Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3652A2C40BB711ECA37A5B13D8A014CE.roa
File: 3652A2C40BB711ECA37A5B13D8A014CE.roa (raw, json)
Hash identifier: /855Chzt8lYc569PxLYKLCkwXBMOxITtS0/0EGLT9Oc=
Subject key identifier: 66:48:2C:D9:1B:A1:58:84:43:08:CB:35:1B:DA:CC:18:5E:15:C8:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0902
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3652A2C40BB711ECA37A5B13D8A014CE.roa
Signing time: Thu 02 Sep 2021 06:30:06 +0000
ROA not before: Thu 02 Sep 2021 06:30:03 +0000
ROA not after: Thu 05 May 2022 06:30:03 +0000
asID: 135097
IP address blocks: 156.245.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 06:30:03 2021 GMT
Not After : May 5 06:30:03 2022 GMT
Subject: CN=61306f6e-339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:98:22:5d:a9:11:70:88:e5:f1:16:6d:7c:
12:0f:eb:99:22:bb:5a:49:6a:12:3e:e9:b8:87:75:
07:c5:51:32:6f:6b:9e:61:53:43:f8:4b:f8:ce:7e:
4f:6b:de:3f:17:89:63:c6:c6:e0:ce:73:89:8b:ed:
a5:89:ef:b2:73:10:4c:dc:82:ae:fc:bb:23:67:f7:
33:31:7e:61:7c:64:69:61:f4:be:03:31:e0:4e:f3:
62:b3:4e:5e:55:44:f6:1a:58:f5:7a:a4:32:da:cc:
22:9f:e9:1b:3e:df:9f:4b:df:e8:18:7e:9a:6a:3f:
8f:38:79:0c:3d:e9:30:47:66:80:bf:93:2e:f5:0c:
45:37:4a:ce:21:79:a7:67:4b:57:5b:5a:6d:88:da:
6b:1d:05:23:e8:50:98:df:3a:81:2e:b3:2c:e5:62:
5d:e0:be:52:bf:e5:ff:6b:56:42:a3:96:6e:b1:25:
81:50:f3:53:b7:81:0b:58:e7:a1:4b:0d:d5:f9:60:
d2:5a:59:94:8b:8f:68:75:0b:fc:8d:f7:35:7d:db:
1c:e6:06:92:aa:5b:d1:28:63:e6:25:ec:9e:02:e6:
ac:57:92:dd:e3:d7:04:07:89:84:f2:0e:e1:f4:5b:
85:8a:dd:77:65:9c:70:1f:3d:6b:0f:e7:ed:af:5d:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:2C:D9:1B:A1:58:84:43:08:CB:35:1B:DA:CC:18:5E:15:C8:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3652A2C40BB711ECA37A5B13D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:9a:5c:cf:1f:75:3b:fa:32:e7:72:9f:ce:d9:12:49:1e:23:
e0:c7:59:8d:4d:83:e4:95:a2:3c:5f:35:f1:54:db:98:d4:1a:
38:b9:ed:ba:23:6d:a4:cc:fe:83:db:ad:95:ab:34:46:e6:f5:
a1:2c:61:1f:fa:32:97:85:39:83:38:91:3c:f5:05:4a:34:19:
f3:c6:86:cc:c3:88:bf:88:43:c8:67:45:45:aa:b8:f0:12:76:
90:89:a4:bc:c6:b0:4e:f7:ca:73:ae:08:66:c0:15:8f:a9:eb:
dc:87:54:b4:35:87:6b:5c:44:4e:e5:2e:41:8f:e5:a3:d5:f9:
19:64:4b:52:0f:3f:2a:f8:3f:a8:7e:ae:50:ae:f8:60:0b:82:
df:11:d1:a3:30:ac:d9:8e:1f:54:5d:da:e3:c8:1b:05:3f:9f:
b2:27:a7:78:14:73:df:bc:fb:ea:de:ac:20:e6:c3:c1:cf:13:
c4:8a:ba:ba:fc:e2:0e:23:90:59:a7:59:82:a2:97:11:98:12:
82:17:28:4d:96:fe:31:b2:8d:54:02:46:3c:54:9a:aa:ae:69:
db:4d:da:f7:14:07:2c:a7:06:db:7a:f5:7a:1c:e5:6a:e8:fa:
be:bf:36:63:c8:03:c9:71:64:eb:2f:64:ec:69:01:eb:5a:d1:
74:cd:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org