Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F046A1A1D1E11ECB9949565D8A014CE.roa
File: 3F046A1A1D1E11ECB9949565D8A014CE.roa (raw, json)
Hash identifier: M6Hl1NCjdSsPMkr7ipr4b14xwvaklmIlUNvlHYMmzh4=
Subject key identifier: C2:98:3D:A8:79:57:AF:E1:BE:E3:93:07:E6:29:D1:15:4C:04:01:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 099E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F046A1A1D1E11ECB9949565D8A014CE.roa
Signing time: Fri 24 Sep 2021 10:00:29 +0000
ROA not before: Fri 24 Sep 2021 10:00:25 +0000
ROA not after: Sun 24 Apr 2022 10:00:25 +0000
asID: 206264
IP address blocks: 156.236.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 10:00:25 2021 GMT
Not After : Apr 24 10:00:25 2022 GMT
Subject: CN=614da1bc-6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:03:75:30:86:9a:42:c4:e2:41:b1:44:05:
7c:61:a4:f3:9e:98:3e:65:4e:c0:3e:f9:5d:72:ba:
a2:03:ff:a7:be:14:27:82:cb:2c:c8:81:bd:43:a5:
38:8c:1e:aa:6d:7e:45:27:0d:1c:4f:57:35:a2:1f:
1b:17:d4:e7:0e:1c:c0:e2:6d:70:04:ce:44:71:07:
30:24:36:dc:90:5b:8d:4f:40:a1:14:72:95:fa:c2:
75:f5:47:76:35:c0:7e:00:cd:a7:4f:67:94:47:bf:
52:55:ba:9d:d1:cd:d1:0a:3d:e9:e0:d0:ab:7b:a3:
86:3e:92:24:37:90:03:73:6e:5c:d0:44:6c:5a:58:
bd:7a:f7:a2:74:61:a5:27:5a:cf:1f:9b:c9:b0:fe:
4f:66:f0:42:15:12:c7:f7:94:91:54:6a:ac:92:f9:
98:19:28:b2:6a:75:2b:91:35:10:95:c9:b5:f7:36:
00:5e:2e:53:a9:78:49:ae:bb:8f:bd:2a:0b:6c:fe:
39:8c:cf:c6:26:61:5d:ed:d3:85:2b:4e:d8:a8:47:
19:4c:45:08:e1:0d:77:d3:c9:68:d0:51:05:21:78:
71:3e:e2:bd:81:ce:80:60:eb:50:d2:92:41:20:f5:
9e:61:d1:b5:de:0b:24:46:73:f0:13:af:83:70:2b:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:3D:A8:79:57:AF:E1:BE:E3:93:07:E6:29:D1:15:4C:04:01:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F046A1A1D1E11ECB9949565D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:71:3f:cb:d2:5b:1a:79:be:c4:40:40:a8:11:fc:eb:ec:19:
6f:ef:33:de:e7:16:c4:e8:68:9a:26:0f:c0:82:1c:9c:9b:97:
96:07:52:13:2a:37:b6:7d:3c:15:79:4d:1e:86:d5:03:17:69:
0f:81:f0:87:42:04:a1:42:0b:92:2e:e4:44:22:94:1f:fe:7c:
a5:32:e7:6b:c2:fe:d9:1e:d7:73:c3:93:a2:1e:bd:03:97:b7:
ac:e2:a6:aa:7b:2e:39:b0:d8:f5:e5:97:97:40:b6:32:66:37:
24:36:14:67:55:a4:60:fb:c0:e2:f9:79:13:b7:69:be:e8:29:
76:1f:ef:03:82:e1:aa:c2:a1:ca:bb:f6:bc:4c:66:55:fa:30:
38:17:c8:19:80:9a:bb:94:7d:e2:fb:cb:e4:f6:9a:10:49:d5:
cd:06:0e:b8:e6:45:30:78:c2:04:87:16:a8:d8:e9:5c:8c:3d:
80:4a:ba:1e:0d:35:66:3d:03:c9:bf:3c:3f:cd:31:2f:50:30:
ba:6c:a9:5b:0b:c9:10:70:72:b8:1c:10:14:b0:1f:3f:ce:68:
1b:d1:6b:f9:11:b9:77:06:46:4d:2d:df:06:93:b5:dc:a2:27:
ca:e3:d2:21:0c:08:5a:e7:3f:ef:b7:05:be:a8:55:e5:39:84:
62:ab:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org