Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60188552E89711ECB9BEF7C8F1222468.roa
File: 60188552E89711ECB9BEF7C8F1222468.roa (raw, json)
Hash identifier: 2fRP3pQEhobkr+F/RDvMeMjmxlCShsuXchC8QwSc36s=
Subject key identifier: 88:2F:6D:5D:06:A9:B6:FE:EC:E1:EB:C6:CA:D8:F9:44:9F:0A:60:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 148A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60188552E89711ECB9BEF7C8F1222468.roa
Signing time: Fri 10 Jun 2022 08:28:59 +0000
ROA not before: Fri 10 Jun 2022 08:28:56 +0000
ROA not after: Wed 30 Nov 2022 08:28:56 +0000
asID: 133199
IP address blocks: 156.247.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5258 (0x148a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:28:56 2022 GMT
Not After : Nov 30 08:28:56 2022 GMT
Subject: CN=62a300cb-25b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:4b:8b:e8:90:76:d3:81:97:dd:cc:b5:a3:
49:b9:be:5d:79:90:7c:13:92:31:8b:e0:68:9c:b8:
c7:61:de:ce:51:b2:b8:59:12:dd:3c:33:e0:d8:86:
ea:d8:c3:80:e9:28:d0:96:fa:f0:72:14:b8:0b:8b:
6c:36:33:be:ae:b4:8c:8e:de:2b:a0:25:3c:56:ee:
0a:16:59:46:9e:ad:ab:6d:0a:e7:6e:9d:f6:0f:ee:
6e:23:44:27:da:19:43:5e:ee:25:06:a1:3b:41:a4:
ef:9f:10:fd:f4:aa:98:73:40:74:0c:88:07:af:c1:
5a:10:2d:b9:6f:9b:a6:ea:a2:8f:e3:29:ad:5f:03:
70:d4:e0:64:8b:eb:5a:a6:b8:c6:85:98:85:99:5a:
08:57:3f:ff:9e:4e:d8:01:1e:ce:89:7b:c2:f0:9c:
ef:64:36:76:c5:9f:e3:7b:7f:07:0f:e1:6b:d0:f5:
6a:c4:01:c2:16:e5:49:ff:b6:57:89:33:99:c8:57:
2f:18:a0:6d:c1:59:70:6e:75:61:7d:44:f2:69:af:
75:d8:fd:b9:b8:2b:af:51:56:4a:d1:14:a2:4d:6d:
50:05:87:1f:0d:2d:36:28:39:ef:02:77:6f:27:8b:
a8:cf:bc:02:63:82:69:41:9a:00:87:0c:35:4e:c9:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:6D:5D:06:A9:B6:FE:EC:E1:EB:C6:CA:D8:F9:44:9F:0A:60:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60188552E89711ECB9BEF7C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2a:ef:9d:4b:c9:b2:15:1a:44:a3:20:73:04:6a:d3:99:ad:
7c:d3:db:ee:3c:50:7b:45:8d:3a:e8:36:9f:8f:82:ab:83:8d:
d0:8a:37:42:98:3b:2d:cf:0c:71:4e:da:cd:1b:bb:cf:ea:66:
54:dc:7a:5f:17:da:39:18:b4:e6:c1:53:87:7a:fc:d1:2d:f0:
bc:92:7c:e2:ac:19:03:0d:11:c9:f6:8d:50:1e:b4:3f:a9:89:
2c:9a:ea:89:72:17:29:c0:72:1e:6d:0f:78:db:6b:c5:87:54:
b7:40:eb:d4:fc:8f:55:af:1c:e9:45:8f:2d:f4:65:6b:e7:af:
e8:df:58:1f:27:e2:cc:e8:dd:6f:d2:61:e5:95:42:34:2e:f9:
6c:fa:28:ba:2e:b7:b5:82:69:4d:ae:e4:8b:f0:09:7e:1b:38:
eb:98:bc:32:70:5c:3d:08:d2:2e:7b:90:29:2f:4d:fc:d6:cd:
65:3c:0b:5d:41:1a:46:f3:20:c5:1a:7f:8f:d6:d3:86:45:cd:
63:9f:a5:8e:0d:41:da:74:90:e1:39:30:d3:ec:c4:28:a3:3f:
c6:29:75:54:b7:e0:33:02:82:a7:77:b3:6f:f3:4a:9c:d4:b7:
4c:68:0e:d9:9e:44:dc:c9:a7:3b:24:f3:8f:ea:8e:65:9c:a0:
48:46:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org