Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E77DC6EAF511EB8B9D164DD8A014CE.roa
File: 24E77DC6EAF511EB8B9D164DD8A014CE.roa (raw, json)
Hash identifier: 2WFH+41kommNAHagFFkvNdjkEqG+sdqGRnB39fS/Kyk=
Subject key identifier: 75:2A:2B:E0:BB:AA:7E:B1:04:75:E3:31:33:BF:A5:99:0D:65:03:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E77DC6EAF511EB8B9D164DD8A014CE.roa
Signing time: Thu 22 Jul 2021 14:00:29 +0000
ROA not before: Thu 22 Jul 2021 14:00:23 +0000
ROA not after: Thu 22 Sep 2022 14:00:23 +0000
asID: 1239
IP address blocks: 156.236.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 14:00:23 2021 GMT
Not After : Sep 22 14:00:23 2022 GMT
Subject: CN=60f979fc-d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:4b:21:33:6d:33:63:54:8a:c0:4a:f5:c2:
fe:4e:86:b9:b5:22:6e:96:c2:c5:7e:b4:5f:5e:a1:
2d:40:34:80:13:2d:50:93:3e:79:78:36:20:c0:ea:
f2:ad:ba:d2:29:b9:d4:b1:ee:f1:08:04:2d:8e:d3:
2c:b7:b3:76:6f:9a:9a:2e:cd:a3:7d:23:7a:39:9d:
9a:5d:4c:9f:6c:51:59:9d:da:b0:1e:d5:1e:45:26:
e9:a4:ec:24:63:c8:8d:4a:5d:4c:0f:b1:be:73:da:
e9:5a:70:bc:74:f4:d8:e1:7e:4a:86:89:67:de:ea:
2d:3c:0d:da:01:76:0b:61:45:e7:45:9a:9e:dd:65:
8a:96:1b:0d:0d:6c:af:3e:c5:e5:bf:94:3c:61:60:
46:f9:86:c5:5e:0f:7a:ba:6f:a9:0f:b2:df:e4:00:
c9:e9:8f:55:13:d9:1e:f3:2b:5a:37:4d:ad:da:58:
65:6d:eb:0f:ce:47:7a:e4:97:fc:36:1f:f4:e8:98:
de:40:a9:9a:71:25:ce:43:57:8f:97:32:92:1c:e7:
c1:b2:c2:a6:be:4a:52:41:eb:0e:ba:55:13:d4:36:
9f:c5:a9:78:61:cc:9a:83:0d:77:f5:b2:10:aa:07:
5f:4b:45:b6:75:0e:c7:9b:ee:87:1e:ab:4b:15:88:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:2B:E0:BB:AA:7E:B1:04:75:E3:31:33:BF:A5:99:0D:65:03:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E77DC6EAF511EB8B9D164DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ef:90:7e:2c:57:75:4a:30:f7:13:62:2c:ef:74:e0:02:81:
0e:91:51:89:b8:ae:35:89:d6:72:ab:a7:5a:7b:b3:ff:bd:87:
d3:e9:bc:b4:87:49:68:0b:47:1e:4f:f3:be:11:c7:8c:04:25:
41:5c:0f:87:32:e4:6a:db:ea:d8:99:51:dd:bd:c1:3c:74:d9:
bc:c1:16:fb:c7:b2:44:33:42:06:7c:79:b5:a1:1e:86:b5:9f:
e6:e4:50:db:75:a2:d3:96:bb:08:da:49:34:9c:ce:72:02:72:
94:0c:a5:a8:b4:e3:cf:5d:08:34:72:5a:44:29:97:b1:48:61:
5e:24:f3:d7:cb:7a:ce:5b:07:5c:0b:ad:f0:0a:7b:c8:f2:42:
43:61:3e:2a:8f:c4:f4:5c:0c:98:11:c7:8d:64:d8:4a:90:17:
eb:09:56:e3:a2:49:40:2d:ab:26:22:c2:e5:1b:4c:62:65:fa:
31:82:46:c8:b9:95:e5:cf:3a:ab:3b:db:2e:c3:77:08:46:59:
39:a5:53:e2:d7:8e:af:6c:7d:97:75:30:d7:74:a0:fc:3a:52:
84:fb:98:f0:78:9e:15:49:1a:0f:16:b4:14:c1:7e:12:8c:ad:
b8:e8:03:80:cc:d6:37:6e:9b:da:4c:83:5a:c7:e1:55:26:35:
d2:e5:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org