Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42E11A12F9D711EBB08FC102D8A014CE.roa
File: 42E11A12F9D711EBB08FC102D8A014CE.roa (raw, json)
Hash identifier: VJxtfunhZ0icGvJ7NtwTzb6SAgKVC7BteqZS5T6z8AA=
Subject key identifier: 12:88:A2:A5:D2:62:10:8B:0E:09:38:C3:96:1D:05:83:B7:47:26:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 085D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42E11A12F9D711EBB08FC102D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:34:49 +0000
ROA not before: Tue 10 Aug 2021 12:34:46 +0000
ROA not after: Mon 10 Oct 2022 12:34:46 +0000
asID: 9009
IP address blocks: 156.238.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:34:46 2021 GMT
Not After : Oct 10 12:34:46 2022 GMT
Subject: CN=61127269-6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:6a:96:f2:34:db:57:ea:8d:d5:35:bb:84:
3f:0f:1d:3f:15:e6:23:de:57:30:bf:14:d8:ed:af:
b3:86:48:80:ea:88:45:19:2e:e1:45:60:f0:84:a7:
27:3f:81:43:7c:51:04:80:f7:23:11:29:b8:ab:fb:
52:cb:21:3b:56:d7:2c:cd:84:fd:38:14:25:1e:41:
c4:8d:69:54:1d:27:1a:2b:f9:46:62:54:7d:d5:5f:
6c:b0:7f:4f:a8:3b:7f:9a:40:48:b7:d9:be:6e:fb:
aa:26:5c:03:ef:fb:46:e3:a1:b0:91:86:3a:1c:cc:
dc:7c:2b:10:5c:05:44:de:49:ec:10:cc:8b:c2:cf:
08:c5:27:fa:b6:a5:4b:57:4e:cb:3a:79:3f:5d:76:
e3:79:85:f5:18:20:25:8f:c9:e1:52:52:ed:e8:93:
4b:2e:1c:c6:ca:ca:c4:41:e9:1e:1d:90:f6:e5:2c:
ae:aa:45:0e:4c:49:0d:46:34:0b:fb:ff:14:44:5e:
88:bb:37:b5:ca:41:1e:36:1b:82:17:f4:2c:36:b0:
30:c5:33:e7:60:40:53:db:cf:5e:cc:a9:50:63:21:
e7:8b:11:69:2c:81:1a:7a:92:65:03:24:94:89:3a:
b3:6d:01:f0:80:92:6f:8d:26:32:84:68:8b:0f:35:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:A2:A5:D2:62:10:8B:0E:09:38:C3:96:1D:05:83:B7:47:26:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42E11A12F9D711EBB08FC102D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:4d:cd:be:af:f3:d4:ce:c9:90:0c:5b:58:1c:eb:af:be:a2:
cc:1d:66:09:cf:c3:44:d9:54:23:30:7b:f0:34:e5:29:ad:f7:
66:c4:07:77:ad:c9:e5:93:90:ff:96:db:cf:4d:0b:9b:1b:c4:
c7:d2:03:f7:6c:e1:8b:01:2e:8a:6f:e8:bb:6c:c1:fe:8c:66:
4e:72:05:e3:99:c1:3d:df:fb:89:ac:95:63:d8:1f:27:55:22:
64:f7:b5:be:55:29:6a:68:e3:3e:45:19:6d:6f:21:a7:91:50:
c0:9e:e5:e4:64:12:49:68:e2:29:81:3c:8d:a3:e0:d6:07:6a:
fe:69:8b:82:79:ef:2a:dd:f7:53:b4:34:f4:ab:f4:21:81:82:
06:93:3a:63:8b:b8:bb:10:4f:9f:2f:d2:41:ae:37:4e:c4:3e:
7e:c0:95:b0:84:bc:e2:7b:c8:65:e8:d6:5d:45:1c:58:90:3a:
02:8b:a7:14:8b:63:c4:90:b9:4f:e3:e9:e3:12:05:dc:73:b1:
b2:c5:e6:33:73:4a:28:f2:90:02:b4:9a:c4:6c:aa:83:8a:cd:
13:8f:91:8e:c5:41:2a:a4:d2:f8:25:5d:0a:d3:65:1d:10:3e:
96:b0:a9:3c:fe:e0:fa:93:a2:b0:6c:d9:d2:66:b2:16:a4:aa:
7b:e8:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org