Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC5CFB0031611EDB41B97F5F1222468.roa
File: 3EC5CFB0031611EDB41B97F5F1222468.roa (raw, json)
Hash identifier: 0/tkUCaWhPijhKxXgsuy7wxp9WrVClxCtP4oy7HRSNs=
Subject key identifier: 04:4D:56:9F:BB:92:91:3E:4C:3D:D0:6A:2F:64:75:38:F9:14:7C:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC5CFB0031611EDB41B97F5F1222468.roa
Signing time: Thu 14 Jul 2022 01:42:40 +0000
ROA not before: Thu 14 Jul 2022 01:42:35 +0000
ROA not after: Sat 31 Dec 2022 01:42:35 +0000
asID: 135097
IP address blocks: 156.253.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5465 (0x1559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 01:42:35 2022 GMT
Not After : Dec 31 01:42:35 2022 GMT
Subject: CN=62cf7490-f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:d8:a9:c1:e5:a1:7b:69:61:6e:71:b4:29:
62:e2:e7:01:9d:75:1f:bc:63:e6:18:70:35:05:d6:
75:81:c1:8d:c8:28:b8:06:d9:3d:eb:02:a1:30:16:
dd:d9:c4:5f:b9:e3:ac:7f:21:ca:10:ef:8b:a8:19:
3b:e6:21:91:21:f1:4e:ce:49:62:16:b7:9d:1a:ab:
aa:79:19:1e:8c:17:0f:0b:cc:d2:a1:34:42:dc:1b:
8e:99:b2:e2:c8:0a:8e:e8:de:8c:06:65:74:7b:aa:
17:82:34:20:37:cb:d5:14:b4:da:ae:58:e6:6e:d7:
af:1e:3a:fa:9e:e5:d1:89:bf:fb:f7:91:53:d6:91:
07:df:d5:05:4d:e8:38:fe:e9:c7:fd:e6:c1:31:13:
45:70:2f:b5:02:74:da:6c:50:5f:60:3b:98:2c:13:
c1:ad:32:e6:1c:80:f8:61:de:25:6f:ce:9c:e5:11:
f4:60:73:1f:53:9c:c6:96:ec:0e:dd:7a:e3:5b:10:
91:28:7d:d5:70:49:3e:42:61:53:0e:73:30:4d:85:
9c:57:45:72:f1:95:99:a4:6f:d3:5c:92:bc:e1:4f:
ae:ad:92:70:24:4b:13:60:31:2d:76:9f:62:86:39:
17:75:bc:64:32:c3:50:ae:2f:fe:17:52:14:72:3b:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:56:9F:BB:92:91:3E:4C:3D:D0:6A:2F:64:75:38:F9:14:7C:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EC5CFB0031611EDB41B97F5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:94:f0:b8:76:60:af:68:77:9b:58:be:48:a2:36:bb:d0:3f:
9b:d8:09:8a:da:95:ed:3e:78:41:9c:f2:90:d2:12:59:57:b1:
7f:bd:50:73:7b:4f:f7:89:7b:4c:12:04:fc:17:c0:89:23:30:
68:d0:1e:51:10:66:ce:bb:ca:1b:4b:66:15:dc:80:18:90:d9:
fe:c4:95:fa:9b:b4:be:02:3c:e5:81:e1:4d:18:18:3b:25:08:
d5:c9:cb:e0:b2:e1:c4:48:4d:57:86:24:69:b9:aa:20:5e:47:
30:9b:15:00:d5:93:b2:c6:79:34:5d:0f:b4:d9:72:0f:7c:39:
0b:c7:6a:13:ae:df:30:d3:db:e3:a0:ac:75:3b:67:f3:34:28:
40:f7:ba:d5:9c:fb:62:60:81:4f:ac:74:de:86:8a:b6:4e:d6:
58:c7:c7:9b:5d:c9:19:fc:84:fe:ad:29:2f:29:7b:39:03:e2:
1d:d8:17:c0:21:52:18:b6:6d:d2:56:4f:55:34:44:85:07:9c:
3c:2d:48:05:10:a3:ee:70:a2:f6:59:ea:66:cc:1d:09:8a:30:
e1:2e:b4:81:a2:33:83:5f:8e:6d:6f:17:6e:63:85:3b:24:d3:
18:6d:a2:51:6d:af:47:0a:4f:70:f8:2c:f5:0c:47:1b:51:09:
b0:73:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org