Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B4B77C0EAF411EBA1B0BA4BD8A014CE.roa
File: 4B4B77C0EAF411EBA1B0BA4BD8A014CE.roa (raw, json)
Hash identifier: DPfwy9x24jX9tueOUWSrgQNAyL5gXA9zEeiFjC0u5W4=
Subject key identifier: C3:5D:BF:50:B4:A5:92:D5:30:E3:DB:73:87:C8:AE:99:C1:10:6A:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B4B77C0EAF411EBA1B0BA4BD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:54:24 +0000
ROA not before: Thu 22 Jul 2021 13:54:19 +0000
ROA not after: Thu 22 Sep 2022 13:54:19 +0000
asID: 1239
IP address blocks: 156.236.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:54:19 2021 GMT
Not After : Sep 22 13:54:19 2022 GMT
Subject: CN=60f9788f-5d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:73:04:2d:56:b0:4f:83:5a:00:27:1e:76:
11:27:b2:07:4c:0a:3e:8d:90:63:69:59:22:fb:98:
42:bb:1c:77:1e:fe:3c:ea:16:c8:5a:eb:e2:d9:0a:
09:f3:20:d9:b7:ab:eb:57:d5:e3:c6:01:8b:32:19:
47:62:70:29:a7:73:5b:30:1a:45:9d:50:10:f3:d0:
bb:1e:04:f6:b1:ff:29:4d:b4:f5:2a:d3:66:ec:bc:
4d:18:b6:d7:74:b5:6f:cb:5d:84:cf:4c:44:58:5f:
ab:53:9d:6f:a1:3a:1e:bf:d5:64:e3:a8:27:85:b8:
6d:c6:8b:84:2d:62:e0:52:18:e1:dd:4b:4a:7e:56:
0a:72:41:fc:b3:c4:1f:4d:cc:8c:3e:4a:bb:fc:36:
b6:bf:12:2a:06:57:24:42:92:6c:ff:3e:80:ff:2f:
a9:0f:34:6e:8f:2f:31:6c:a7:78:3b:fd:e6:5d:80:
89:ec:bb:cc:ee:62:d3:7e:66:07:3c:ae:6b:fd:c4:
a1:b8:b4:c1:4f:09:8e:10:a3:1c:c7:ca:9b:cf:e0:
ec:50:d4:58:38:9e:a8:54:c3:ca:70:a6:54:10:da:
94:91:84:b1:0c:13:c9:ec:5f:53:84:8e:32:a2:0a:
60:40:9f:88:a6:06:e4:6b:f9:21:a1:e2:d2:95:46:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:BF:50:B4:A5:92:D5:30:E3:DB:73:87:C8:AE:99:C1:10:6A:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B4B77C0EAF411EBA1B0BA4BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:dd:a2:63:eb:1a:51:b6:3c:c7:b9:bc:ca:00:dd:9e:96:e3:
32:e7:22:9d:74:09:e8:d8:63:97:23:d2:9e:a3:5c:b6:24:5b:
9d:88:8d:06:83:0a:b9:78:95:e1:ba:28:48:d7:66:d0:10:21:
2d:a8:8f:5a:28:56:ff:98:61:b5:d8:74:af:7f:bc:4a:23:a2:
f1:06:3d:a6:d4:75:eb:4a:47:0f:d8:7e:d7:a0:fb:3f:a1:98:
09:f6:d6:a2:d5:04:4c:22:65:e9:78:8d:ef:03:fe:89:3c:6f:
c8:1b:a6:72:c9:6e:09:93:66:61:1a:9a:14:f4:59:3f:d8:7e:
05:56:e5:5c:b7:47:2d:55:d1:32:12:ea:62:d3:61:5c:64:6d:
f6:f1:dc:fe:ed:c9:63:f6:9f:15:0d:17:2d:e5:93:d5:9a:c1:
47:71:35:5f:0c:c5:89:a8:5b:52:20:c3:5f:69:42:0d:d7:fd:
01:64:f7:6b:22:c5:fe:72:3f:2c:cb:3a:96:e6:6b:1d:84:6d:
42:50:b5:df:a0:35:8f:74:49:ea:93:c6:cb:f4:71:1a:82:96:
4c:e0:7d:ec:22:ff:fc:e1:17:5c:ad:fa:13:e8:08:fa:0b:26:
eb:a4:c8:52:33:df:c7:34:90:ee:21:7b:c8:bc:66:07:d8:04:
63:6d:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org