Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51225C2CF1AF11EDABFF5F724AD9E6FC.roa
File: 51225C2CF1AF11EDABFF5F724AD9E6FC.roa (raw, json)
Hash identifier: 3S5IN91S+XI5XVUBU29z/hxGIxrZt6IZFiWGyKEVDz4=
Subject key identifier: BA:E1:85:A2:5C:80:BF:2A:12:BD:E6:3A:44:E9:5B:51:DD:46:07:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 231A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51225C2CF1AF11EDABFF5F724AD9E6FC.roa
Signing time: Sat 13 May 2023 16:58:00 +0000
ROA not before: Sun 14 May 2023 16:57:56 +0000
ROA not after: Sat 10 Jun 2023 16:57:56 +0000
asID: 138995
IP address blocks: 156.227.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8986 (0x231a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 16:57:56 2023 GMT
Not After : Jun 10 16:57:56 2023 GMT
Subject: CN=645fc198-ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:76:00:0a:58:51:44:55:f1:a3:04:3b:1d:
4d:e7:05:cc:09:0c:71:8a:21:9b:20:4d:b1:66:b1:
72:8a:45:34:d7:9f:3f:28:ec:17:84:ae:6d:8a:61:
7d:04:52:73:2f:b2:74:87:aa:3a:ec:69:3f:fb:07:
0b:42:12:b4:1e:c3:6b:34:a1:ba:f0:b9:88:fe:0a:
fb:95:f1:51:28:32:a8:3a:4d:ae:bc:59:cd:5a:ac:
46:b2:1f:d6:12:af:2c:d1:b7:62:54:32:62:d3:50:
fe:5f:8b:8f:6c:66:3b:83:df:a3:06:37:36:66:f3:
35:59:48:e2:c9:81:76:51:79:50:96:1d:27:cf:71:
32:01:f6:01:6d:f5:09:a7:52:35:d4:ec:41:66:60:
5a:8a:70:0c:be:56:dc:1f:14:5c:03:ff:8b:00:54:
4c:be:a7:a0:63:0c:52:19:92:72:bd:c4:d5:c8:6f:
0a:ff:05:88:8c:8f:9a:18:16:97:9e:3b:7c:b9:5f:
24:79:f0:42:a6:c6:46:c6:24:31:85:65:b0:a8:2d:
ec:68:5c:1b:2e:6d:2e:8b:34:10:c4:a8:9d:45:a7:
e3:24:0c:91:62:d0:cb:0d:4c:4e:9a:74:d0:85:60:
26:f2:d9:de:c3:a6:03:5a:d9:d5:e6:bb:11:29:b3:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:85:A2:5C:80:BF:2A:12:BD:E6:3A:44:E9:5B:51:DD:46:07:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51225C2CF1AF11EDABFF5F724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.29.0/24
Signature Algorithm: sha256WithRSAEncryption
51:69:71:e8:1e:13:e9:69:cd:f1:e8:88:fe:6b:80:4e:f3:37:
cb:7d:14:a4:11:37:0a:a8:bb:51:be:8f:d8:4c:5a:f3:45:0a:
3b:51:c8:79:a4:27:ff:8a:d9:2a:93:10:f9:29:96:41:9f:c8:
fa:7c:d1:aa:cd:95:51:65:9e:06:a4:1f:b2:eb:36:e7:c0:d4:
f8:ce:05:4d:b6:9f:66:e1:54:e7:4a:d0:4a:02:4f:7e:bc:42:
8e:ad:07:ea:e0:58:2d:ed:49:cd:57:12:cd:03:30:25:8e:38:
20:05:ea:5f:a8:8c:e2:f7:d9:96:5a:31:a6:55:a0:53:c1:5c:
fe:ff:86:58:a1:c3:da:73:91:29:5e:e7:36:a0:3f:0d:ef:50:
e9:79:be:f8:7c:fe:26:6d:bc:79:42:e6:6c:5e:d7:c9:50:0e:
1c:83:ec:b9:d9:1d:dc:fc:5b:f8:e5:b2:2e:80:7a:1c:4f:be:
12:f6:ef:43:82:7c:12:5e:9b:a5:b2:cd:53:45:a5:17:40:7d:
0d:01:46:71:38:21:4c:bf:5d:b3:9b:b7:dc:29:dc:49:b2:40:
16:d5:86:5e:98:8f:b7:3b:53:84:e7:8e:43:91:29:47:b4:23:
36:17:ad:b8:75:99:65:ed:1d:8e:70:ed:44:57:41:24:ca:ea:
5e:2d:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org