Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5076D0F2D59411EBBC407C46F8AEA228.roa
File: 5076D0F2D59411EBBC407C46F8AEA228.roa (raw, json)
Hash identifier: YEJiSJ+Ta3jQ5WPTPlo/8q3pimG+NK3CR4+Sm1a+3PE=
Subject key identifier: D6:3E:9E:B7:D4:6E:68:73:A4:1C:DE:4F:A6:A0:E3:96:E1:FC:D2:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5076D0F2D59411EBBC407C46F8AEA228.roa
Signing time: Fri 25 Jun 2021 09:04:15 +0000
ROA not before: Fri 25 Jun 2021 09:04:11 +0000
ROA not after: Tue 19 Jul 2022 09:04:11 +0000
asID: 22773
IP address blocks: 156.249.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 09:04:11 2021 GMT
Not After : Jul 19 09:04:11 2022 GMT
Subject: CN=60d59c0f-9200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e1:5d:72:54:e4:8c:d4:2a:96:a8:2d:88:
39:8c:4b:8b:54:0a:3a:08:d2:b0:71:10:04:f9:d0:
18:99:69:98:a3:a6:53:a5:30:1f:09:9d:8c:cb:aa:
1b:05:1f:49:f0:41:a9:24:8b:44:4d:15:0a:5e:d2:
b9:6d:41:d5:c5:3f:8f:dc:77:63:77:23:41:33:46:
1c:7e:f5:a9:4f:99:9c:1b:7b:55:9b:14:a1:4d:15:
1e:5b:62:82:83:7e:0b:a4:ad:db:3b:cc:11:47:cc:
e7:52:44:29:b3:5f:74:0a:ef:69:f8:40:4c:bc:ef:
17:ea:03:33:38:f5:b3:97:29:63:d4:c7:0e:c0:c6:
e2:39:37:7e:6e:06:0e:33:b8:20:de:5b:a5:94:63:
4e:7e:a3:26:29:d1:8f:c7:fe:85:0f:d0:74:a3:06:
37:ff:65:82:13:87:17:72:0a:b3:70:cf:0c:d2:1e:
ba:d4:29:20:3e:77:95:10:ce:57:c8:b6:46:71:65:
61:f7:9b:58:5b:d2:34:78:5a:f9:43:0e:de:87:5f:
a4:c2:9b:4b:31:f6:1b:1a:81:5e:78:bd:4d:dd:12:
d8:c1:81:55:e0:a2:83:df:17:d7:15:7d:22:79:77:
09:09:56:29:10:18:42:df:f9:8b:2f:89:92:d6:c4:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:9E:B7:D4:6E:68:73:A4:1C:DE:4F:A6:A0:E3:96:E1:FC:D2:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5076D0F2D59411EBBC407C46F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:90:31:e3:2f:1e:6e:9f:55:b3:ab:c8:da:f0:a1:74:51:0b:
7a:31:97:63:86:a4:41:c8:fd:17:f1:70:dd:fe:cd:05:05:3c:
6b:f6:e6:a7:66:83:35:8f:aa:3b:c0:34:e1:98:10:5c:2f:04:
d6:0e:69:a1:2d:ab:89:6c:7f:42:c8:28:4d:1a:f4:0c:51:76:
10:26:e0:b7:55:76:49:8a:ed:f5:79:25:95:0a:2b:17:82:1d:
ba:49:94:8f:37:b8:d6:47:33:32:d2:e7:b7:b8:53:74:c1:a8:
a1:47:54:36:98:d8:7e:6d:b2:d3:76:e7:8b:b8:42:5a:bf:28:
27:1d:0f:49:67:03:45:f7:bf:a7:98:1f:96:d7:a6:bd:71:6b:
ad:3c:22:6c:2a:05:cf:42:94:fa:79:3b:ed:19:4f:e9:f9:2e:
7d:7b:ae:ea:d2:6b:f6:cd:78:4a:d8:d7:35:c1:3f:53:80:72:
6b:6c:55:42:e7:49:61:1e:06:ce:02:c3:35:52:02:5d:9a:b4:
0a:9c:39:d2:41:a5:86:c7:01:a5:73:06:6b:2b:33:7e:ee:b2:
20:00:f7:29:7e:0a:2a:92:fb:c0:cb:53:7f:a2:47:82:f2:90:
0f:b1:7c:7b:c5:17:01:91:85:ea:f3:4e:d3:b5:34:72:b6:46:
59:a5:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org