Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C9BC40DDA511EB821F2443F8AEA228.roa
File: 28C9BC40DDA511EB821F2443F8AEA228.roa (raw, json)
Hash identifier: 5z2bpBdMtiHF1AMujLyMOXel5nXtRTPQ7FJpwtc2qVA=
Subject key identifier: B2:1A:F2:E3:B9:1A:30:57:9A:14:EF:E8:DA:08:FE:A9:88:F9:23:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C9BC40DDA511EB821F2443F8AEA228.roa
Signing time: Mon 05 Jul 2021 15:24:59 +0000
ROA not before: Mon 05 Jul 2021 15:24:53 +0000
ROA not after: Wed 20 Apr 2022 15:24:53 +0000
asID: 22773
IP address blocks: 45.199.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:24:53 2021 GMT
Not After : Apr 20 15:24:53 2022 GMT
Subject: CN=60e3244b-13d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:9c:75:47:d6:3f:ba:36:cd:c3:6a:15:68:
4a:0b:84:5f:84:cf:86:b1:aa:47:8c:76:b5:ec:b0:
9a:27:87:f8:99:f6:40:63:8c:a1:e7:5b:33:a2:e0:
33:86:8d:c9:50:53:e9:63:62:0e:4a:b3:b9:30:30:
eb:61:9c:3f:b8:68:2f:44:6f:79:8f:c0:30:2b:bd:
98:94:a6:31:29:59:44:3f:da:9f:cd:16:3d:57:52:
9c:c5:c7:e8:09:fb:56:46:25:88:b7:e1:f3:6e:0c:
72:22:0e:15:1c:03:b9:f9:13:c8:5f:f3:6a:84:f9:
22:77:9c:43:52:2d:e6:aa:dc:1a:38:fe:39:e4:e4:
83:ba:84:18:57:82:97:1d:8c:27:46:82:59:b3:09:
f2:7e:7b:07:e7:be:81:70:43:ed:52:c4:03:63:24:
22:a5:8b:ff:ca:b9:a4:26:f0:be:03:00:b2:66:bd:
8f:6a:df:1a:ba:95:c4:7d:64:c3:a6:68:55:71:af:
25:86:88:9e:39:ed:2f:71:9d:10:a5:02:77:d1:7d:
d0:1f:93:49:40:c4:59:1a:0f:57:e6:a7:3d:4f:a1:
00:0a:d1:c8:66:75:b6:9b:0b:12:f2:7d:7f:f7:43:
a8:49:4a:1e:31:6c:9d:f6:94:04:9f:34:07:9a:37:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:F2:E3:B9:1A:30:57:9A:14:EF:E8:DA:08:FE:A9:88:F9:23:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C9BC40DDA511EB821F2443F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.156.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b5:ce:e6:5d:ef:66:1a:ac:da:a4:50:a4:f6:00:07:2a:97:
8c:36:b6:e7:c9:5a:53:3f:b1:9f:ad:89:ec:e0:0c:4c:e9:88:
70:33:c0:ad:d3:1a:06:32:34:4a:63:0c:38:80:b5:47:9e:28:
0a:08:f0:2f:6e:b9:d6:cf:fb:74:f2:2b:5b:dd:61:8e:66:84:
13:05:78:0a:d6:78:d2:8d:74:87:76:33:2b:3c:1d:04:d2:47:
ad:4d:32:c6:65:18:de:65:27:81:89:70:d6:6b:cb:7b:3c:75:
38:a1:a0:bf:52:7f:f7:49:a7:49:1a:d4:ec:87:6f:74:7c:65:
4e:7f:54:26:03:e4:04:d9:8b:9a:11:fb:e6:98:2f:f0:c8:d5:
a7:7d:2b:5d:23:a6:16:ed:3b:c5:02:75:e6:c4:10:e1:c8:b1:
88:89:f3:4c:b8:5b:49:c9:e8:c1:e9:46:34:94:bd:b3:1e:ab:
92:9e:8d:d1:26:5a:7a:f3:3a:32:9a:b8:c6:b5:0a:4b:6e:08:
ec:35:95:50:a9:34:b6:d7:37:54:1c:8e:c0:53:75:ba:f7:a8:
4e:3f:53:f4:83:65:5e:14:20:73:a7:3f:3f:64:63:59:c7:b0:
99:f7:9a:cf:be:8c:29:97:ef:56:6c:f3:e9:42:65:60:7d:86:
a0:98:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org