Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E3817A0BD711EC91DB9A43D8A014CE.roa
File: 40E3817A0BD711EC91DB9A43D8A014CE.roa (raw, json)
Hash identifier: YUzM1yzkAe2mpSe4Ra9fxV/U0jD1qHEziPOmyIBBZrw=
Subject key identifier: 2A:85:60:1B:C6:01:7F:8B:58:79:1B:B3:E2:11:8B:47:C1:E5:58:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0916
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E3817A0BD711EC91DB9A43D8A014CE.roa
Signing time: Thu 02 Sep 2021 10:19:28 +0000
ROA not before: Thu 02 Sep 2021 10:19:24 +0000
ROA not after: Sat 02 Apr 2022 10:19:24 +0000
asID: 22773
IP address blocks: 156.237.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 10:19:24 2021 GMT
Not After : Apr 2 10:19:24 2022 GMT
Subject: CN=6130a530-176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f3:ba:73:1e:bd:3a:f9:cf:36:a9:2d:e0:59:
2b:1e:41:01:b9:aa:3c:f0:58:32:98:04:02:cb:9d:
1b:7d:d8:36:26:75:8c:d8:a1:c4:ba:02:36:92:d0:
47:a9:97:3f:cd:dc:26:2b:ee:d5:2a:df:72:17:86:
22:43:83:6d:d1:20:85:6d:1c:a2:c1:15:79:3f:87:
50:0d:1d:e2:ee:ce:52:9b:33:55:4c:62:19:8a:3c:
11:b6:ed:12:fc:27:84:f0:14:d1:de:80:1f:fc:92:
30:29:04:2f:e1:7c:1c:3a:9a:53:d9:c5:08:f4:ef:
52:54:f3:f7:d4:8c:b1:9c:dc:b0:01:62:be:7f:fb:
14:50:a2:8d:b4:d4:09:b4:99:6d:89:14:31:62:1a:
6e:90:7c:1a:08:b7:bd:65:82:2c:c9:f0:51:19:d4:
41:e7:4e:8e:d9:8e:d5:26:f4:07:78:de:c2:a6:f7:
d7:f5:66:0f:dc:b5:68:c9:5f:c7:3c:28:d0:50:47:
00:b9:c9:2c:ad:89:b2:c5:91:b8:6e:ec:05:bd:78:
3e:1c:86:64:88:c2:4e:5b:84:c5:b4:52:19:56:c1:
42:40:c0:4b:f4:c0:22:94:bd:3f:2a:71:d0:bf:cc:
1c:3a:e6:f4:d9:53:86:1d:4c:b0:f6:1a:06:6e:4f:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:60:1B:C6:01:7F:8B:58:79:1B:B3:E2:11:8B:47:C1:E5:58:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E3817A0BD711EC91DB9A43D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:78:e7:3e:d3:74:b9:0e:d0:bf:44:0e:e0:ce:94:4a:d3:eb:
b5:80:aa:d1:4f:f2:d5:05:ec:e2:4f:ac:08:c7:95:01:0a:32:
b3:2f:b3:a2:6b:84:6f:8e:f8:50:7d:ed:aa:c0:72:f6:5e:34:
a9:f0:4d:51:43:f4:c4:55:5e:e3:00:01:96:37:5b:1d:aa:6e:
37:a8:08:c7:9b:a7:2c:d4:61:ef:e0:31:9f:1e:14:78:92:af:
6d:56:74:5f:4c:7d:4d:11:3d:59:8e:de:a4:e5:1d:5a:76:ae:
ed:e2:a6:fe:e4:32:02:dc:e1:86:0a:04:a8:e0:38:44:a0:d7:
92:c8:e7:ad:d8:68:de:0b:dc:60:75:68:48:ae:33:10:1f:a3:
02:b2:1e:19:06:09:d9:c2:dc:9c:74:ca:32:07:ab:24:98:a7:
81:6e:f6:c2:b8:29:db:52:da:59:82:2d:81:50:44:6a:82:52:
ab:64:74:80:58:ec:ea:5a:6b:dc:dd:0f:11:2e:2a:9c:20:98:
24:b0:e2:fe:af:17:74:da:d8:fa:66:6b:d5:68:b1:68:a5:c8:
6f:29:54:2b:e4:2d:18:c1:2e:af:2b:5d:78:cf:64:01:9c:2a:
14:03:2a:38:6f:0c:bc:5f:b8:6e:17:7d:ce:d9:c6:89:5d:72:
26:b2:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org