Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680F9F7A395F11ED8244ECACF1222468.roa
File: 680F9F7A395F11ED8244ECACF1222468.roa (raw, json)
Hash identifier: 1ayoWn9nXVnlkI3Wol0GFEe6pOhXqN0BmZAyWWZgme4=
Subject key identifier: 34:CB:7C:F6:8B:D0:BA:86:E1:7C:86:18:62:D6:E9:59:02:FB:9C:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1829
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680F9F7A395F11ED8244ECACF1222468.roa
Signing time: Wed 21 Sep 2022 03:42:25 +0000
ROA not before: Wed 21 Sep 2022 03:42:22 +0000
ROA not after: Fri 30 Dec 2022 03:42:22 +0000
asID: 35916
IP address blocks: 156.233.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6185 (0x1829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:42:22 2022 GMT
Not After : Dec 30 03:42:22 2022 GMT
Subject: CN=632a8821-c0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:97:7b:9b:46:65:2a:9c:a4:6b:45:64:cb:
bb:1d:37:7f:af:94:bb:42:1a:fd:87:1f:35:bc:f5:
cf:e3:f9:14:06:11:d7:fc:ac:d3:1a:93:83:4a:7b:
74:8e:50:9f:f3:71:d0:9e:8d:7f:f1:9b:62:e9:2b:
09:ea:ba:80:68:d5:b0:b6:ce:ce:ec:79:17:35:e4:
9c:ea:7d:0d:38:2a:26:bf:96:9e:ec:36:1c:63:e9:
69:4e:5d:d2:76:3b:80:f0:20:18:70:85:88:fa:db:
c2:8a:1f:86:f8:0b:1d:c9:94:a7:2e:4e:46:04:73:
b2:11:82:c3:ed:63:f7:56:df:a4:ac:d0:82:c5:c3:
d9:3c:81:6c:ce:3a:ea:d7:5a:f0:05:64:c8:b3:61:
42:5d:3f:e0:fb:b3:b1:aa:25:42:fd:d6:cf:5f:d0:
7c:a9:51:2e:f1:ff:ac:e5:6f:74:2c:a4:df:21:ab:
91:1b:9e:14:a1:83:10:5c:f3:40:ae:f3:4b:4c:b5:
c8:9e:9f:7f:6f:67:d3:f9:34:fd:6d:ac:c2:87:3c:
44:98:a9:15:2e:7d:48:8e:0e:15:e9:8d:1f:e8:04:
87:ba:e3:e1:ff:f1:5c:50:ab:cf:8e:97:11:59:5b:
1c:a9:d3:dd:76:9c:09:22:71:ce:2e:23:46:8a:0e:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:7C:F6:8B:D0:BA:86:E1:7C:86:18:62:D6:E9:59:02:FB:9C:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/680F9F7A395F11ED8244ECACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.40.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b1:f6:f1:fb:fa:1d:dd:91:73:f3:7c:ae:96:c1:56:57:e5:
93:c3:33:5a:4b:d9:8c:e9:78:97:87:9c:80:06:c0:dd:92:9a:
b2:45:39:94:ce:4d:bc:94:a9:d2:87:df:08:37:95:78:ac:ca:
84:01:79:f6:36:79:a1:10:76:9e:11:82:1e:61:3d:6a:42:7f:
1f:27:70:5d:f1:9d:9b:af:09:fb:5f:2c:0b:f2:81:8e:63:9a:
20:f3:14:1e:c0:b3:23:45:23:0c:02:a1:c1:6f:5d:fa:cc:24:
ec:cb:7e:1b:1f:7c:5c:13:08:5d:17:f5:db:ac:10:00:13:c2:
e0:81:42:ac:bc:f1:1c:d9:ea:25:e7:bf:e5:98:26:77:f2:63:
c4:db:45:b3:2a:67:29:c2:55:9e:df:fc:2d:89:0f:13:97:b7:
ca:cd:4c:b3:c9:bc:71:65:36:e1:0f:53:46:a8:22:06:cc:c9:
d8:19:eb:7c:35:a6:8a:36:10:2a:5d:da:fa:3d:1c:51:67:4c:
ef:a7:93:2d:53:16:c0:c2:69:5b:0a:99:c3:af:7e:37:76:56:
52:51:55:23:26:73:3a:0e:d0:bd:63:4b:63:03:1a:c7:76:e7:
11:38:27:97:83:83:92:41:82:13:6b:a3:4d:22:ff:a7:76:f6:
a2:37:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org