Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12876B0E693B11EC8E1AF68D5A40D577.roa
File: 12876B0E693B11EC8E1AF68D5A40D577.roa (raw, json)
Hash identifier: 0ciVe5hExE4s7CsUA8UWgbaz6QpqXuk1gZC3hI6PijY=
Subject key identifier: 8D:1D:66:8C:FA:4D:32:84:0B:FF:B7:B8:14:8D:82:14:2B:34:2C:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1134
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12876B0E693B11EC8E1AF68D5A40D577.roa
Signing time: Thu 30 Dec 2021 06:38:18 +0000
ROA not before: Thu 30 Dec 2021 06:38:14 +0000
ROA not after: Tue 30 Aug 2022 06:38:14 +0000
asID: 1239
IP address blocks: 156.231.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4404 (0x1134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 30 06:38:14 2021 GMT
Not After : Aug 30 06:38:14 2022 GMT
Subject: CN=61cd53da-927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:e6:44:c4:51:36:de:93:89:5b:dc:1d:97:
be:c7:da:dd:30:f5:d3:1c:5b:eb:0a:d8:56:55:15:
1a:35:c3:6e:01:87:8b:71:c8:41:25:ea:14:12:4d:
3e:1d:8c:6b:3e:d6:14:08:3d:19:a5:64:0a:02:c3:
fb:f2:e0:7e:75:2e:84:32:5f:ee:3b:a2:18:4a:0d:
96:af:ef:b3:0c:66:93:1e:62:87:4e:04:21:8d:95:
8e:0a:6c:64:fc:41:8b:d4:74:66:f5:29:7f:db:df:
20:05:0d:9f:fe:1b:e8:76:64:7c:cc:da:5f:9c:38:
78:17:67:09:3c:ff:c0:24:33:59:d8:83:e0:73:24:
6a:a7:2c:58:c7:3c:ac:8a:46:4f:a5:66:ed:a4:5c:
10:04:41:0d:be:a7:97:22:96:9a:2d:66:b3:93:57:
0e:67:5d:c2:aa:da:ee:63:41:f2:6d:0b:f4:77:97:
a1:31:1d:0f:88:a8:1f:4e:21:03:d4:d0:f7:ce:9a:
28:8c:b4:da:a4:fc:e4:2d:e0:12:6f:04:f2:99:ad:
21:49:29:0d:fd:6e:1b:d3:3a:f5:95:44:27:9d:d2:
b6:c7:7b:35:a5:24:9f:3d:f8:2d:6f:f1:99:34:d3:
e2:1b:57:0f:d4:62:80:2b:66:08:c6:71:5a:d4:22:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:66:8C:FA:4D:32:84:0B:FF:B7:B8:14:8D:82:14:2B:34:2C:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12876B0E693B11EC8E1AF68D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/20
Signature Algorithm: sha256WithRSAEncryption
73:e0:59:4b:25:c9:e3:cb:50:7b:d5:0f:e4:f0:2f:e2:c1:20:
fd:74:8b:84:1e:57:34:a9:88:ce:dd:a2:90:f4:31:1e:ee:aa:
45:5b:9c:b2:77:7b:bd:aa:fc:8f:16:4e:c2:28:8b:f3:7f:44:
e6:e9:4c:c4:ec:95:6c:33:04:9f:39:8f:61:6c:97:9f:f5:3f:
98:28:50:3d:9c:e4:76:1d:8f:33:0f:af:7c:55:f1:88:07:7f:
ff:71:b7:6e:7f:b0:b4:7b:34:d6:f4:0b:d4:de:1c:19:21:fa:
d5:8f:fe:3c:da:91:7c:34:09:19:83:ed:8b:15:60:50:69:f2:
88:28:a2:ad:1a:61:b4:91:9f:c8:4b:fd:9e:77:9b:84:05:a1:
5b:d2:3e:5d:92:aa:c6:b8:54:c7:2b:a6:8c:d0:a6:ea:2b:0c:
87:c0:6a:c8:80:b3:c5:5e:e3:e3:ce:77:24:81:a3:1c:81:35:
c6:ba:68:5d:de:60:d6:7d:85:1b:55:dd:74:0f:1e:9c:3a:1f:
b2:9b:d0:c4:1d:fe:d1:0b:69:58:74:f4:1d:c8:a3:f7:91:a1:
64:8e:fc:ae:95:a0:31:56:75:f6:98:42:93:ee:8a:93:f4:d9:
a8:9c:f6:de:ad:28:10:a6:0c:70:56:11:76:f7:83:0a:3a:9b:
60:31:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org