Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18760F66396011EDA3C3E0AEF1222468.roa
File: 18760F66396011EDA3C3E0AEF1222468.roa (raw, json)
Hash identifier: 4HJ4UnGWc/b+cS46YW0vmlR9Tm64lwGr1+hdZmNiBNM=
Subject key identifier: D8:CC:B9:07:AD:D4:94:24:4B:06:C7:A6:4D:65:B0:5C:98:23:40:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1835
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18760F66396011EDA3C3E0AEF1222468.roa
Signing time: Wed 21 Sep 2022 03:47:21 +0000
ROA not before: Wed 21 Sep 2022 03:47:17 +0000
ROA not after: Fri 30 Dec 2022 03:47:17 +0000
asID: 35916
IP address blocks: 156.251.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6197 (0x1835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:47:17 2022 GMT
Not After : Dec 30 03:47:17 2022 GMT
Subject: CN=632a8949-a862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:2e:e4:48:d3:b4:6e:67:8a:86:c2:86:e9:
dd:6c:9d:a5:6a:6b:13:6a:46:5c:4e:de:c0:d0:9b:
93:8b:53:b3:cd:26:3b:ec:4f:c7:a1:8d:43:25:3c:
93:40:b1:a8:13:86:dd:db:b1:8b:0a:13:8f:a9:fe:
81:63:32:0b:7b:bc:0d:ad:30:60:41:ed:c1:d2:3b:
fe:61:e5:ef:8f:55:c7:7e:e7:09:e5:bf:0a:34:9c:
49:ed:eb:82:e8:b4:51:0e:ba:a5:a9:89:ac:8d:3d:
53:66:88:68:36:e3:70:ce:e2:7b:cd:f0:d1:0f:41:
b2:d3:1d:0c:03:a8:10:bb:c6:56:c1:81:b2:33:0e:
b4:29:35:a0:a1:6b:bf:2c:55:29:a6:20:f6:52:74:
c2:e9:e7:76:54:ec:fe:bb:37:d9:77:ad:ea:98:23:
12:57:bb:80:54:32:a0:fb:7a:66:47:dd:70:d9:98:
8a:9d:68:ff:b6:41:cd:51:1c:4b:01:e0:f4:37:8b:
eb:6b:c3:3d:67:97:2d:e2:5e:51:90:08:ac:85:d6:
aa:8c:16:af:22:9d:2d:43:3b:48:e2:d2:da:2e:3f:
38:df:56:19:b8:81:be:30:ec:c5:98:7c:8d:df:99:
16:89:98:99:ff:2f:71:22:71:93:15:64:23:0a:0b:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:B9:07:AD:D4:94:24:4B:06:C7:A6:4D:65:B0:5C:98:23:40:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18760F66396011EDA3C3E0AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.96.0/20
Signature Algorithm: sha256WithRSAEncryption
83:1a:2f:89:2b:45:aa:00:93:6e:40:e6:a7:91:d8:ad:ce:66:
c4:87:aa:d9:15:87:a0:60:ee:ac:e4:f3:0b:9a:90:7e:bd:32:
ff:bd:57:89:f7:74:f4:ec:19:40:fe:53:2f:34:64:88:b4:b1:
9b:44:0b:f8:94:8f:50:ba:42:7b:04:ad:f7:8f:37:a0:ea:3a:
f4:47:a8:ad:de:86:7e:d1:27:0f:c8:5b:90:50:7d:9f:f2:50:
e7:61:f5:21:49:ad:3e:38:a1:27:41:d9:2b:75:75:f0:17:2a:
4d:43:01:38:47:05:47:13:c1:1b:e3:ff:92:28:59:5b:dd:2f:
f1:57:ad:28:a1:04:06:3f:2d:13:ca:ac:bd:34:58:94:6d:91:
b3:51:82:2d:a1:39:6a:83:80:f9:b2:87:42:4e:1e:13:d6:56:
c1:b9:26:fb:9a:51:ca:19:3d:8b:6d:16:05:f9:a8:53:f5:cc:
36:41:fe:b6:0d:84:f1:76:d9:73:a6:46:e3:31:8d:75:d7:06:
f8:4d:d1:14:eb:33:09:31:88:06:c4:cf:d3:52:dd:d9:7f:8e:
47:f2:b2:35:a5:72:87:83:4a:ca:7e:d2:2b:29:ff:af:e1:58:
43:5a:75:bc:b9:81:02:f6:66:b7:c4:51:36:d2:61:6c:16:16:
51:cf:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org