Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F941954200A11ECB83D1D7DD8A014CE.roa
File: 4F941954200A11ECB83D1D7DD8A014CE.roa (raw, json)
Hash identifier: QwqSIRpGcs+sQ6tVlaFdN5MubcEpamSLgkujA+pxPz4=
Subject key identifier: 4C:FA:DE:2E:17:DE:E7:34:0F:62:DF:71:3E:85:BE:EE:BB:69:AF:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F941954200A11ECB83D1D7DD8A014CE.roa
Signing time: Tue 28 Sep 2021 03:15:20 +0000
ROA not before: Tue 28 Sep 2021 03:15:16 +0000
ROA not after: Wed 28 Sep 2022 03:15:16 +0000
asID: 132839
IP address blocks: 156.252.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2495 (0x9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:15:16 2021 GMT
Not After : Sep 28 03:15:16 2022 GMT
Subject: CN=615288c8-571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:62:cb:b1:ba:1c:fb:6f:50:41:1c:27:dd:
4f:b7:d9:e7:64:86:c7:54:79:b0:2f:f1:9d:1c:13:
13:89:be:1c:54:33:d7:6a:92:4f:94:35:e7:2e:a3:
1c:6c:f9:74:13:0a:8c:e7:84:54:9b:5a:17:ed:6f:
9e:f1:a3:17:78:da:62:f7:75:34:8f:cf:1e:f6:9b:
d8:92:64:cc:0c:62:0a:4f:6a:ff:af:a2:bd:e6:1d:
03:50:88:57:83:c4:1b:e6:ba:37:aa:18:83:14:96:
92:67:6f:52:37:e8:09:71:df:3d:0c:d4:fb:f3:13:
a5:96:e3:0d:c7:f7:a9:45:8d:a0:5f:13:19:29:64:
0d:73:ed:50:6a:65:a3:4d:d5:5d:17:cb:fe:19:eb:
45:cf:87:03:51:77:3d:bd:0c:ef:c1:c3:40:c1:98:
aa:de:28:ba:6e:ae:de:94:d5:b7:f7:05:6c:bb:d4:
6c:cb:a7:5b:2f:72:45:ee:6e:db:e5:c6:de:3a:33:
d2:c2:86:fe:ce:8e:23:4f:32:ca:93:d0:5b:f3:65:
8c:60:88:6f:29:6b:c2:d4:1e:06:9a:79:f0:65:e1:
f0:ca:d9:94:e5:d3:c9:e3:84:f2:91:b3:7a:f7:35:
09:85:b9:fb:fe:10:0c:84:5b:de:04:bb:e7:a2:e0:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:DE:2E:17:DE:E7:34:0F:62:DF:71:3E:85:BE:EE:BB:69:AF:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F941954200A11ECB83D1D7DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.65.0/24
Signature Algorithm: sha256WithRSAEncryption
17:19:de:56:6f:0f:44:e6:bd:51:81:99:5e:58:5e:e0:59:54:
1b:98:a9:6d:ef:02:ec:ed:c3:bb:f7:0b:5e:33:c5:b9:68:8c:
69:c1:b1:0d:d1:24:63:33:ef:37:71:31:8f:8b:eb:8b:42:08:
ba:3e:00:52:52:3b:30:21:d7:62:4f:04:b0:ab:fd:2b:8b:63:
66:2f:3f:06:c0:31:68:27:bb:63:10:20:18:77:bd:b6:25:25:
9c:7a:42:9d:2f:46:54:60:94:49:59:f2:64:e1:13:74:46:e5:
ed:3a:a3:7a:7e:81:a7:69:fe:f8:f7:2c:63:d7:fd:87:a4:99:
64:2e:92:8a:b7:07:75:67:56:08:96:30:26:4c:9a:a8:24:7a:
03:98:f9:c0:c7:72:18:ca:b4:a1:7a:6b:fc:31:86:d3:0d:60:
fa:9f:be:9d:c4:6d:eb:a2:f6:87:51:ab:15:8e:44:51:34:5b:
9c:f0:3a:d3:1d:02:f8:a5:f4:cb:e1:61:c8:83:a1:d5:de:15:
68:ba:6c:48:69:2c:86:26:75:6f:cc:a9:af:26:a8:e7:c5:be:
8a:8e:24:0d:d2:fc:b2:2f:0f:e2:02:8a:c1:43:23:aa:6e:9e:
cb:5e:8f:df:b8:29:e4:40:3f:fb:74:36:f3:81:17:88:4d:cf:
6f:2c:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org