Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15CB84808BA111EB83AF8F7EF8AEA228.roa
File: 15CB84808BA111EB83AF8F7EF8AEA228.roa (raw, json)
Hash identifier: IW6nmCEx79nBpj4aRIl/b0vyISDRhNH7+ocuha3EBHE=
Subject key identifier: 5F:30:F8:6C:C7:F9:72:42:3F:13:3C:2E:E5:06:9B:8D:2A:8D:F6:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0527
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15CB84808BA111EB83AF8F7EF8AEA228.roa
Signing time: Tue 23 Mar 2021 06:29:14 +0000
ROA not before: Tue 23 Mar 2021 06:29:09 +0000
ROA not after: Mon 23 May 2022 06:29:09 +0000
asID: 134963
IP address blocks: 156.240.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 06:29:09 2021 GMT
Not After : May 23 06:29:09 2022 GMT
Subject: CN=60598aba-e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:af:37:5c:d6:eb:9f:7c:7e:f3:fd:2b:b7:
99:45:16:fe:02:cc:6a:c5:ae:e6:4e:6d:10:74:5f:
81:96:12:d9:54:00:6f:49:5b:12:db:fd:cf:24:ce:
68:b4:af:9b:3d:eb:00:6c:73:c2:bb:96:a8:94:cc:
7d:45:e1:c8:8c:e1:14:d7:8c:13:12:af:d4:9c:7a:
a5:a1:17:54:d9:23:14:7f:64:40:52:02:13:75:e5:
cf:b1:a4:37:4f:f7:af:f0:d4:e3:9b:74:e6:6a:64:
31:6e:22:d4:2a:2e:aa:4e:81:a5:95:02:bb:5c:08:
fb:a4:60:32:93:4a:6c:75:9b:4e:7c:f6:83:f0:7c:
fc:74:5e:5b:3b:da:f0:fa:95:5a:b6:dc:bf:48:2e:
9e:d2:1f:6c:46:24:d0:78:30:c2:0a:53:f7:b2:af:
05:8d:f1:1e:60:e7:9a:77:8d:a5:6c:76:e2:84:a5:
23:d7:d0:f1:9e:ae:59:10:34:87:38:3f:24:cc:14:
01:55:3a:c2:0e:e5:d9:14:7c:35:61:f9:ba:cd:2e:
fb:ba:6b:ae:b9:89:97:64:20:66:5a:99:e3:c6:dd:
d7:e0:ed:19:8e:c9:c7:06:7d:6f:b2:08:8c:94:1c:
4e:6b:4c:a2:1c:a0:95:c1:06:47:7f:cb:19:4e:7e:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:F8:6C:C7:F9:72:42:3F:13:3C:2E:E5:06:9B:8D:2A:8D:F6:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15CB84808BA111EB83AF8F7EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.100.0/22
Signature Algorithm: sha256WithRSAEncryption
82:fa:d7:d7:3e:99:8d:d8:4b:4c:24:f7:4d:90:1e:1c:2f:88:
b4:51:48:04:3f:f8:78:be:f1:a8:bc:94:cd:52:fd:ff:c5:0b:
aa:ee:cd:8d:e9:d7:ca:81:1b:f2:b8:ed:0c:cf:c1:d1:4f:66:
c3:ec:aa:a8:84:4e:f3:f0:f5:a3:1b:09:00:fe:b7:3f:96:1d:
02:df:43:7f:19:e5:7f:35:17:a2:f3:39:6d:f3:68:7c:f0:54:
98:13:0a:e0:e2:ab:43:53:0a:4d:2b:2c:52:fa:d6:2a:ce:00:
2f:6b:85:69:7b:a2:07:c5:5e:d4:b4:1a:76:9d:91:68:18:20:
e1:6a:d4:92:88:79:8b:cd:e2:c2:d4:14:3d:bb:e4:80:5e:08:
09:9b:6b:93:81:a6:96:dc:05:9c:d0:8b:76:63:9e:d7:61:c0:
b7:d1:af:70:e0:91:f9:ee:c9:c7:fa:8d:e8:77:6c:1a:c8:89:
c4:1a:55:46:68:0d:63:12:e7:56:1e:bb:4a:54:a8:4c:1c:fb:
ec:ee:86:da:c6:08:2e:3e:c1:5b:0d:72:c9:ef:e1:59:26:60:
c7:58:bc:b3:f9:43:70:78:90:0b:aa:af:2a:ae:cf:a6:ab:d7:
87:3a:10:5d:52:09:93:44:27:cf:4f:00:be:b6:94:db:fe:b6:
f1:ca:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org