:10:54:7c:cb:eb:e7:1b:98:ad:57:fe:bb:4b:fb:f4:
0a:4c:50:5c:47:4f:5c:37:bb:46:6e:13:0a:27:2a:7d:bb:32:
36:82:c9:f3:8d:c9:4e:95:0b:2c:4a:dd:3b:12:ae:28:52:18:
67:fe:39:cd:9c:81:8f:4e:03:eb:4b:b8:a2:62:5d:1d:15:ac:
bb:80:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org