Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6535B65AC47E11EC9959A18DF1222468.roa
File: 6535B65AC47E11EC9959A18DF1222468.roa (raw, json)
Hash identifier: 13ZEMS7DhY0eLoMHRSgckmrENp7n0Vpm+wJPq+0cLq8=
Subject key identifier: 9E:18:0D:A8:E8:78:6A:F5:8F:D5:19:B6:78:41:F3:9C:04:41:FE:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1396
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6535B65AC47E11EC9959A18DF1222468.roa
Signing time: Mon 25 Apr 2022 09:59:28 +0000
ROA not before: Mon 25 Apr 2022 09:59:25 +0000
ROA not after: Mon 30 Jan 2023 09:59:25 +0000
asID: 139057
IP address blocks: 156.251.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5014 (0x1396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 09:59:25 2022 GMT
Not After : Jan 30 09:59:25 2023 GMT
Subject: CN=62667100-832c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:e7:fc:8a:b4:78:09:1d:33:8f:1d:57:65:
fd:07:64:d8:dc:5a:95:7b:4e:28:c1:0b:82:d9:7c:
16:5d:cb:87:7a:42:e6:af:6b:b5:f0:c2:ea:2a:f0:
ca:02:6f:d8:b6:77:e0:54:2b:f7:ee:e1:c2:6d:71:
73:d5:ac:81:d1:b7:69:03:d3:81:49:21:75:65:5c:
65:d5:53:89:4c:9b:b5:c8:90:ec:ab:6c:04:32:d0:
78:86:74:e1:ee:3f:66:85:13:49:3c:39:dd:1f:c5:
fb:b8:6d:7a:f3:d8:7a:c7:bd:7e:2e:03:98:8c:66:
bb:00:4f:a9:bf:ac:d4:4a:45:b4:d9:a0:73:68:59:
73:f4:d1:1b:d6:07:9a:b3:cd:39:c5:88:c0:7b:ad:
33:92:44:7c:16:ce:ef:d4:94:4d:77:5f:30:f9:be:
43:ca:db:8e:fc:d9:53:17:a9:08:ec:ba:b0:22:41:
ad:57:75:d3:90:83:41:5a:9e:ee:1d:c4:1a:03:2c:
14:ed:14:ed:e7:a2:dd:b0:c0:bb:ea:ab:2d:c3:43:
23:42:d7:7a:8c:ae:39:f1:6a:d3:c6:e1:b0:46:9a:
e1:ff:d2:f3:f1:42:d7:f1:d7:f2:35:71:55:fa:06:
2b:e8:c5:66:01:99:2b:d7:01:47:90:d7:70:f7:f8:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:0D:A8:E8:78:6A:F5:8F:D5:19:B6:78:41:F3:9C:04:41:FE:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6535B65AC47E11EC9959A18DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:34:79:38:10:12:16:b1:03:eb:14:25:0f:97:bb:49:32:3d:
0d:c0:d5:78:b1:a3:23:af:72:d8:dd:32:89:98:0b:8c:51:87:
f2:9a:fb:df:f4:22:91:59:f8:c1:24:06:1d:a8:d1:86:f9:a2:
01:cf:dc:c9:31:d1:1d:f0:a5:63:c1:e0:f0:f1:44:78:e3:9b:
d9:78:76:e9:23:a5:9f:0f:6d:76:8e:4e:01:e7:16:9b:92:e1:
c4:13:d3:c4:6d:eb:42:06:38:4a:5b:41:4d:f3:18:49:03:0e:
a1:92:b8:a5:cc:4c:4b:cd:49:3e:a9:e2:a1:55:57:0d:51:40:
44:fb:88:81:71:ed:ff:15:07:d8:00:f7:0b:7d:e0:b0:8a:37:
91:98:a3:38:74:36:8d:e6:a5:fb:61:29:02:db:85:3b:43:35:
33:8e:52:9a:90:ac:d0:fa:57:2a:e1:2c:81:f6:f3:d2:ee:10:
63:14:05:3e:f3:07:09:5f:e0:0e:f9:72:94:a2:08:45:c6:ac:
25:95:8e:cd:3c:a7:06:1b:ec:78:65:c8:65:08:bc:f2:15:69:
b7:10:e9:b6:c1:30:d5:5e:8e:e4:12:95:4c:e2:2d:2f:ea:b6:
5a:d4:d9:b3:c4:63:5a:d4:b0:38:ea:91:0d:eb:7c:bb:93:10:
5a:14:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org