Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1597A95C017C11ECBAC0D903D8A014CE.roa
File: 1597A95C017C11ECBAC0D903D8A014CE.roa (raw, json)
Hash identifier: iKbyeoPhU3khV0poqy43ho6IS6CXu240HbeS5BGpGOE=
Subject key identifier: 89:DC:4A:4D:4A:E9:3E:3C:CB:B8:82:86:9B:1E:53:F4:22:63:9D:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1597A95C017C11ECBAC0D903D8A014CE.roa
Signing time: Fri 20 Aug 2021 06:02:33 +0000
ROA not before: Fri 20 Aug 2021 06:02:29 +0000
ROA not after: Sun 20 Nov 2022 06:02:29 +0000
asID: 135026
IP address blocks: 156.225.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 06:02:29 2021 GMT
Not After : Nov 20 06:02:29 2022 GMT
Subject: CN=611f4579-d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:89:b6:a5:a3:e6:5c:49:4c:58:e4:3c:b2:
1d:17:45:69:3f:c5:5e:80:4b:3e:62:e4:8e:fc:91:
83:f6:6f:26:23:6b:f0:5d:44:1e:a8:eb:4e:fa:35:
8b:88:8c:59:06:e9:52:7d:f0:fc:b3:7c:09:30:c9:
be:91:06:6a:77:69:62:65:b6:cd:aa:d5:86:51:b5:
4c:97:52:6b:74:04:cb:87:34:5e:4e:b7:5b:85:c8:
95:7d:d6:06:d3:74:e1:90:b7:9a:08:c6:3c:50:07:
0d:c7:6e:ec:82:e6:85:a7:d5:03:9d:fb:85:b6:cb:
d2:a5:10:a6:2e:19:ce:38:54:2c:68:e6:a6:ff:c3:
10:35:dc:ef:ba:3d:90:53:44:fe:6f:b7:09:47:f8:
c8:c8:a0:85:7f:ec:2c:a7:64:6f:fd:47:0b:5b:98:
ee:ef:6c:ce:18:b9:74:a2:eb:b5:82:77:49:3a:3f:
18:fe:a6:97:94:c2:94:16:6f:fb:2e:31:72:6c:4c:
6c:09:37:3d:9f:62:61:e2:c8:f2:5d:31:a2:07:c8:
2d:b2:57:ac:40:8b:da:5f:35:b2:b4:7b:75:41:1a:
86:4d:22:6a:c9:d8:1f:6a:0d:4c:f3:77:e5:51:04:
ab:6c:8a:44:17:2a:e5:b9:67:c2:87:31:a9:23:54:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:4A:4D:4A:E9:3E:3C:CB:B8:82:86:9B:1E:53:F4:22:63:9D:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1597A95C017C11ECBAC0D903D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.5.0/24
Signature Algorithm: sha256WithRSAEncryption
17:20:83:35:23:82:67:2d:69:b6:2b:7b:be:3c:39:87:75:55:
42:45:b3:a2:47:2d:89:7a:4c:f8:01:1c:31:1e:30:5d:d3:55:
c8:d2:6c:6c:ed:2d:16:76:9c:08:31:40:df:ac:94:60:ed:a5:
46:3c:0b:dd:48:40:94:7b:fe:05:2f:8e:00:13:ed:09:4f:7f:
4c:b7:64:3d:c6:e5:0c:31:d4:77:f6:fb:2f:1b:f6:c1:bd:08:
f4:c8:00:60:79:7e:f8:f5:e9:3b:02:b0:b0:14:6a:12:f5:e7:
8c:91:17:ba:fe:1c:b5:6b:d0:d6:d5:e9:3f:a4:01:dc:5a:be:
f4:da:54:31:61:7a:b0:d6:c9:66:2b:ef:1f:fd:ce:8b:7f:a4:
cb:5e:87:c5:b9:90:c6:5d:7f:90:38:e4:fa:5f:9d:59:62:42:
e0:52:17:55:cb:c4:4e:b4:1b:06:19:25:3c:ef:56:2f:06:72:
a5:b2:61:0e:26:1f:35:92:80:fe:d6:06:c8:f7:8b:08:27:79:
17:79:aa:88:91:f3:31:ee:80:1d:34:72:c7:3f:d7:bd:10:25:
d5:d5:54:cf:21:35:67:a2:bb:d8:47:79:cc:5d:ed:cb:77:53:
b1:8b:16:5a:96:61:4d:51:a0:cf:35:22:3d:84:08:d5:45:f8:
66:44:fe:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org