Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2180C1124C3711ECBE93CD14D8A014CE.roa
File: 2180C1124C3711ECBE93CD14D8A014CE.roa (raw, json)
Hash identifier: ucAGmVlebeuPjpRouwpnFg+xOXDxZGF9ChZqmMd63Jk=
Subject key identifier: 4F:44:18:28:86:83:69:31:4B:6A:01:0B:31:26:D5:FB:68:F1:65:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0F82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2180C1124C3711ECBE93CD14D8A014CE.roa
Signing time: Tue 23 Nov 2021 08:27:01 +0000
ROA not before: Tue 23 Nov 2021 08:26:58 +0000
ROA not after: Wed 23 Nov 2022 08:26:58 +0000
asID: 54600
IP address blocks: 156.238.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3970 (0xf82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 23 08:26:58 2021 GMT
Not After : Nov 23 08:26:58 2022 GMT
Subject: CN=619ca5d5-02d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:21:78:a8:94:74:0d:49:77:ea:c6:36:96:
81:f8:d2:4f:ff:b9:aa:9f:ec:4f:b3:b2:b2:e4:f9:
aa:4f:80:45:e8:46:8e:a0:17:16:e5:f4:6e:ef:0c:
25:99:00:e1:28:3e:ff:12:fc:8c:65:17:33:99:73:
83:2a:ff:42:35:04:a2:f9:23:e6:cf:07:3f:c5:2e:
de:c7:90:d2:23:77:69:c9:1e:a3:26:12:44:37:f2:
7d:6e:10:4e:3d:91:e8:ef:dd:df:e4:be:92:69:20:
7e:94:ae:44:d0:17:a7:28:04:ca:56:cd:26:22:cf:
86:23:37:e3:5e:3c:62:4a:08:f7:11:8b:ed:91:e7:
6a:17:3a:32:5b:a7:75:8f:90:14:53:cb:36:c3:1a:
a5:41:b5:0b:5e:cd:66:aa:5f:9b:39:01:ae:bb:fe:
fa:8d:31:26:d4:1b:18:e4:11:7e:e3:6c:9c:37:dc:
42:cc:ad:d3:8c:1e:d7:56:f9:e9:f3:9d:e0:51:6c:
5c:04:49:78:1b:22:03:10:1f:26:1c:74:58:4e:93:
58:8e:b2:09:2b:02:39:10:17:dd:36:3b:e1:53:0c:
7d:a0:25:55:08:f1:17:bb:e0:c6:0a:e5:12:a0:e9:
21:8d:fe:f6:bc:75:2e:4d:1f:82:5c:58:0d:23:6e:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:18:28:86:83:69:31:4B:6A:01:0B:31:26:D5:FB:68:F1:65:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2180C1124C3711ECBE93CD14D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.35.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0c:1a:20:b7:e0:09:b9:8d:01:87:00:cc:52:82:fb:94:f7:
77:6c:83:37:a7:00:af:e2:a7:67:ea:e4:f3:c6:e3:99:a8:76:
a6:f1:d7:cd:ec:a9:76:94:ef:01:ed:97:ea:f5:3c:80:e1:89:
4b:8f:3e:ab:94:ec:dc:3f:92:db:88:1c:a2:fa:c3:9c:d3:4f:
06:9a:69:1b:9b:57:d5:28:1a:af:7a:fe:db:43:7c:31:01:34:
78:39:9c:96:09:54:69:c0:b0:c4:eb:ff:7c:c2:35:57:70:68:
1e:a9:7a:e6:e2:9b:1f:cb:33:ce:db:84:b3:f5:70:7b:10:83:
fc:f4:43:61:21:d2:8a:f7:98:00:92:e6:49:a1:50:63:30:4f:
2c:75:19:b0:4a:3b:da:f5:16:4c:68:98:4e:2c:1f:35:4b:1f:
a8:a5:80:a0:1a:f1:03:f9:5b:fd:f8:f8:e2:5e:d3:d5:a1:c1:
0d:c5:8e:93:41:2f:b0:7f:3f:db:21:b0:f4:dc:a5:10:f1:81:
97:df:91:58:e9:f0:5a:9d:71:47:e2:c8:8f:5b:87:cc:51:28:
02:78:a9:1f:86:5f:2f:36:db:15:d8:9a:9c:54:b4:fc:80:d2:
d1:e3:21:17:a8:df:6e:46:67:91:3d:07:c8:12:1a:fd:29:6c:
aa:5b:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org