Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F06CCE6EAF511EB915FDE4CD8A014CE.roa
File: 0F06CCE6EAF511EB915FDE4CD8A014CE.roa (raw, json)
Hash identifier: 90rJgmf/c6UaXxhuugOt0BeohEmukR4OiV5fSWoH8jI=
Subject key identifier: 98:AD:47:20:6E:05:E6:F9:75:D8:D9:88:64:0C:56:04:3A:F1:A9:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F06CCE6EAF511EB915FDE4CD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:59:52 +0000
ROA not before: Thu 22 Jul 2021 13:59:47 +0000
ROA not after: Thu 22 Sep 2022 13:59:47 +0000
asID: 1239
IP address blocks: 156.236.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:59:47 2021 GMT
Not After : Sep 22 13:59:47 2022 GMT
Subject: CN=60f979d8-cfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:ce:c4:5f:d0:ab:c7:5b:17:38:ff:44:b2:
9e:6f:17:32:81:e4:df:74:73:f1:9c:ab:42:99:57:
79:7d:5a:c9:aa:8d:7a:2a:39:b6:f0:af:c1:08:3e:
37:45:3f:61:0e:0d:fa:5c:3b:5d:7a:2c:f8:ec:ce:
d8:d2:0b:c3:65:1e:5f:69:8e:04:64:df:53:ae:1f:
f0:de:93:44:f4:a8:15:f2:e3:67:cf:f8:a0:55:ef:
51:7c:fe:21:02:29:3d:57:24:60:6b:24:a4:4f:40:
e5:cf:a0:27:06:78:6a:aa:32:36:de:ed:51:90:94:
3f:13:49:1f:16:29:96:1e:cf:e9:02:bc:54:2a:c4:
bb:f7:e4:09:aa:e3:50:cd:40:68:02:6a:0e:27:24:
51:7b:48:e1:0e:33:6f:72:b7:3e:25:b0:f8:29:85:
8a:c1:3c:55:99:6e:a4:f0:1a:1c:4a:9e:0b:0f:8f:
82:82:d4:1d:ed:a3:e1:82:a9:79:28:b1:fc:6d:23:
62:9b:b5:59:10:b4:94:c1:e8:1c:bf:46:5e:2c:8a:
37:20:f7:65:d0:1c:7e:ec:95:e4:e5:b0:8d:f8:11:
02:9f:0c:f0:72:d3:30:32:97:7e:5e:7f:61:75:64:
9b:0f:92:93:93:c1:22:0e:9e:72:63:90:59:84:28:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:47:20:6E:05:E6:F9:75:D8:D9:88:64:0C:56:04:3A:F1:A9:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F06CCE6EAF511EB915FDE4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.142.0/24
Signature Algorithm: sha256WithRSAEncryption
32:30:66:54:96:52:28:9b:0f:d1:e8:44:1a:b7:60:d5:c8:75:
e6:9d:f4:20:e1:55:7f:71:33:8e:cc:ff:fb:07:a5:ab:4d:e9:
8b:8b:7a:c9:a9:20:aa:58:b9:5d:66:cf:f4:57:a4:ff:6e:db:
1c:2f:06:4c:a2:0b:8a:87:4c:ed:c3:e8:b6:53:b1:2e:ba:2d:
da:96:bb:36:6e:74:62:e1:88:9d:9c:b8:ca:09:96:05:f0:da:
5a:b4:3b:f7:b9:1b:2e:f3:44:88:47:26:13:b6:8f:3a:7c:ed:
42:a8:d3:00:0b:61:c1:01:2c:71:4c:1a:86:6d:c1:38:63:5b:
e3:ca:31:1a:69:b4:94:06:07:e9:10:fe:9b:d2:61:a3:36:1f:
81:90:63:5d:54:f5:d4:c0:5f:67:06:9d:14:75:e6:53:97:fe:
67:0d:15:60:e2:83:d0:68:c3:9b:4b:71:8f:4f:e9:a3:07:ed:
f9:71:6c:54:02:f9:7e:57:f1:d7:e7:d1:8b:7f:e6:cb:3e:34:
c1:fe:a6:2b:a7:b5:d1:b4:be:b3:aa:17:ef:6f:3a:5c:c6:dd:
3e:2b:3b:71:62:e0:54:10:39:ba:d1:64:4d:81:cb:90:22:81:
f6:ff:b2:67:ba:2d:cb:19:03:ad:ff:7f:d5:6b:b6:0e:01:f3:
b4:33:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org