Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DFD07A57CE11ECA5808BB05A40D577.roa
File: 39DFD07A57CE11ECA5808BB05A40D577.roa (raw, json)
Hash identifier: rD7tXEwCJShYSvnQ1ZvkA+8zi25qAWH6LUR3xmJ7gns=
Subject key identifier: BA:3D:53:99:F3:B5:24:2D:49:D7:6D:0A:2D:56:80:3D:A7:2D:BB:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1068
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DFD07A57CE11ECA5808BB05A40D577.roa
Signing time: Wed 08 Dec 2021 02:26:19 +0000
ROA not before: Wed 08 Dec 2021 02:26:16 +0000
ROA not after: Fri 30 Dec 2022 02:26:16 +0000
asID: 9009
IP address blocks: 156.238.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4200 (0x1068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:26:16 2021 GMT
Not After : Dec 30 02:26:16 2022 GMT
Subject: CN=61b017cb-71f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:cc:3e:be:11:58:06:2b:1d:fb:76:c7:e2:
08:37:8a:b2:75:e6:fc:10:29:90:2f:03:13:8b:38:
94:75:6a:e8:18:e4:33:da:b9:34:b3:12:fc:fc:8c:
84:bb:87:87:2d:ac:c6:15:3c:80:9d:b8:c6:50:ec:
ef:4f:2d:52:d6:e0:06:d6:f2:e8:35:3e:40:37:96:
96:d6:3d:ed:24:17:7b:0e:06:3b:f1:f2:63:7f:cc:
c6:59:19:11:cf:86:fa:df:59:7e:ff:de:73:9c:36:
aa:7a:9e:ad:e0:5d:46:59:f7:53:1e:2f:2a:d7:99:
19:b2:1c:2f:93:ff:c9:59:33:29:78:fb:fc:5b:79:
3f:dd:81:8a:b2:f3:04:4a:16:cb:cb:e5:6c:4c:51:
c6:ef:16:50:98:22:82:45:0f:8a:cc:e1:0c:27:9f:
77:fb:c5:84:22:e4:5d:25:fb:c0:31:fc:1c:2a:1a:
ad:79:5c:2d:c4:52:4c:e5:53:e5:4b:1c:38:d3:a5:
1c:21:e9:c9:94:04:f7:89:be:2d:60:d5:cc:52:24:
ca:c2:68:26:21:e6:c2:b0:ef:f9:69:b8:0c:47:c7:
04:81:84:c0:f3:00:3e:e0:da:47:8b:cc:2a:f9:56:
a8:07:41:f0:21:ba:f6:2a:52:13:50:f7:d8:b8:71:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:53:99:F3:B5:24:2D:49:D7:6D:0A:2D:56:80:3D:A7:2D:BB:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DFD07A57CE11ECA5808BB05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.10.0/24
Signature Algorithm: sha256WithRSAEncryption
45:24:91:f9:f9:54:47:b2:42:6e:cd:0d:0b:3b:8f:9b:42:71:
83:24:53:16:6a:e8:45:91:f0:07:4c:8c:e5:60:e4:67:47:2d:
a6:92:74:93:f4:8f:dc:30:2a:6a:eb:27:e2:47:2f:ce:19:7e:
f3:80:3b:2b:0e:28:42:0d:18:b0:0c:18:ee:ae:91:18:df:2f:
35:8d:bd:e9:e6:e6:f1:2a:d9:e9:d6:a6:8c:82:96:c1:43:99:
1e:b8:ca:47:e2:0b:c4:a2:24:a2:fd:8b:d3:7d:99:e3:b4:f8:
8f:ba:b4:72:59:3e:c6:c4:d0:a2:4e:c5:08:2e:a9:e6:02:98:
af:53:34:ea:f8:e7:b4:40:4e:34:d8:9e:e7:b9:f3:2c:7c:19:
f0:d3:14:b7:be:f0:92:83:79:fb:8b:9e:4c:6e:8f:3c:7b:fd:
9a:4a:87:0e:8b:30:56:d2:f7:99:77:da:95:75:d0:f3:9d:1f:
c0:16:c2:1f:44:4e:fc:24:a6:3e:3a:91:7d:2e:b7:44:95:76:
35:ab:de:0f:68:87:e6:76:49:72:4d:bc:02:03:b2:89:46:03:
23:1f:30:10:d0:34:02:5d:85:20:00:e7:42:77:8a:e3:8c:82:
f6:41:96:95:97:d9:37:18:56:e3:73:13:0c:bb:ae:69:4d:9d:
ea:09:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org