Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4281648A3E2A11EDBAC0AFF5F1222468.roa
File: 4281648A3E2A11EDBAC0AFF5F1222468.roa (raw, json)
Hash identifier: 5pINKC1FykMjIlVZs8mtTgZhtWla3OQrYY/BVgVRCeY=
Subject key identifier: 61:EB:32:79:53:9E:96:2D:E1:0D:1A:25:74:40:9C:8D:AB:F4:94:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1879
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4281648A3E2A11EDBAC0AFF5F1222468.roa
Signing time: Tue 27 Sep 2022 06:04:34 +0000
ROA not before: Tue 27 Sep 2022 06:04:31 +0000
ROA not after: Sun 15 Jan 2023 06:04:31 +0000
asID: 1239
IP address blocks: 156.233.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6265 (0x1879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 06:04:31 2022 GMT
Not After : Jan 15 06:04:31 2023 GMT
Subject: CN=63329272-34f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:bf:55:56:52:2b:e8:b8:a9:10:9f:de:f3:
98:67:8b:a0:a6:78:2b:8e:5a:7d:58:3b:66:17:8c:
87:6c:a6:c3:ef:16:81:85:b7:9d:9f:77:4d:e8:ff:
88:ef:6c:aa:ad:6f:de:b7:3a:85:fa:91:38:03:1a:
0f:71:f1:e7:a7:72:50:93:48:9a:de:25:1d:d3:83:
b3:7c:b7:55:f2:fd:43:98:3d:de:70:71:20:4d:78:
b1:ba:89:7c:64:e9:11:b4:8d:c4:7c:bf:0d:01:6c:
da:e4:28:fb:a9:20:f3:44:81:b5:26:97:5f:08:1e:
d3:fc:59:47:06:c0:a0:76:60:ff:01:6d:2d:8f:dd:
a4:92:ac:83:7a:32:0d:86:69:96:d5:b5:d6:5b:f0:
07:e7:58:8e:26:9b:66:40:02:f8:51:45:50:61:c2:
aa:52:4c:3a:04:1f:7a:b3:fa:ce:fd:60:6c:de:22:
5e:a6:c9:2e:b4:f5:e5:9f:f6:81:bc:14:26:a0:d1:
e6:74:6e:3c:c0:53:06:55:28:02:36:0c:cb:89:3a:
0e:58:67:4b:e9:5c:9b:76:65:54:bb:a9:89:f6:ef:
24:11:f0:85:e6:ad:54:41:c6:89:62:2d:52:38:98:
5c:2f:bc:7b:4a:53:f5:1d:0c:50:14:65:6d:86:2a:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:32:79:53:9E:96:2D:E1:0D:1A:25:74:40:9C:8D:AB:F4:94:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4281648A3E2A11EDBAC0AFF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/22
Signature Algorithm: sha256WithRSAEncryption
25:1f:8a:39:e5:08:d0:45:29:6a:89:14:b0:90:cb:ce:3f:2e:
d9:a4:31:a6:f9:47:7a:c6:ef:30:76:42:24:cb:4e:8b:9f:98:
a9:f5:5f:a2:38:d6:43:f7:92:8b:a2:9c:33:1d:4c:2d:ca:a4:
8d:d7:36:8c:62:b3:5c:39:dc:bd:f7:47:4c:55:de:b3:fe:c7:
9f:45:ea:18:40:f3:17:e4:19:21:b9:aa:28:f3:4c:c3:f7:2f:
74:3b:1e:5d:fa:04:23:4e:82:aa:7e:13:ef:fb:6a:b8:98:32:
ae:15:e9:e9:9d:79:b0:59:5f:b8:95:dd:bd:4c:98:91:31:49:
aa:a1:8d:2f:10:05:d0:fe:a9:0c:12:61:68:f0:d8:8f:e9:52:
eb:3f:e3:7f:90:c5:45:dd:8d:ee:3e:47:f1:95:47:17:9e:f0:
6e:69:de:c3:77:80:4b:ad:5c:b7:23:63:26:23:ac:8d:0e:4d:
bd:07:6d:5b:cb:75:6d:73:1d:c5:c2:06:ca:fb:57:53:5f:e9:
f5:ff:be:dc:47:cc:26:26:ed:13:11:8d:6e:a1:1b:d9:77:c2:
1b:ae:b1:dd:2d:59:bd:8a:48:e3:a0:23:b3:db:ee:ce:bc:21:
52:4c:45:7b:d5:aa:1b:6a:6e:1a:8a:21:6b:d9:fd:b0:88:dc:
23:56:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org