Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57D6E762395F11ED900FB7ACF1222468.roa
File: 57D6E762395F11ED900FB7ACF1222468.roa (raw, json)
Hash identifier: xNz3ebFOkk1NJSwxdm1zEQoW7Jxo5YGsZWLDx9AD3Zc=
Subject key identifier: 40:8E:79:79:84:2F:AC:57:60:06:0A:8B:9C:2B:D6:CF:EF:11:31:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1827
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57D6E762395F11ED900FB7ACF1222468.roa
Signing time: Wed 21 Sep 2022 03:41:58 +0000
ROA not before: Wed 21 Sep 2022 03:41:54 +0000
ROA not after: Fri 30 Dec 2022 03:41:54 +0000
asID: 35916
IP address blocks: 156.233.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6183 (0x1827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:41:54 2022 GMT
Not After : Dec 30 03:41:54 2022 GMT
Subject: CN=632a8806-e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:21:e6:55:18:a3:39:1a:4a:0b:c0:eb:0c:
9f:41:e4:5b:d8:0c:b0:44:e4:4e:21:36:1b:2c:88:
cf:af:42:8c:05:d5:e0:c6:fa:9c:67:e9:fa:de:03:
55:14:30:be:7a:58:3a:b9:b9:09:40:02:d9:f4:50:
3d:93:d4:f5:3f:71:e7:da:03:e2:f6:3e:68:b2:f8:
72:08:c0:07:57:83:0b:ba:3b:cc:64:ad:54:a8:83:
02:c1:7d:5f:cd:84:f1:f9:90:0b:35:af:5e:a0:6e:
c0:44:9f:35:42:92:42:ce:8a:0f:7d:39:c9:f6:80:
67:7b:02:54:2c:25:7b:62:01:f0:17:d4:60:be:13:
77:4d:3f:e9:bd:3e:d5:bf:f1:db:1b:45:83:24:6c:
a6:c1:9d:c6:9b:37:7e:d7:30:16:29:7a:21:82:b2:
2f:70:04:e0:a7:23:b5:60:e5:e3:00:0c:a7:05:3c:
8d:50:41:90:54:5f:92:64:08:7d:2d:ff:57:e3:35:
c9:64:54:2c:0b:8b:cf:bd:d0:0f:a6:d9:2e:36:5d:
68:00:d2:d1:22:34:79:85:a3:32:71:1e:ae:c9:70:
36:4e:53:45:fb:8e:41:23:0a:44:6c:2c:4f:e5:f9:
bd:cb:6e:6a:94:33:83:2b:a0:ab:3d:6b:d5:8e:cc:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:79:79:84:2F:AC:57:60:06:0A:8B:9C:2B:D6:CF:EF:11:31:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57D6E762395F11ED900FB7ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/21
Signature Algorithm: sha256WithRSAEncryption
17:11:8f:59:98:2b:a8:2f:e6:d3:4a:54:82:22:87:fd:00:cf:
21:b3:53:cc:e0:87:07:27:18:2c:3d:57:82:e0:0f:b7:fe:60:
62:36:53:95:0b:89:1a:a1:7c:f0:ad:df:ab:6f:ed:e4:c7:05:
66:01:f8:1d:01:f1:75:a7:43:76:b4:d2:f4:b9:dd:ec:1a:f2:
7e:d2:a2:cd:2c:1e:e8:51:71:10:3a:de:e4:07:66:4d:e9:98:
b7:c4:5a:57:5b:e8:e1:70:2d:5e:02:bc:92:70:62:2a:db:30:
33:db:f8:54:d9:09:e1:7a:93:a6:87:29:b0:82:b2:c0:4f:51:
29:a9:02:34:f3:77:ab:45:88:9a:37:76:12:ec:8c:82:6d:ff:
26:aa:d1:51:82:c0:33:9e:c8:c0:3b:44:ec:e9:5e:86:cb:67:
ab:55:88:7d:87:d9:18:65:41:8e:08:e9:da:28:09:50:fd:0d:
4b:0d:fd:ef:fe:23:d6:a2:81:18:a0:3b:64:84:50:f0:5b:df:
a8:68:cb:7c:f3:ae:43:f1:df:d8:5c:c1:99:cb:f2:c5:27:49:
df:ff:58:e1:75:0b:2b:65:8b:81:76:80:a6:9d:b3:ea:db:0f:
35:b0:05:fd:c8:36:c2:fc:e4:63:ca:fb:4b:b5:2b:b2:86:0b:
5d:0a:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org