Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F2DF9A017C11EC92131404D8A014CE.roa
File: 27F2DF9A017C11EC92131404D8A014CE.roa (raw, json)
Hash identifier: sBUstqS+mx/HncTsv/AJC2PjTLaEJicmw9J9QdXPmNo=
Subject key identifier: E6:B4:88:BB:0E:6D:09:01:05:3C:26:64:E1:4A:7B:EB:D3:C1:2C:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F2DF9A017C11EC92131404D8A014CE.roa
Signing time: Fri 20 Aug 2021 06:03:04 +0000
ROA not before: Fri 20 Aug 2021 06:03:00 +0000
ROA not after: Sun 20 Nov 2022 06:03:00 +0000
asID: 135026
IP address blocks: 156.225.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224 (0x8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 06:03:00 2021 GMT
Not After : Nov 20 06:03:00 2022 GMT
Subject: CN=611f4598-d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:d4:20:14:9b:fd:0e:d1:f3:7a:60:42:e6:
95:18:6c:78:13:df:80:2e:0b:2e:a2:07:07:3c:80:
09:4a:e6:77:8f:4b:59:3d:72:ff:86:61:ec:62:b3:
ad:5e:42:cb:86:de:55:5c:e7:3f:5c:ec:f4:02:1b:
b3:64:82:4f:08:9b:ca:52:d1:0f:1a:32:7d:32:c9:
e2:37:bd:28:c0:89:4c:6d:72:e7:47:bb:d4:a2:ad:
d3:11:c1:81:d3:5c:99:9b:5f:12:0b:87:b9:b5:fa:
73:a7:a9:70:6b:01:b9:56:8e:de:56:b2:ea:d8:8b:
5b:f7:1c:6e:94:d7:bc:84:8b:68:d4:39:e0:2b:65:
e3:64:aa:c1:39:0f:aa:d5:c0:dd:40:f4:a6:bf:e1:
a2:fb:23:a7:dd:04:de:b8:28:e8:a7:61:f7:cb:1e:
3d:d7:17:86:96:a5:ae:d1:0a:a6:b5:21:8e:23:45:
d1:fc:8d:a8:f7:98:06:aa:c4:3e:4f:a9:7b:1d:f2:
00:dc:e0:a9:19:f9:1c:a5:e8:53:d5:bc:ea:a2:9c:
0a:8d:6c:9f:86:cd:21:de:b6:bb:db:5e:3e:5a:37:
18:3e:20:44:13:ed:f4:40:0c:bf:4b:b5:50:b9:0f:
9b:c4:66:93:48:1c:96:be:0c:89:57:15:4e:09:4b:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:88:BB:0E:6D:09:01:05:3C:26:64:E1:4A:7B:EB:D3:C1:2C:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27F2DF9A017C11EC92131404D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a7:8f:e4:3b:57:ec:ab:9a:66:b8:c9:47:4c:34:73:9e:3c:
b9:6a:a8:f4:5b:14:1a:42:14:e0:46:dc:3e:20:1b:27:3a:5a:
f2:76:9b:e8:64:70:f7:25:be:a7:b1:94:77:a8:e1:95:da:b8:
ce:42:b9:0f:63:e3:bb:54:09:9a:ed:3e:48:f5:69:a4:80:72:
7b:e3:b8:d6:0d:6f:af:78:e4:dc:14:e1:ee:4b:e7:c3:f3:67:
ee:b7:a0:3b:72:01:24:94:31:e0:7c:2f:fe:d8:fa:e2:0c:0b:
ce:e0:dc:3f:c6:d4:40:f9:bf:b0:84:f3:bc:bd:e5:21:e7:98:
e6:d5:22:fe:25:10:e5:22:fa:9d:a1:74:1a:b0:74:1b:cc:a3:
6f:4b:bf:c7:b0:b5:4f:74:e5:cb:59:65:04:71:20:9b:55:83:
40:24:a2:26:f8:11:49:f5:81:8d:be:bf:f6:f1:0e:90:7a:9a:
c2:09:5e:dd:93:18:17:f7:c3:85:70:cb:44:c8:c4:64:57:b3:
57:35:ab:ff:1e:ce:8f:5c:8c:d8:4c:09:8a:1d:b1:88:1f:91:
26:4d:78:b1:83:6f:85:62:6d:16:7a:f3:3d:c6:10:99:38:ea:
0b:e4:8f:4e:2a:45:c9:de:84:6d:7b:11:18:71:56:dd:6f:17:
e6:05:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org