Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7EAB98125811EDBC8EBDF1F1222468.roa
File: 2A7EAB98125811EDBC8EBDF1F1222468.roa (raw, json)
Hash identifier: bZkC1cx5QM+V3OdkfwUubwDpuQ1UKToQPDAXbLs+TgE=
Subject key identifier: 4E:FF:7F:9D:D5:3C:85:05:8B:FC:4C:62:19:D4:04:D3:81:CB:88:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7EAB98125811EDBC8EBDF1F1222468.roa
Signing time: Tue 02 Aug 2022 11:42:20 +0000
ROA not before: Tue 02 Aug 2022 11:42:16 +0000
ROA not after: Wed 26 Oct 2022 11:42:16 +0000
asID: 133861
IP address blocks: 156.245.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5628 (0x15fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:42:16 2022 GMT
Not After : Oct 26 11:42:16 2022 GMT
Subject: CN=62e90d9c-eaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:25:56:02:1f:9e:27:a5:cc:c4:09:23:d6:
43:ff:56:a4:33:50:d0:3e:21:bf:54:81:be:fb:b2:
52:8d:54:18:75:b8:2b:f5:ca:d4:12:a6:29:25:a1:
77:77:bd:4a:8d:67:9f:7a:5d:d3:ef:13:5e:be:aa:
97:bc:92:8d:fb:28:5d:e3:6d:e9:79:81:eb:7a:c2:
59:cd:47:b6:59:ac:38:18:08:02:f8:3c:66:24:88:
43:17:3e:a1:9a:4b:c3:b6:8d:b4:5d:d2:77:ce:75:
b8:d5:71:30:9a:b7:96:bf:c0:52:7f:d9:dc:b3:bb:
46:bb:f6:73:6f:f5:4b:02:b8:49:0f:49:38:87:aa:
2d:b3:14:74:0f:31:d6:01:76:c5:17:38:e6:cb:17:
34:67:bc:af:47:a5:67:b7:09:03:6a:4b:63:ce:2f:
1e:22:26:d2:2e:8c:64:e4:fe:79:2e:c2:1d:ba:d1:
d2:4d:3d:bc:dd:5b:3a:12:7b:fe:e5:1e:5c:2f:4e:
91:ca:7b:52:fd:96:48:b1:05:64:ef:12:8d:e4:52:
fc:ba:9f:9a:0e:5a:56:f2:3e:21:0e:41:d9:18:d9:
d9:53:4e:9d:e2:dd:3f:36:43:87:60:0b:5b:fb:b9:
0e:be:02:ac:f4:5c:4e:69:fd:54:44:b4:04:5a:bc:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:7F:9D:D5:3C:85:05:8B:FC:4C:62:19:D4:04:D3:81:CB:88:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A7EAB98125811EDBC8EBDF1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:da:0c:c8:b3:54:f4:fc:bb:d8:fd:bb:8e:f6:91:2b:c0:a2:
66:68:ea:d5:df:66:04:aa:28:5b:c2:f5:36:cf:99:e8:c9:ec:
ba:7d:4a:1a:19:75:27:a4:ae:f4:ef:97:ef:71:7c:a5:91:b7:
40:a9:1c:cb:80:da:03:69:f3:c9:ef:35:95:e1:68:54:4a:ec:
60:5f:ff:4f:3b:31:10:d0:58:c8:a7:27:8a:5a:b8:53:ec:f5:
19:26:a3:ed:a5:12:4c:f8:48:fa:d7:fd:f0:6c:ad:46:36:cd:
f3:30:36:5f:fe:e3:14:62:ea:44:72:e9:74:d1:3c:58:2c:68:
01:bd:19:af:98:44:94:c0:b6:aa:90:f3:1f:f2:8a:d8:b1:d6:
4a:37:06:c4:01:f8:c8:ca:49:68:fa:8e:2d:47:98:35:37:11:
a2:c0:cb:b3:25:5b:7a:93:d6:17:d6:33:63:52:3f:da:ee:09:
f1:07:13:c2:43:91:30:07:30:46:21:a0:6c:b7:80:e8:f0:9a:
2f:8d:d0:a6:5d:50:f5:ec:de:9f:55:57:85:b6:b5:38:f5:9b:
ca:cd:41:16:dc:66:2b:a1:1a:35:1b:ee:4b:95:9c:ca:51:21:
08:85:8e:8c:8d:1c:e0:d6:a7:b6:31:6f:24:e5:23:92:e2:16:
41:b7:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org