Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E99BC3E01BE11EC8E76A767D8A014CE.roa
File: 5E99BC3E01BE11EC8E76A767D8A014CE.roa (raw, json)
Hash identifier: ssgLif0xs+2+pRB5mnNs6xjsPKi5YsK0FHuRD/9SvV0=
Subject key identifier: CD:D4:B6:97:27:70:93:9E:EE:B7:CF:93:23:69:32:BD:48:0B:63:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E99BC3E01BE11EC8E76A767D8A014CE.roa
Signing time: Fri 20 Aug 2021 13:57:03 +0000
ROA not before: Fri 20 Aug 2021 13:56:59 +0000
ROA not after: Wed 20 Apr 2022 13:56:59 +0000
asID: 135026
IP address blocks: 156.254.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:56:59 2021 GMT
Not After : Apr 20 13:56:59 2022 GMT
Subject: CN=611fb4af-8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:01:a0:8d:b0:f3:91:6e:b7:f6:b5:6b:15:
7c:c3:cb:16:96:63:b3:6b:da:08:1e:78:c0:44:33:
b6:29:e4:b7:3d:7d:b7:53:f7:d1:34:3a:df:b0:94:
9b:96:ae:b0:3c:99:09:b8:28:9c:ec:a5:84:90:44:
a4:ff:d9:44:6a:d6:db:75:f8:ff:b4:16:e7:6c:a5:
b5:6c:85:c7:8c:2f:84:d0:85:b0:c7:c7:20:eb:57:
fb:00:a9:92:b8:ab:0e:05:98:63:78:3b:be:0d:74:
84:30:24:27:99:da:84:41:d9:4b:fb:3b:53:dc:20:
c1:06:9c:93:55:7e:1a:b2:40:0d:71:8e:0d:7b:13:
22:dc:b0:90:c7:90:8c:eb:ff:bc:e4:cb:0e:2c:53:
03:f6:95:25:f2:4e:da:4d:b4:cc:c6:e4:eb:08:d9:
41:c4:e4:df:a2:a2:72:84:eb:98:08:bf:6c:d5:84:
f1:84:76:75:47:eb:1b:a6:bf:69:92:6b:24:15:83:
05:59:24:29:16:43:4a:e9:f5:23:6e:8a:5e:50:9b:
13:0c:ba:80:da:07:50:b2:2c:cf:d1:b6:8e:2c:e7:
2c:8a:34:6d:44:99:b5:a9:0e:eb:28:16:64:43:cc:
38:63:43:07:5e:a1:7a:09:e4:ee:5e:a3:62:48:6a:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:B6:97:27:70:93:9E:EE:B7:CF:93:23:69:32:BD:48:0B:63:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E99BC3E01BE11EC8E76A767D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.114.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:d7:59:b6:54:14:6a:73:7a:26:97:cb:5e:71:fb:95:5d:
51:c5:ef:b1:ae:bf:0b:c5:f5:54:f5:7d:f2:87:62:d5:07:44:
76:94:32:2c:a0:6e:ec:36:05:71:3b:97:5d:db:ba:eb:21:22:
48:33:ad:38:68:5f:3e:a5:5d:59:3a:77:f4:7d:f1:00:47:63:
4d:38:71:5c:45:fd:56:2b:cc:c4:33:b8:56:61:17:51:1e:fd:
b2:e8:90:bd:b3:18:08:88:3d:cc:ea:e1:5e:2d:ea:bb:81:42:
ae:6f:8a:0b:ce:82:2c:f2:a7:5e:53:7a:ec:5c:2a:75:bd:b1:
02:97:a6:4b:79:f8:c8:b8:c6:00:d4:b5:c8:a8:f9:ae:64:c9:
46:b7:cd:dc:6c:9b:86:4a:52:0e:e8:77:76:50:4c:da:68:b0:
af:a2:f5:90:9e:02:c0:ee:83:fd:a0:80:ac:e8:fe:1c:09:06:
5c:cc:2d:f2:d9:f8:b6:d4:df:bb:bd:0f:45:ab:66:e2:74:87:
58:93:c1:5e:92:95:ae:0e:43:8a:70:04:51:29:db:02:b2:30:
a4:61:99:05:cb:72:f4:08:0d:6a:59:5b:b6:d0:7a:67:da:a1:
d9:16:c6:dd:ed:ab:0c:78:eb:e4:c6:f0:0b:af:17:6c:c0:9e:
07:f6:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org