Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB8B9F0D59411EBA34C4046F8AEA228.roa
File: 3BB8B9F0D59411EBA34C4046F8AEA228.roa (raw, json)
Hash identifier: 5h3/C5j3PRn+6exbFYAyB3bS0a9NgnjwzY9vDBS7zpQ=
Subject key identifier: 7F:E8:29:99:FD:18:15:9B:52:D3:E0:94:90:FF:F6:B4:66:AD:44:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB8B9F0D59411EBA34C4046F8AEA228.roa
Signing time: Fri 25 Jun 2021 09:03:41 +0000
ROA not before: Fri 25 Jun 2021 09:03:36 +0000
ROA not after: Tue 19 Jul 2022 09:03:36 +0000
asID: 22773
IP address blocks: 156.249.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 09:03:36 2021 GMT
Not After : Jul 19 09:03:36 2022 GMT
Subject: CN=60d59bec-9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:33:07:4c:31:da:62:1a:82:fc:6b:5a:54:
7c:99:f3:da:16:2b:d5:b4:1f:f2:e3:af:2a:ae:bb:
a4:04:bb:26:3d:74:8a:e2:36:dd:8b:5b:2a:9d:f5:
23:7e:17:5c:c0:ec:02:3b:2a:ad:70:f4:07:94:e3:
8c:67:cd:33:2d:34:6d:7c:6d:e3:ca:fb:d2:39:25:
b4:fd:86:1b:67:a3:2b:7e:58:f9:b1:88:43:b1:e6:
43:84:39:37:f2:4c:ed:1f:e3:3a:35:dc:5e:00:b0:
06:53:f5:cd:3d:5a:ce:c7:40:8b:d7:ab:ca:74:e3:
50:a6:64:7f:f0:26:b4:9f:74:cf:bc:73:97:0c:6a:
d2:6e:ab:8c:f7:b1:10:e9:7f:73:47:46:9c:53:70:
67:8a:b8:51:3b:a9:c1:44:84:f9:6c:ee:f2:95:bc:
e5:6c:67:28:05:cd:bd:34:6d:32:e4:9c:27:f4:ba:
42:3c:3d:99:e2:8d:b7:54:bf:4f:f8:8f:2c:c5:5b:
52:db:91:14:53:9f:ef:60:7f:f8:cf:78:6f:c3:16:
03:84:05:32:f3:4e:af:f8:ec:a6:f7:1b:3b:c2:5b:
59:0b:d2:a3:3f:38:3e:96:8e:b3:d1:41:76:cc:56:
d2:a8:fe:21:13:d5:2f:51:07:1f:a0:2f:02:d2:aa:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:29:99:FD:18:15:9B:52:D3:E0:94:90:FF:F6:B4:66:AD:44:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB8B9F0D59411EBA34C4046F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:fe:e6:4b:62:37:19:3e:66:e7:cb:50:2e:d3:fe:5a:4e:1d:
83:13:4a:37:8a:27:75:11:e7:41:cd:14:a1:a3:c8:13:3f:a8:
f2:45:04:5a:a4:f2:fe:17:37:85:ed:52:e0:79:e2:1b:ae:cc:
bb:71:b0:41:b6:da:82:1e:b8:f5:d3:f3:44:8c:3e:bc:9e:07:
0e:f8:e3:1c:e3:ac:71:35:6b:36:e5:d1:2e:fc:64:39:b3:bc:
a1:72:14:be:03:b8:5c:0c:1e:8e:c3:b8:bc:89:3c:2e:3b:63:
9b:4d:a8:1b:1d:9d:00:23:47:e1:1a:0b:f0:d9:8e:4e:02:73:
40:b4:1a:85:1f:30:35:32:90:f7:00:e5:2f:e8:c8:a1:39:1c:
37:72:fc:ef:d9:42:91:71:34:58:85:d7:ac:45:94:9c:43:ee:
c8:86:96:2e:8b:4b:c5:05:31:76:37:9b:d3:1e:49:2b:f0:e5:
9a:0d:ff:b0:a0:32:d6:3c:0b:bf:85:b2:92:96:9c:98:66:be:
1a:27:74:a9:96:96:b5:10:ae:c3:a0:67:3c:12:c1:5a:61:d0:
d6:56:60:4b:62:4a:1f:2b:1b:e9:9d:b2:c9:68:6e:ea:cd:12:
5a:2c:28:45:79:ae:c2:11:ac:be:13:04:6a:5e:7b:0b:91:96:
f5:79:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org