Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E64E84AA58D11EBB644B01DF8AEA228.roa
File: 3E64E84AA58D11EBB644B01DF8AEA228.roa (raw, json)
Hash identifier: OHJoHovxsUNs21PQvoZI8A7u3hmrXU+Q1q86ONKD++w=
Subject key identifier: 59:CB:B3:37:6A:18:75:17:B7:65:41:8C:3F:41:F8:85:4A:1C:F8:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0575
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E64E84AA58D11EBB644B01DF8AEA228.roa
Signing time: Sun 25 Apr 2021 06:12:42 +0000
ROA not before: Sun 25 Apr 2021 06:12:39 +0000
ROA not after: Sat 25 Jun 2022 06:12:39 +0000
asID: 136907
IP address blocks: 156.249.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 06:12:39 2021 GMT
Not After : Jun 25 06:12:39 2022 GMT
Subject: CN=6085085a-f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:3d:0e:fe:c7:87:fa:d8:23:b7:0f:81:77:
56:a7:b9:c5:d8:1d:be:56:1c:d8:2a:1c:15:8a:88:
6e:95:e5:53:fa:bb:10:d2:b7:7c:04:c6:32:f0:c1:
0a:86:8f:00:30:1f:3b:8e:b4:b2:80:fc:f2:79:fe:
0f:2c:bc:c6:3c:d7:51:fe:64:76:2b:eb:0d:43:ad:
a6:59:b6:d5:26:bf:cb:93:1b:e4:35:15:ee:cb:1f:
ce:9a:c9:d5:a2:1d:06:0e:65:ef:6b:d4:b3:16:54:
6b:5e:10:21:4f:b9:8a:54:f3:70:17:4e:54:56:77:
22:24:28:ae:ce:b9:8c:c4:be:21:f8:69:a0:ee:33:
98:45:be:db:b7:5b:54:d5:f8:76:7f:59:7b:22:2b:
e5:07:26:b0:0a:26:3a:38:f6:d8:e5:b7:f7:81:a9:
7e:fb:89:8b:4d:ae:e2:6b:8c:7b:11:77:8d:b2:b7:
b2:8e:2b:8e:ae:57:1b:d1:e3:81:4f:e0:df:91:e4:
35:cf:15:22:c0:a7:5e:e7:34:46:54:9e:a1:14:b8:
5b:5e:e4:20:b1:b2:63:73:22:c2:5c:f2:4c:89:28:
bd:4b:5c:c3:ce:fc:ec:e0:d5:ce:82:b6:54:f0:ca:
d5:37:ad:fa:dd:05:da:07:7f:e0:cc:dd:10:0d:84:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:B3:37:6A:18:75:17:B7:65:41:8C:3F:41:F8:85:4A:1C:F8:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E64E84AA58D11EBB644B01DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:9d:b0:b3:85:93:6a:fc:a8:fe:1c:04:f2:06:ee:2d:4e:e2:
70:e7:e5:a9:b5:45:06:4c:4d:2b:48:37:e4:f9:74:27:8c:b3:
04:18:5b:24:bf:42:22:7f:4d:d9:1c:2b:25:a7:3e:9c:d3:b8:
44:bf:99:60:74:6b:7b:e1:0b:19:3b:2f:2b:be:f2:3b:f1:30:
ed:20:e1:6d:6f:00:eb:5f:6a:4d:c1:a1:97:2b:18:71:ef:62:
87:19:56:c0:a2:23:1a:a0:17:ea:63:1f:a8:da:8f:30:8a:3e:
cf:3b:7f:dc:e4:35:2e:d3:91:4e:16:09:a5:e3:b4:b3:9f:4e:
b3:35:a7:4a:f6:56:63:40:d5:13:c1:04:c9:05:1c:22:76:a5:
0a:e0:34:ee:0b:b1:3c:55:b9:29:88:f5:c9:43:5b:98:6e:d9:
fa:ab:17:f9:5c:59:55:66:f8:80:ab:ab:21:2f:a0:5e:13:d0:
4e:d4:48:2a:05:88:ab:86:8a:10:09:81:6b:c5:57:69:f1:ad:
0a:6a:5f:dc:e5:3b:9d:98:5d:5a:19:61:91:f4:5a:ac:f5:53:
44:6b:aa:ac:e4:a1:34:ed:11:58:6a:5b:8d:5b:cb:4c:a9:e8:
2e:41:8e:b8:db:52:e5:0e:dc:9f:bf:08:10:c0:10:f8:e2:ab:
ea:c5:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org