Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D1889E278011EDAFC1D0B6F1222468.roa
File: 25D1889E278011EDAFC1D0B6F1222468.roa (raw, json)
Hash identifier: zsx5i/pT/GvQzXHLYfTi8WZnUn47hjS4sYg82VFHsrg=
Subject key identifier: FA:26:3D:AC:90:D5:2C:5B:46:2C:A4:60:9A:C4:77:94:D8:E7:06:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1739
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D1889E278011EDAFC1D0B6F1222468.roa
Signing time: Mon 29 Aug 2022 09:51:26 +0000
ROA not before: Tue 30 Aug 2022 09:51:23 +0000
ROA not after: Wed 07 Sep 2022 09:51:23 +0000
asID: 1239
IP address blocks: 156.242.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5945 (0x1739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 09:51:23 2022 GMT
Not After : Sep 7 09:51:23 2022 GMT
Subject: CN=630c8c1e-0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:ea:1d:8f:f3:ac:fb:6b:e0:1d:be:2b:43:
2f:7d:9b:a1:34:0d:aa:21:b7:8d:bb:d5:c5:3a:7e:
4b:cc:6c:7b:41:6f:f3:e1:04:13:e9:7c:f4:12:dc:
52:19:fd:88:a0:cb:20:ca:2e:19:ab:db:eb:93:49:
e3:60:16:0f:f6:6d:4f:75:1c:67:79:fb:21:aa:a3:
9f:40:83:2f:39:14:28:55:58:2c:ef:b1:46:36:93:
9a:c8:91:47:3a:69:f0:b9:f9:bd:f4:b6:f0:32:08:
21:f2:27:dc:2d:05:28:2d:17:17:29:2e:30:91:f5:
dd:28:bc:34:b2:b4:ac:bd:5d:b7:6d:26:bc:37:af:
ea:6e:a6:2d:af:bf:d6:a7:1e:06:96:6f:73:dc:73:
29:b8:ca:20:06:d8:c1:c6:65:ae:96:ce:7d:b1:ee:
82:bb:fb:da:ba:56:aa:02:cd:25:27:be:ac:25:0e:
3b:60:9f:c0:8e:43:0b:8d:07:db:ff:86:db:fe:5c:
2e:94:95:f3:2b:0a:66:ce:64:ba:a9:27:29:f4:ec:
19:c1:27:f4:db:f3:1f:c6:98:c0:ba:9d:42:07:35:
cc:5b:40:44:9b:9c:88:cb:dd:6c:42:86:2e:6b:3e:
b3:8f:4c:88:11:11:23:36:e2:77:cb:3c:c7:e4:bd:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:3D:AC:90:D5:2C:5B:46:2C:A4:60:9A:C4:77:94:D8:E7:06:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D1889E278011EDAFC1D0B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.64.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:f6:c4:0e:42:2c:c0:9c:6f:e9:f4:65:4b:0a:5f:d9:a2:ec:
5d:1c:31:55:6a:99:52:c8:df:fd:80:b2:83:da:4e:e2:a8:2e:
c9:fa:f8:b4:03:1a:fb:27:7f:6e:dc:7f:e4:f7:b7:ce:a9:0e:
c3:bc:26:19:38:05:f1:77:91:f6:bc:c3:df:a6:41:66:00:42:
aa:96:a8:88:ee:02:2b:5f:1e:75:66:44:bf:84:5f:12:b3:f8:
94:4c:c9:3d:a3:53:1f:68:47:f0:3b:35:ef:51:4e:d3:6e:97:
5b:3c:0a:95:c2:0c:5c:66:ea:5a:d5:f5:31:84:5d:51:71:73:
fb:76:60:a7:1b:d5:fe:c7:39:da:78:52:91:0a:c0:3d:3c:d9:
4a:3c:61:fc:95:83:1b:1a:8e:97:b2:98:cf:54:f7:1d:8c:e4:
e6:ff:47:98:9b:16:35:32:7f:7d:b7:b3:86:66:c2:32:6c:d8:
b8:9d:2f:d4:86:43:ef:a8:8c:f5:34:b6:49:39:9e:50:8d:63:
8c:d3:62:00:a6:74:7a:a8:e5:5c:f4:7b:d6:6e:3e:0c:36:dd:
89:58:e9:df:b5:94:aa:43:18:e2:b5:6a:f6:87:12:f0:0c:c2:
86:29:1e:2e:be:67:a3:6d:1a:6e:c8:1a:0b:ea:dd:be:98:54:
1e:e5:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org