Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D0CACCE89611EC9CFF7BC5F1222468.roa
File: 61D0CACCE89611EC9CFF7BC5F1222468.roa (raw, json)
Hash identifier: XZAmI+UWsmprAsCgf7YAMz+67LAyJ4goblyLDSPg4fo=
Subject key identifier: FB:3E:54:B2:9B:EB:5D:9F:E8:7D:0C:A4:CF:61:9C:CD:1B:BF:22:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1465
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D0CACCE89611EC9CFF7BC5F1222468.roa
Signing time: Fri 10 Jun 2022 08:21:53 +0000
ROA not before: Fri 10 Jun 2022 08:21:49 +0000
ROA not after: Wed 30 Nov 2022 08:21:49 +0000
asID: 133199
IP address blocks: 156.245.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5221 (0x1465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:21:49 2022 GMT
Not After : Nov 30 08:21:49 2022 GMT
Subject: CN=62a2ff21-3f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:6b:5d:7f:4f:0d:e7:e3:8c:4b:15:a7:cc:
b9:61:13:02:3a:1a:30:af:aa:b8:71:29:36:bb:16:
67:e7:89:57:83:48:c5:61:dc:a6:a7:3b:f2:06:e6:
ca:7a:b8:9b:b8:df:34:c0:79:f5:63:47:2a:33:c3:
bf:4f:c6:22:74:33:02:56:94:df:e2:14:f5:9f:a2:
bc:ce:48:49:30:bb:ff:42:e1:cd:ef:e2:59:3b:69:
d3:ea:09:1c:c4:32:8e:e5:f0:ca:a7:67:2f:0f:90:
28:74:b6:d2:4d:1a:90:9d:7b:c4:f5:70:a4:8e:65:
dc:ae:4f:e8:46:c8:e3:c9:8a:96:71:32:63:ae:ad:
6d:d9:c3:0d:94:fa:e3:78:90:ba:4c:62:4d:e7:a0:
fd:50:32:c6:ff:80:13:b7:6f:8f:35:a7:a7:95:be:
c5:b4:4f:83:5e:cd:3a:56:5a:6c:2f:b6:93:66:17:
8d:b6:d7:0d:10:6d:ba:a3:f0:a8:73:19:94:d0:5d:
96:02:e0:50:ad:77:d4:c2:28:0d:bb:a1:b9:f6:14:
f4:d4:f6:e4:1c:c9:a1:e8:e7:e8:a3:a5:c0:0b:87:
8e:bf:9f:33:03:de:14:42:eb:cf:f2:95:4f:8f:9e:
d0:c1:18:1c:c0:16:ff:9d:9d:fd:c1:c6:65:d3:eb:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:54:B2:9B:EB:5D:9F:E8:7D:0C:A4:CF:61:9C:CD:1B:BF:22:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D0CACCE89611EC9CFF7BC5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.16.0/24
Signature Algorithm: sha256WithRSAEncryption
43:14:91:4b:59:33:2a:33:cd:c0:ea:28:e9:26:be:d0:36:40:
34:e0:8b:f5:2f:d8:6e:b2:32:65:c8:75:7e:69:3d:fa:11:2a:
22:96:6a:38:55:ae:db:1d:bb:f4:21:91:55:3e:e7:33:ca:90:
fb:ca:da:1c:96:57:bb:bd:e0:fc:84:66:5a:39:dd:5c:e0:c1:
ed:fe:f6:d0:a3:db:df:89:b5:cd:1d:99:a3:27:32:c0:75:d5:
83:99:41:a4:a6:17:d6:6f:e0:9b:2c:47:35:7a:16:76:ef:78:
60:0c:83:0a:59:25:47:b3:4d:26:20:4b:cc:47:1e:b0:bb:fd:
9e:1b:cf:9a:a6:4c:ff:dd:02:01:74:2c:7b:2e:9c:80:e6:c5:
ac:da:a3:a4:c6:56:a2:41:10:c3:90:2f:8c:94:bd:95:f8:59:
73:1b:a8:d6:72:00:72:9e:9a:a5:0f:0a:e7:df:c9:62:1f:b3:
cc:5d:d1:61:85:2f:87:22:a1:08:d6:84:49:b7:9a:b7:be:19:
e9:f4:3e:a9:28:6c:14:29:13:b8:96:e2:ac:45:53:5d:e0:96:
8a:2b:aa:9f:c8:70:be:9a:55:99:fd:7c:7c:fd:a3:af:c3:71:
42:bf:69:0a:b3:0e:32:1a:ae:97:5a:f6:ad:b0:14:9f:76:d2:
62:32:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org