Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD857E4A44111EC87F49BC55A40D577.roa
File: 1CD857E4A44111EC87F49BC55A40D577.roa (raw, json)
Hash identifier: 0U8ngRPPiZ12AHUe4tF7IIXPYDzZB4z4a6FB2e7dNi8=
Subject key identifier: C7:C5:F4:7E:A2:44:97:D2:40:87:5D:03:B5:E1:29:5D:D0:80:A1:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 127D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD857E4A44111EC87F49BC55A40D577.roa
Signing time: Tue 15 Mar 2022 09:20:10 +0000
ROA not before: Tue 15 Mar 2022 09:20:07 +0000
ROA not after: Sat 31 Dec 2022 09:20:07 +0000
asID: 133201
IP address blocks: 156.255.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4733 (0x127d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:20:07 2022 GMT
Not After : Dec 31 09:20:07 2022 GMT
Subject: CN=62305a4a-27c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:a0:5c:0d:72:d5:1e:fd:5a:79:2d:f0:e6:
1c:94:88:59:c2:95:fb:e1:d6:1e:a4:5f:be:0f:12:
93:32:34:9a:55:dc:4c:90:9b:b6:47:ea:2a:1d:71:
d3:27:7b:0b:86:58:65:15:36:26:d3:a8:80:5a:47:
9a:c0:96:95:3a:96:e1:00:2b:16:37:2a:27:18:1e:
29:f0:1a:d1:e4:07:42:9d:f6:15:6e:33:a6:53:4b:
c5:3d:a4:0f:bc:f4:7b:e9:f5:42:1d:2e:98:bc:ea:
92:2a:3f:fc:40:d2:06:07:3d:93:6d:96:d5:18:c8:
79:be:42:29:0d:93:53:4a:c8:e5:a2:8f:09:bb:86:
6e:f0:6c:7c:47:18:15:ce:99:f6:41:aa:4c:f4:99:
9e:9c:b2:5f:9d:9f:b5:58:9d:c1:27:bf:4b:4e:fc:
ba:43:5c:88:35:c7:d0:ba:3a:a2:4c:11:f6:b5:29:
f0:36:30:34:38:1c:48:d6:42:88:26:d7:ad:b2:9f:
0e:47:d1:d8:c9:5a:94:13:d0:69:cc:7f:73:4b:8a:
8a:ca:99:51:03:5c:95:d0:cd:8c:aa:64:5a:32:c7:
63:29:8f:67:a1:d0:64:27:bd:a5:d3:42:32:74:55:
bf:10:05:5b:01:40:82:8b:07:ed:e0:2e:e2:03:76:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:F4:7E:A2:44:97:D2:40:87:5D:03:B5:E1:29:5D:D0:80:A1:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CD857E4A44111EC87F49BC55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:db:ef:69:e0:7c:5f:7b:32:cf:ca:bc:b2:4c:01:0b:a2:97:
b6:63:10:8d:0d:74:fd:2e:d7:98:4d:6b:b4:e0:af:87:6d:7e:
cd:93:81:1e:b5:b4:5f:8d:a6:c9:7f:f2:9c:98:c2:77:0e:6c:
58:39:89:f7:79:1c:f7:49:b0:07:c2:a1:65:15:67:26:12:6c:
f9:20:49:af:08:3d:ee:5f:bc:c2:23:92:81:38:32:01:d8:81:
94:a6:87:17:ad:1f:39:37:59:6e:dd:06:b0:e6:7f:40:89:d5:
66:7e:01:f5:b0:41:98:c9:9c:8b:ed:18:a7:68:68:5f:d8:bb:
6a:e1:3b:1f:7f:8d:d8:62:c7:ec:a0:26:42:e6:2c:3d:63:2b:
9c:7d:7f:bd:01:9b:eb:95:5c:61:90:c0:27:9c:0e:14:3e:c6:
97:43:40:2e:84:03:0b:72:b0:8d:94:0f:a0:d0:02:38:8c:7e:
6f:4c:85:2c:d0:31:72:20:b0:46:b1:04:04:1f:96:c0:ee:80:
2f:35:f0:39:85:a6:a8:d3:2f:35:2e:32:46:88:fa:78:54:d0:
a5:8c:70:54:32:da:2c:ca:a5:4a:e0:ce:b5:5e:de:12:c0:84:
97:3c:43:27:a3:b8:70:a9:0b:e2:c3:ae:66:05:14:f2:71:89:
52:5c:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org