Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675B5078A44111EC8E1C7FC65A40D577.roa
File: 675B5078A44111EC8E1C7FC65A40D577.roa (raw, json)
Hash identifier: uUGlBq9IfnHwUCIp0xYANPK0NeLhAbZIp2YlKj9huVg=
Subject key identifier: ED:FB:8C:A9:03:F7:9F:F3:07:27:5A:85:CB:F3:5C:F1:BC:43:7E:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1285
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675B5078A44111EC8E1C7FC65A40D577.roa
Signing time: Tue 15 Mar 2022 09:22:16 +0000
ROA not before: Tue 15 Mar 2022 09:22:12 +0000
ROA not after: Sat 31 Dec 2022 09:22:12 +0000
asID: 133201
IP address blocks: 156.255.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4741 (0x1285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:22:12 2022 GMT
Not After : Dec 31 09:22:12 2022 GMT
Subject: CN=62305ac7-5b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:69:73:ea:2c:94:6c:26:5a:7e:75:e0:02:
1c:9e:14:65:99:1e:9f:9f:91:33:a6:2e:b4:5c:d6:
54:4e:83:6a:36:f2:9a:75:77:4d:a5:c3:02:d8:3e:
6f:d2:0d:43:0f:89:21:c9:b5:23:06:c6:13:49:61:
fb:dc:0e:1c:c8:f6:42:44:47:d2:c3:89:f0:31:e1:
ca:0d:ee:c0:7c:a4:21:dc:66:c4:ae:f4:ac:1d:80:
ef:48:96:b8:d5:26:92:f5:df:f3:57:d2:5e:5b:db:
91:e6:09:18:32:48:19:21:f9:cf:58:a0:7d:ca:ec:
67:f3:99:ea:9a:a1:90:cf:d9:3b:36:c2:9e:cb:2d:
9f:22:89:e7:0e:18:24:b0:24:8c:88:ba:55:b9:29:
d5:17:0e:45:d1:ef:c5:d2:ab:7d:99:34:ef:ac:ba:
6a:13:4c:12:e3:d9:69:ef:b6:d3:d6:cf:68:79:63:
57:f7:58:ba:91:9f:a5:8e:b2:b4:51:51:a1:4d:25:
9e:e9:fb:a4:e6:d3:8e:1c:68:d3:7c:cb:fd:c9:ca:
b1:ac:ef:65:ed:1d:46:75:70:0a:26:58:a7:e6:a0:
2d:a6:e6:73:b9:45:56:91:fc:67:06:ed:69:e1:18:
93:88:89:4d:c0:62:83:b8:62:34:e7:db:8f:40:56:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:8C:A9:03:F7:9F:F3:07:27:5A:85:CB:F3:5C:F1:BC:43:7E:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675B5078A44111EC8E1C7FC65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.12.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f0:04:0f:34:11:b2:ab:80:62:e2:7a:ad:72:bd:57:87:c9:
16:8b:76:28:d3:e9:cb:ca:ba:9a:b8:08:b0:29:eb:d9:ab:07:
27:25:53:90:8a:e5:b4:a5:22:a5:d9:a9:5a:78:3e:03:90:cf:
09:f4:87:47:38:a2:53:e5:5c:63:a6:3e:f9:fa:89:b7:fa:b7:
ba:24:69:ad:0e:9f:69:69:ae:95:8f:72:b3:45:10:8e:9e:c4:
dc:bc:bc:c2:ce:0d:e7:0d:77:28:34:77:5f:9c:03:a1:34:cf:
09:fc:be:46:42:ec:1c:e1:e6:9b:d8:5f:3b:36:49:62:dd:3f:
12:08:a9:25:90:64:02:37:a9:fe:28:f3:39:d1:74:bd:71:0d:
ef:a7:7d:71:61:63:a7:7a:9a:72:6c:42:0e:5b:44:22:63:7c:
76:2f:40:2a:1a:be:93:de:c3:91:2a:04:d6:c9:26:67:d7:47:
1c:5d:31:1d:5f:c8:4e:02:45:23:a9:59:a7:56:21:c8:54:d0:
51:bf:e1:7b:ca:ba:71:26:b5:49:da:99:c5:ee:25:54:ba:48:
8b:94:8c:53:bc:36:d6:69:ac:3f:97:0e:e6:f7:17:6b:a2:c3:
98:ef:38:02:b8:5b:b5:ed:37:bd:09:a4:df:95:30:c6:82:d9:
aa:45:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org