Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20367890125911EDB3BF1BF5F1222468.roa
File: 20367890125911EDB3BF1BF5F1222468.roa (raw, json)
Hash identifier: jF4xAeNIUBi/+KI/dXUEc+uSGkhNvDyWYbvzG/ikj1E=
Subject key identifier: E7:32:2B:5B:66:96:15:9A:CC:52:5F:86:DF:1D:8F:0B:D7:81:B1:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 160E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20367890125911EDB3BF1BF5F1222468.roa
Signing time: Tue 02 Aug 2022 11:49:12 +0000
ROA not before: Tue 02 Aug 2022 11:49:09 +0000
ROA not after: Wed 26 Oct 2022 11:49:09 +0000
asID: 133861
IP address blocks: 156.245.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5646 (0x160e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:49:09 2022 GMT
Not After : Oct 26 11:49:09 2022 GMT
Subject: CN=62e90f38-39a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:a7:86:b5:2b:b8:6f:d1:8f:36:db:84:8a:
ce:9b:70:b8:8d:93:7f:f0:df:21:28:fa:1f:e6:f5:
a0:b4:9d:ef:a4:2c:a4:8d:02:c7:2f:52:4b:3f:8e:
ab:98:12:64:15:cc:ac:37:c4:d0:18:3d:0b:03:50:
38:94:b5:bd:37:52:db:c2:b5:07:87:8e:d3:5f:c3:
b3:58:52:3b:21:9f:fe:4c:a3:0a:ae:41:d4:d2:96:
68:62:28:d2:c7:d0:4a:2a:07:18:72:8d:ca:4a:99:
f2:bb:6d:73:24:89:04:d6:ac:41:eb:3f:a8:52:fa:
4e:79:cc:64:11:41:35:c3:4a:0b:fb:f7:14:a9:b4:
23:5b:26:98:44:d9:77:be:88:66:a2:39:db:a6:14:
c4:c2:e9:ec:b0:e9:e9:ad:84:e0:62:29:5f:4e:0d:
f5:f2:3f:4b:65:b3:34:2c:ee:ae:e3:3d:80:3b:1d:
8a:0d:ff:a8:93:66:15:6d:3c:56:73:2f:0f:1a:75:
25:b9:0a:3e:ef:0b:ec:9a:ae:1d:3a:96:5b:22:7a:
7d:88:1b:a5:9a:12:b3:f4:10:1d:c3:e6:48:a9:50:
d2:6d:b6:d2:0a:55:f5:7c:33:08:2b:07:4c:b7:ca:
4c:3a:0a:a7:fa:cb:4c:8c:f2:f1:37:85:6b:8a:8f:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:2B:5B:66:96:15:9A:CC:52:5F:86:DF:1D:8F:0B:D7:81:B1:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20367890125911EDB3BF1BF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8c:1d:ff:39:f1:22:52:b7:cf:ec:5d:a9:cc:4f:23:39:a7:
f3:9e:a9:0c:e0:8b:8a:cf:68:30:c1:e4:c4:83:8a:38:54:05:
47:b1:a6:ee:87:bc:98:4f:91:df:42:40:d5:71:47:1f:b6:33:
9e:57:b9:dc:18:0f:a5:3c:f8:66:80:f5:3e:40:ec:6c:4d:24:
48:02:fa:d0:e8:c9:11:10:b1:b1:bf:63:b6:2e:bb:5e:5f:64:
78:2a:6d:2d:0a:17:b7:86:22:dc:cb:57:d3:25:3d:79:ab:33:
38:17:e1:b8:f3:78:06:c2:0c:38:d9:d0:21:30:5a:d6:78:38:
4e:06:0b:e5:e8:71:fc:27:bd:25:c2:85:1b:03:3b:a4:5a:e1:
82:10:39:a7:0e:f5:5f:0d:13:53:a4:27:d3:c7:6e:65:9c:3e:
7f:98:17:f2:be:3f:53:7f:dc:e0:a2:50:54:61:b3:df:b2:91:
c9:ae:b2:13:40:28:26:ca:d7:47:cd:a0:a9:17:5c:46:cb:e6:
cc:0d:0b:95:a1:95:9e:50:fd:51:aa:91:23:6e:b2:23:cd:5f:
fa:7a:2d:69:18:7c:f4:84:33:1a:30:c3:9d:fb:df:69:d4:81:
dd:3f:0a:aa:9b:cc:06:a7:44:e9:f4:d5:8e:a0:ad:68:9b:16:
e3:8d:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org