Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B7FBB6031B11ED93CB6687F1222468.roa
File: 38B7FBB6031B11ED93CB6687F1222468.roa (raw, json)
Hash identifier: UAufk/+YGUlIwzviYjvlEqx7FZtzwAYmCsPYOLnqrHE=
Subject key identifier: D3:DA:F4:1D:90:7C:31:0E:BE:60:69:F0:A0:51:D2:0A:18:0F:88:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 155F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B7FBB6031B11ED93CB6687F1222468.roa
Signing time: Thu 14 Jul 2022 02:18:17 +0000
ROA not before: Thu 14 Jul 2022 02:18:13 +0000
ROA not after: Fri 20 Jan 2023 02:18:13 +0000
asID: 139811
IP address blocks: 156.240.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5471 (0x155f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:18:13 2022 GMT
Not After : Jan 20 02:18:13 2023 GMT
Subject: CN=62cf7ce9-eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:0f:3c:70:45:bb:20:2d:24:00:76:54:c0:
ed:43:05:90:df:ab:81:0c:2c:6f:b0:40:f8:4d:f2:
28:4a:33:56:39:0a:bd:0d:ef:a7:f6:8e:9d:8d:6f:
08:0d:9b:b2:9a:c2:d5:f8:e1:9f:30:6e:a3:d0:32:
1b:2e:59:d1:1b:2b:f5:1d:04:8a:7b:b9:47:23:ae:
c9:4f:02:ea:9c:43:cf:9b:16:52:e8:64:83:48:77:
54:5f:51:47:9e:f3:6d:29:e2:5f:b5:4c:38:d3:1b:
7c:4d:d4:d7:8d:ef:c4:e8:42:25:a3:f6:26:ea:6f:
9b:c5:49:02:8d:cf:53:0f:94:cc:3c:2d:8d:66:d8:
5f:a1:6d:b8:3b:83:45:74:4e:55:ee:39:7d:da:63:
7f:42:66:e1:f6:45:fd:21:c6:98:34:b4:62:6a:3f:
53:58:26:92:6c:60:a0:bf:0f:b4:00:33:e3:28:57:
11:5a:f0:c4:d6:70:fc:2c:13:c1:9d:3f:4a:cf:7e:
51:23:8c:ee:fe:40:ab:98:e2:89:fb:06:ed:0a:79:
44:b2:45:79:1e:0c:25:43:ac:65:b7:a7:ce:7d:04:
f3:d7:39:7b:ee:4f:8f:a5:4c:e5:ed:30:12:91:a7:
b2:ce:40:c6:87:bb:7b:26:d5:0d:31:a1:3c:9b:36:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:F4:1D:90:7C:31:0E:BE:60:69:F0:A0:51:D2:0A:18:0F:88:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B7FBB6031B11ED93CB6687F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:50:f6:90:b1:51:a2:5a:92:fd:dc:69:34:8a:6a:d7:7e:f3:
df:04:80:1b:a3:8e:ce:cc:93:2c:3c:72:af:13:69:cd:98:6f:
73:2e:0c:b5:07:99:01:be:49:42:fc:c4:45:5f:d8:cb:ff:cc:
af:b0:f0:92:d3:09:e1:30:ed:d7:f6:56:ce:35:fc:e8:d0:63:
e5:6e:75:5c:4e:25:5b:20:ed:74:cf:fd:0b:54:7f:8a:69:c8:
88:61:9b:3e:0a:cf:3b:13:be:41:9e:b9:87:46:fe:5f:bf:fd:
f3:dd:8f:2d:12:fe:06:6e:b3:9c:3d:47:08:15:0c:1a:cf:6b:
79:43:00:02:e7:f6:7b:4a:c2:10:60:37:55:37:00:3b:b5:35:
b6:ec:14:c8:eb:e5:1c:08:22:8d:31:4d:4e:20:d5:47:33:fb:
62:c7:ba:6a:e2:84:ee:c7:79:05:05:1f:6d:ed:8f:3b:cb:71:
50:f2:5d:c0:49:13:b7:ea:50:7a:e8:c4:6a:93:90:63:be:63:
33:74:65:61:06:be:55:a7:da:d3:6a:0c:3c:15:68:5c:f4:9d:
c3:92:13:6b:3a:f7:c7:6b:73:83:ea:72:bf:93:f8:21:e1:fe:
21:e2:bb:33:87:5e:35:14:d9:b4:21:ad:b3:25:95:ae:fc:1c:
b3:42:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org