Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1993F436EAF511EB8FA9EA4CD8A014CE.roa
File: 1993F436EAF511EB8FA9EA4CD8A014CE.roa (raw, json)
Hash identifier: TkDgCbjc8i/3D/I++VTLvQcvFfOqtNjvsZ/hX3tyZBg=
Subject key identifier: EA:1B:FC:9A:53:2A:B4:6D:7A:7F:32:29:82:61:F7:94:4F:1C:23:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1993F436EAF511EB8FA9EA4CD8A014CE.roa
Signing time: Thu 22 Jul 2021 14:00:10 +0000
ROA not before: Thu 22 Jul 2021 14:00:05 +0000
ROA not after: Thu 22 Sep 2022 14:00:05 +0000
asID: 1239
IP address blocks: 156.236.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990 (0x7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 14:00:05 2021 GMT
Not After : Sep 22 14:00:05 2022 GMT
Subject: CN=60f979e9-8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:3c:36:0c:5e:64:b7:a5:cb:be:3c:37:a1:
a9:50:cb:23:62:11:19:0a:ef:c8:fa:d4:15:e9:4c:
d1:44:94:46:d6:37:2d:7e:de:37:8b:6a:58:8e:9c:
d2:16:96:ab:13:b3:b5:47:7a:a4:2f:c9:b0:fe:96:
5f:b8:82:de:cf:90:9d:41:8c:7c:c6:43:4b:f3:88:
67:72:28:6f:b6:de:70:72:80:2b:68:0a:f7:65:53:
f7:e0:db:8b:31:9d:34:bb:6b:de:ab:2b:85:7a:2b:
49:ac:ef:7c:bd:43:52:8a:ce:ae:26:97:36:a3:f4:
aa:7f:91:60:4b:a2:d8:be:5c:bf:f7:d4:a2:e0:e7:
75:55:e2:49:d6:63:f8:fd:ab:a7:ee:bb:93:7b:96:
80:f2:64:6c:d6:e3:4c:e5:d4:28:85:bc:2d:52:cb:
22:6b:73:fd:a9:63:2a:a1:5d:d8:70:f9:56:a0:21:
6f:b1:c2:6c:a1:e8:b9:f7:70:71:31:c8:23:49:4f:
07:dc:e5:9a:13:4b:62:4b:43:91:f0:23:4b:aa:4f:
81:2f:28:61:2e:06:97:ef:06:42:9f:c6:4e:b2:2e:
cf:25:d8:be:1b:64:19:84:4e:e7:45:2f:37:26:e4:
6e:bc:b4:96:f7:0f:3c:2d:81:6a:3a:44:48:98:63:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:FC:9A:53:2A:B4:6D:7A:7F:32:29:82:61:F7:94:4F:1C:23:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1993F436EAF511EB8FA9EA4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:19:c5:fb:c8:ce:7a:09:d6:38:62:03:b4:90:21:39:24:3a:
a3:07:b3:cd:ac:aa:be:bf:99:44:01:34:63:8d:b0:d8:35:55:
eb:f8:c8:0d:25:6c:e2:fd:20:a1:e5:26:bb:9f:c7:00:ee:da:
40:e4:b2:bf:8e:6e:cf:70:29:43:47:f3:e9:1c:a5:88:47:b3:
97:a3:f1:68:08:2a:dd:61:4b:56:5d:26:81:1a:a3:57:24:7f:
00:57:a5:06:3b:76:06:25:51:2d:f1:eb:d9:22:8e:f3:92:6d:
0c:86:f5:2d:da:f8:7c:73:81:12:52:e0:aa:64:d2:98:64:51:
2f:88:ca:16:9c:4b:bf:e6:c3:69:0e:d3:a9:58:ea:86:e6:a3:
86:5e:79:a9:1b:49:df:d4:cb:f0:f9:e1:49:8c:aa:5c:b4:18:
ed:82:9d:e5:ef:7f:dd:ec:1e:98:63:99:5c:94:cc:33:89:56:
0e:23:a7:d7:38:90:56:41:1f:c2:60:20:6f:be:1d:74:11:07:
32:a6:bf:3e:ab:92:8a:32:d4:89:37:23:33:c6:4c:b6:da:59:
75:b7:3b:f6:59:26:d7:bf:9e:de:8f:6b:dd:26:f5:03:c7:c7:
de:44:fb:a2:d5:4f:10:7c:b2:68:c8:18:07:43:ed:5a:2f:38:
4a:f7:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org