Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37788264278011ED9EF7FAB6F1222468.roa
File: 37788264278011ED9EF7FAB6F1222468.roa (raw, json)
Hash identifier: g7NQGYBnRVIam496RiXleEU0KmddNVk2Vnn0eewL3hU=
Subject key identifier: EB:18:8A:66:5D:F6:D2:AF:8E:AC:66:EB:E3:95:D5:30:AD:AE:F9:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 173B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37788264278011ED9EF7FAB6F1222468.roa
Signing time: Mon 29 Aug 2022 09:51:56 +0000
ROA not before: Tue 30 Aug 2022 09:51:52 +0000
ROA not after: Wed 07 Sep 2022 09:51:52 +0000
asID: 1239
IP address blocks: 156.242.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5947 (0x173b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 09:51:52 2022 GMT
Not After : Sep 7 09:51:52 2022 GMT
Subject: CN=630c8c3c-dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:e6:04:0c:2a:82:42:68:62:7a:db:de:01:
6c:4c:5b:d5:82:6a:41:41:64:8c:3f:0f:6c:9f:b0:
e0:d4:2f:b5:60:e9:f3:a8:9c:4c:9a:71:12:ec:26:
21:92:13:0e:61:41:00:a7:0d:b2:09:36:60:d2:97:
7c:60:c2:42:d1:91:9c:ac:aa:e0:6c:93:e7:94:a2:
06:f2:7c:d3:7e:36:7b:23:ad:71:e4:90:3a:b2:b4:
da:ee:5d:97:c4:5a:53:e9:68:a2:00:27:fb:07:f8:
a0:94:cb:8a:c7:a0:93:2a:72:9c:49:ed:15:1f:67:
27:80:65:27:f6:28:21:61:3f:e5:5c:73:43:37:b3:
1d:c3:e3:41:2d:ef:3e:99:72:d8:17:fe:88:c2:9f:
70:88:43:ce:6e:b6:42:d0:22:26:39:2f:f2:82:ac:
4b:f8:18:9d:27:76:8c:19:b5:c1:b6:d8:b7:26:18:
68:ea:44:ee:d8:d4:6c:38:4a:43:71:cc:29:d3:e9:
92:bc:38:5e:6d:8c:1c:ee:ad:c1:29:71:ca:90:6b:
34:06:86:9f:78:a8:6a:09:38:5c:6e:da:c6:7b:52:
f6:74:f0:72:dd:86:c2:06:66:8a:66:aa:00:67:45:
85:c5:92:27:01:cc:57:d2:3d:27:59:51:5c:b1:d2:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:8A:66:5D:F6:D2:AF:8E:AC:66:EB:E3:95:D5:30:AD:AE:F9:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37788264278011ED9EF7FAB6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:15:af:f3:7d:e5:f4:da:6a:b0:fb:4b:59:a8:70:73:f5:27:
6b:b8:22:8a:bb:8b:a5:bb:6a:7f:cc:d5:c9:2d:50:66:e3:c3:
a2:df:b9:8d:33:88:27:93:90:f5:44:be:2d:06:18:d9:d6:69:
ca:05:3a:ee:c4:ef:48:69:dc:a8:e7:ac:f0:f8:5d:3f:e0:23:
1e:0a:f0:eb:ee:55:b8:c1:ef:73:d8:8a:28:af:3d:1c:ba:af:
c2:23:66:1d:1f:50:57:8c:7f:03:b2:4f:e2:68:9b:19:d3:1a:
52:92:f9:d6:94:7b:ce:b6:f6:46:5d:f5:0f:2a:ef:be:c3:a0:
b2:30:e4:93:d1:0e:94:66:c4:7f:b5:35:6c:07:c0:1a:09:9b:
2c:1c:eb:cb:44:53:ad:4a:de:90:22:98:43:08:5e:76:f7:19:
f8:6f:1a:5d:d3:36:ed:3c:ec:0e:ce:22:4b:e7:6a:ae:0e:90:
e5:ea:86:88:7c:9e:95:d3:f9:9a:ed:27:32:b9:bd:84:92:d6:
48:52:df:bf:21:a9:52:a6:d1:5e:d4:27:03:20:57:6c:ea:60:
4a:51:07:dc:21:a3:89:8e:b3:e1:9a:d2:59:fb:9b:4b:d8:50:
af:52:7d:da:74:82:e6:64:86:62:89:57:cd:83:19:f5:23:58:
22:bb:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org