Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F537E382C9511EC82EAD633D8A014CE.roa
File: 5F537E382C9511EC82EAD633D8A014CE.roa (raw, json)
Hash identifier: IUUtdxml9Hc8SuNZelI0KzP/BOo8S9ZoN7ZUmbhGgRA=
Subject key identifier: ED:78:37:C7:07:63:F2:2F:9C:98:A8:E8:EC:89:FA:EE:B0:D5:D7:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F537E382C9511EC82EAD633D8A014CE.roa
Signing time: Thu 14 Oct 2021 02:21:00 +0000
ROA not before: Thu 14 Oct 2021 02:20:57 +0000
ROA not after: Thu 03 Mar 2022 02:20:57 +0000
asID: 1239
IP address blocks: 156.255.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 14 02:20:57 2021 GMT
Not After : Mar 3 02:20:57 2022 GMT
Subject: CN=6167940c-fde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:e5:89:fa:35:1f:5a:c0:43:fb:71:71:bc:
f9:4b:0d:0e:26:52:bd:8d:2a:40:1d:60:a4:cf:c0:
8c:ae:29:e5:40:73:d0:98:83:01:fe:5f:ea:36:ea:
38:be:44:de:44:91:c3:a1:fd:bc:f1:33:c6:9f:b2:
47:35:87:86:d2:16:e4:3f:fa:e9:5f:1b:ac:47:44:
c7:3a:09:e0:b5:98:fb:48:3d:cf:7b:b0:b3:f3:7f:
c6:89:06:c9:79:86:e7:cb:97:c0:27:d0:f5:44:54:
d0:82:71:5e:42:b9:30:40:00:d4:41:55:82:93:27:
bb:21:24:2d:35:a0:75:db:15:d2:62:52:75:b1:4f:
b8:60:68:f8:fb:82:5c:6e:3b:1e:97:b2:e6:6e:be:
a7:b3:18:a7:ee:4f:8c:fa:63:c5:b5:16:e7:f9:5b:
39:47:e6:be:73:7e:30:d4:47:4e:b7:94:6d:99:65:
9a:a1:85:ae:ab:7d:b3:1d:3a:fc:a9:75:b6:de:db:
87:19:e7:72:1b:4e:0f:6c:ff:8f:d5:11:5c:52:2a:
ac:4c:75:73:d7:78:20:23:42:df:52:c9:4e:88:26:
03:80:95:06:c5:f7:f6:a7:cd:17:56:9d:eb:f1:ab:
9e:a6:a6:13:7b:f5:0b:35:f8:ff:e9:db:3f:bb:a1:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:78:37:C7:07:63:F2:2F:9C:98:A8:E8:EC:89:FA:EE:B0:D5:D7:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F537E382C9511EC82EAD633D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:b1:98:53:3e:8c:68:c2:2e:c3:2e:99:97:77:25:40:29:ef:
50:4c:73:46:bc:4c:ec:0d:de:2b:f6:03:e2:c2:bd:f1:34:d0:
6c:6a:76:ba:ff:d4:97:f2:ac:74:5a:4e:e5:7b:23:ab:a7:21:
b1:51:27:b4:68:ba:5e:76:16:8d:4e:10:43:2b:ce:95:bd:d5:
10:92:c7:a7:32:7a:be:65:75:06:e8:2b:09:e8:6a:a1:6e:d4:
a7:8f:ba:95:f5:ab:da:e0:06:2c:9f:9e:07:47:16:03:f2:f3:
32:ec:fb:0b:d3:16:71:34:59:be:a9:93:d0:51:9a:44:e8:e9:
fe:2c:d9:a2:fd:ba:e4:dd:80:df:86:99:9e:be:24:ba:4f:10:
0b:e8:7a:0c:d5:7a:3c:f3:bf:46:c1:3e:aa:78:5d:7b:8c:dd:
33:c7:16:0e:51:ba:30:f8:82:e1:76:90:51:d1:30:60:ad:7e:
39:7d:80:47:cd:8b:72:f5:38:60:8c:e5:fc:0d:01:e5:2f:aa:
d6:e8:4b:fb:a2:71:99:b9:6b:6e:f7:63:6a:3d:ea:da:43:57:
26:ad:45:0a:74:1d:d1:eb:e7:ea:78:da:eb:f0:f8:2c:a2:2d:
20:6a:a3:00:8c:03:d7:68:9c:8b:11:72:0a:7b:55:48:9c:67:
25:9a:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org