Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB142B4DF2E11EB88C37D54F8AEA228.roa
File: 0CB142B4DF2E11EB88C37D54F8AEA228.roa (raw, json)
Hash identifier: G8+oCdp/JNuSBbZuXSFNAgjMZ2ONGP7yLkQrgqqRtEY=
Subject key identifier: 25:EC:DA:2E:43:F8:1F:15:7B:0E:BB:9B:01:7C:75:09:D2:7E:44:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB142B4DF2E11EB88C37D54F8AEA228.roa
Signing time: Wed 07 Jul 2021 14:17:24 +0000
ROA not before: Wed 07 Jul 2021 14:17:21 +0000
ROA not after: Mon 07 Nov 2022 14:17:21 +0000
asID: 53587
IP address blocks: 156.238.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:17:21 2021 GMT
Not After : Nov 7 14:17:21 2022 GMT
Subject: CN=60e5b774-64d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:19:19:5b:1e:4d:9e:f5:88:36:05:9c:ed:
ae:09:44:66:32:e3:d9:6d:1d:6a:7f:70:46:7f:25:
af:06:fe:6d:19:b8:92:0d:33:c5:e6:08:3e:d1:53:
b6:97:fe:27:98:d5:28:4d:48:68:4d:33:a4:e6:f9:
bb:7c:88:a6:95:60:bf:98:0a:81:4d:30:56:1f:7e:
fd:72:46:8d:6b:24:12:1f:db:25:86:47:96:11:eb:
54:2b:91:ae:e9:3a:b3:6f:04:4d:b1:68:54:53:05:
bd:bd:c3:80:a7:e7:c7:e6:b4:f4:06:22:f6:39:a8:
79:0d:9c:2a:af:b4:f3:62:b7:a6:a4:40:19:07:7c:
91:6f:ba:eb:ac:c4:a6:91:fd:94:77:f7:c3:79:f9:
21:3d:b8:ba:7c:56:1c:05:4b:bf:73:3e:2b:f4:0c:
a7:82:23:79:fc:45:4a:27:e5:19:0f:cd:67:46:37:
00:00:4e:37:b5:39:49:f3:58:33:23:04:06:de:be:
52:22:1e:2c:f4:5f:56:54:32:c7:ad:6b:66:f3:18:
ba:be:84:aa:ca:08:63:9d:f1:ca:06:66:aa:3e:a3:
74:fb:5c:5b:6e:40:77:80:aa:af:40:dc:1c:6b:5e:
b5:c7:62:ab:2c:9f:9b:51:04:cb:90:6d:32:34:7b:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:DA:2E:43:F8:1F:15:7B:0E:BB:9B:01:7C:75:09:D2:7E:44:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB142B4DF2E11EB88C37D54F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:61:a2:8e:2c:e2:e9:5b:dd:5d:2a:35:40:05:4b:bf:bf:b0:
e7:40:40:9f:17:28:b2:23:8f:e6:40:46:a6:d8:f7:37:e9:69:
f0:a4:1f:d5:5a:37:bd:f5:a6:cf:34:bf:42:0c:ae:07:8a:37:
88:38:f0:ef:84:37:ec:7f:91:d1:29:43:d0:90:88:f2:cc:92:
91:a4:b0:cc:d3:af:8e:fe:11:2d:f7:81:4a:ff:a3:09:fb:b5:
b4:9f:1e:a0:8c:29:84:dd:17:bf:3d:63:91:34:de:b9:e3:84:
71:c9:f0:ef:27:a5:83:a6:b1:75:5d:26:dd:3c:03:4e:c5:25:
b1:11:b9:03:22:34:84:43:8a:05:6a:e3:dc:0a:2b:5f:14:11:
5b:55:df:bd:94:2e:55:13:20:78:c6:f4:7f:bc:e3:cb:87:3c:
6d:a5:d6:e3:86:0a:1d:2a:f3:9c:57:02:b0:8d:2b:59:09:e5:
f0:c6:d7:b6:68:ce:f6:b3:61:0e:87:22:46:22:54:6a:34:00:
f4:22:d8:a6:69:44:dd:8d:d3:c7:6c:de:ca:9a:bb:9a:17:04:
a2:44:77:fd:54:fa:f1:1b:67:0d:02:bd:24:01:1d:b4:9c:70:
e3:fb:35:5b:e6:6d:83:69:df:2c:ff:73:8c:7a:84:68:b4:2e:
de:3f:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org