Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/375FC248E24C11ECB7E749CFF1222468.roa
File: 375FC248E24C11ECB7E749CFF1222468.roa (raw, json)
Hash identifier: mJ6lnofPgqbT9ZpyAYJGWEF50uxLxmaDXzgXklDzsNE=
Subject key identifier: EF:EC:8C:A3:2E:90:B9:E2:C5:49:4A:87:3A:ED:5B:02:C2:B8:4F:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1436
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/375FC248E24C11ECB7E749CFF1222468.roa
Signing time: Thu 02 Jun 2022 08:15:52 +0000
ROA not before: Thu 02 Jun 2022 08:15:48 +0000
ROA not after: Fri 30 Jun 2023 08:15:48 +0000
asID: 137263
IP address blocks: 156.245.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5174 (0x1436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 08:15:48 2022 GMT
Not After : Jun 30 08:15:48 2023 GMT
Subject: CN=629871b8-b49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:2e:a8:b4:fb:e1:e6:8a:52:7d:53:7e:29:
70:54:35:a8:5e:35:b4:ab:fb:ce:25:1f:c2:f4:bf:
1e:17:72:bc:dd:ad:a4:22:83:bb:86:75:83:88:a6:
76:b6:48:4c:d2:f3:ab:69:39:f9:14:56:72:21:53:
b9:05:e4:31:cd:b6:da:79:3a:23:54:68:97:3a:15:
a7:38:05:ae:fa:b1:72:69:5a:2b:68:a3:e7:c1:ce:
1f:f1:fa:f0:f1:aa:f5:e7:0f:f1:af:f1:8d:f2:01:
6f:fd:69:8d:6a:89:03:a7:58:81:57:c3:42:28:0a:
bf:cd:7d:ed:ac:c5:a1:84:55:ee:8c:d4:1a:c0:39:
19:79:70:e6:96:86:0e:33:8b:ba:44:9f:42:ce:c2:
f3:12:a8:33:3f:83:b8:58:08:2e:97:17:08:34:ee:
03:38:d2:41:01:6c:74:d3:cc:ac:cb:1a:d0:57:83:
80:5c:5a:52:cc:bf:e5:5a:75:13:32:f1:07:73:ed:
ba:44:34:7f:fc:d8:0e:0c:2b:9a:a2:31:b4:db:e3:
62:66:38:f8:39:c3:24:07:a2:29:83:15:92:dd:88:
17:ac:1f:3d:54:92:57:c1:8d:83:74:65:31:15:33:
7d:5f:e2:03:f7:1f:58:22:d8:cb:3b:54:ea:36:a8:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:8C:A3:2E:90:B9:E2:C5:49:4A:87:3A:ED:5B:02:C2:B8:4F:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/375FC248E24C11ECB7E749CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.2.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a9:98:31:a8:9b:40:29:a2:6e:d3:be:ab:42:64:ed:5a:1d:
65:d7:e5:2b:c4:d0:c5:2e:f2:bb:0c:40:6e:40:41:ab:0a:be:
84:e6:d2:02:9d:42:c6:de:fa:55:a1:e0:3f:a6:ea:7c:ee:42:
a2:54:a4:0e:19:50:58:18:ad:17:03:19:06:97:40:2b:5c:c0:
64:e4:fc:89:33:83:ce:8e:4d:f0:82:eb:fc:53:38:ee:08:89:
d1:7d:7e:f6:d1:4c:4e:1d:7b:93:dd:77:89:cd:13:0b:73:d9:
00:6f:44:ae:64:39:4a:fd:d6:86:07:d9:5a:c8:c0:3a:37:cc:
9c:94:40:4b:3a:b6:03:cd:56:84:bf:90:7d:3e:91:67:04:25:
28:8f:8c:15:cd:15:42:c9:67:58:f7:57:3c:6f:d1:5a:82:11:
6d:c8:56:a8:6f:76:96:64:fc:94:dc:9d:99:7f:22:0b:b9:62:
e6:b4:50:c9:22:e4:aa:84:0f:e9:9b:5a:24:79:cc:2e:17:32:
93:c0:21:df:af:31:d4:31:bd:d4:32:83:91:0f:e8:bc:fe:63:
ff:20:d8:fc:71:ec:6a:de:19:64:89:e8:d0:8d:86:66:05:6e:
9c:cd:09:3d:88:bb:e5:ce:7c:50:f8:ba:bb:15:77:01:a5:6d:
3f:31:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org