Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A087F4F1AF11ED860523724AD9E6FC.roa
File: 39A087F4F1AF11ED860523724AD9E6FC.roa (raw, json)
Hash identifier: iV5CKVEDp2xrNFcEMPvSou4RQVW/bf9N4We0n+PUpTE=
Subject key identifier: 1A:DA:94:1B:9B:01:02:52:F4:74:CF:DF:BE:0C:6E:B2:DF:9A:91:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2317
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A087F4F1AF11ED860523724AD9E6FC.roa
Signing time: Sat 13 May 2023 16:57:21 +0000
ROA not before: Sun 14 May 2023 16:57:17 +0000
ROA not after: Sat 10 Jun 2023 16:57:17 +0000
asID: 138995
IP address blocks: 156.227.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8983 (0x2317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 16:57:17 2023 GMT
Not After : Jun 10 16:57:17 2023 GMT
Subject: CN=645fc171-ba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:25:f2:2b:df:79:58:7a:37:98:2a:82:aa:
38:4f:8c:cf:08:09:35:ae:17:5e:c7:0f:7b:91:cf:
a9:cc:f9:8a:28:9e:55:44:04:2c:28:e9:79:4f:2e:
67:70:44:06:10:b4:49:0c:f8:48:4b:29:d3:00:96:
65:b1:0b:fb:9f:a3:a2:29:b6:4d:54:7c:2e:9d:c8:
39:db:50:37:51:b7:3c:87:6b:08:26:5c:ec:52:bd:
97:51:03:5a:9f:6d:45:17:d1:8e:db:d2:0e:9f:36:
8b:63:34:04:94:eb:18:a6:34:f3:ef:e0:44:0a:25:
79:ce:50:59:7a:75:80:89:2b:b3:60:94:4f:ad:34:
77:f8:02:f4:45:d6:1d:e2:3a:60:4d:46:a4:91:1d:
65:f8:a8:b4:f7:2a:31:c4:54:2e:f7:b5:a3:83:81:
61:1c:bf:0a:b9:29:4d:54:ac:b0:be:cd:4a:fe:af:
19:ce:32:62:4a:90:f7:f0:3c:41:55:a8:db:3c:b9:
f1:33:eb:7b:14:bd:53:f1:96:99:e7:aa:22:fe:e7:
01:8a:ea:9f:59:4e:36:7b:ac:d4:cd:37:9d:b4:ae:
34:33:9c:0c:fa:bc:25:31:ac:10:c7:27:39:c4:f7:
74:dd:47:94:dd:d7:3a:d0:21:9f:33:ee:d1:ee:6e:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:94:1B:9B:01:02:52:F4:74:CF:DF:BE:0C:6E:B2:DF:9A:91:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A087F4F1AF11ED860523724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.28.0/24
Signature Algorithm: sha256WithRSAEncryption
17:66:dc:4a:89:dc:27:89:b2:a6:42:06:6f:2e:62:2c:5e:7e:
9b:cf:58:99:b3:14:2b:14:99:36:8f:57:b5:f0:84:48:e6:59:
10:d5:69:fb:3f:57:f6:2f:d0:d3:c9:67:7d:95:0e:06:b2:10:
99:9c:1b:7f:7d:e9:16:49:dd:8f:30:49:a8:2f:d0:fb:f7:f9:
96:4e:04:19:1e:80:f4:75:37:d8:b7:97:d1:52:54:96:e3:a0:
a7:81:83:db:5a:91:6c:fb:55:2e:3a:ff:41:07:87:f2:af:c4:
3c:c1:97:ce:54:bd:ca:0a:a7:69:db:b8:f2:de:8d:5d:ef:b4:
44:99:57:e7:52:c2:dc:36:30:a5:ac:3c:49:8b:16:42:e1:98:
95:4b:91:7d:ad:a7:61:49:03:1b:32:0b:02:68:a0:a4:04:75:
99:41:d8:8b:3b:15:5d:6d:b6:4d:66:db:0e:0a:e4:3c:49:f3:
d2:11:2e:09:55:f6:f2:2b:b6:07:3b:6a:ee:82:8f:df:e8:ff:
f3:0a:1f:ff:32:aa:8e:16:79:f5:49:08:33:23:3d:c6:11:9b:
1f:ea:a3:bf:d5:10:1e:f2:32:de:24:e0:f9:41:b2:58:e9:dd:
26:a0:f4:0e:4a:9f:1e:8c:b1:59:42:95:72:16:68:71:f2:26:
4d:78:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org