Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4F0DA2597D11EB89B17D0CF8AEA228.roa
File: 6A4F0DA2597D11EB89B17D0CF8AEA228.roa (raw, json)
Hash identifier: 6HMEb0Aq2l6cPZUprQgMLLAYpi/xYG4x2eneboD4opc=
Subject key identifier: BE:20:CD:AD:86:CC:CF:0D:CD:9E:94:64:3F:BF:02:11:DC:D0:E1:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0460
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4F0DA2597D11EB89B17D0CF8AEA228.roa
Signing time: Mon 18 Jan 2021 11:07:56 +0000
ROA not before: Mon 18 Jan 2021 11:07:52 +0000
ROA not after: Thu 14 Apr 2022 11:07:52 +0000
asID: 139811
IP address blocks: 156.240.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 11:07:52 2021 GMT
Not After : Apr 14 11:07:52 2022 GMT
Subject: CN=60056c0b-10c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:e9:d9:9b:b7:26:fe:a2:1b:d7:ce:38:e2:
c7:d8:0b:90:e5:63:21:08:e0:91:d8:8e:d2:b7:d1:
45:3b:ef:f9:e1:e8:ce:ab:b0:47:03:d1:04:d0:eb:
56:bc:df:af:42:1c:e8:54:cc:c2:b0:6c:7d:b8:bb:
7e:bb:c4:92:66:b8:a4:df:e7:f4:4b:6f:7d:c0:e6:
c0:fa:9c:04:30:ae:47:7d:48:32:31:fa:6b:4e:bc:
b4:d2:28:92:d3:a0:45:f9:85:88:f4:9f:5a:97:a2:
52:26:21:76:43:c8:11:57:61:67:2f:df:16:79:63:
23:db:1f:db:f3:70:93:ec:a9:ef:f0:09:b0:72:69:
db:d4:c4:d9:3a:87:1c:ce:00:c5:d0:bc:87:bc:33:
58:8c:54:68:3a:1d:6c:9c:95:f5:ec:d9:a1:4e:1c:
96:ec:3c:1b:b1:d1:96:be:e9:8c:25:ec:ad:ee:06:
ee:97:60:8e:03:29:4d:47:41:34:96:a5:3f:f3:19:
7d:a4:35:3b:36:da:49:5c:20:9f:be:f1:a0:bf:58:
00:5b:2a:09:9b:45:da:7c:7b:7b:56:45:7c:84:29:
b6:e2:39:90:7a:e6:83:95:3a:c8:ad:2f:af:45:ba:
05:0f:39:17:01:5b:33:0a:53:b4:a9:5c:0c:50:d4:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:CD:AD:86:CC:CF:0D:CD:9E:94:64:3F:BF:02:11:DC:D0:E1:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4F0DA2597D11EB89B17D0CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cf:fa:2a:3e:c5:9c:8a:69:fb:e0:b9:d6:7f:ed:83:1c:04:
21:7e:40:e4:ef:32:33:3b:8c:28:ed:bb:42:1e:33:ce:35:9a:
ad:e4:a5:d7:ca:b9:de:0d:c7:e0:11:0e:e1:2e:2e:45:46:6e:
49:12:83:1b:7b:0c:d5:82:95:e4:bb:93:c6:41:f8:e7:d6:4d:
2a:51:2c:63:52:69:ff:f4:96:26:53:6e:7e:fb:60:26:26:00:
4d:68:4d:ed:dd:9b:c1:d2:b8:e3:42:4c:e1:a5:0b:15:ee:cf:
e8:84:10:92:75:67:df:c1:32:32:af:d4:d2:5c:59:5d:7e:de:
87:03:6c:37:f7:de:a2:36:fb:d4:f0:02:9d:ae:b1:e8:5c:a1:
d1:b4:10:ba:13:17:d5:4d:18:5f:3e:6f:35:08:ac:5a:41:95:
97:c7:0d:b9:88:31:70:dc:97:75:86:ae:05:73:41:28:15:5a:
dd:ed:21:fd:34:de:a4:f4:14:73:f5:1d:8e:10:81:6e:6b:88:
f7:1e:ec:85:e9:b5:36:31:03:32:91:e2:b3:63:b7:df:20:21:
6e:56:1e:bd:a4:65:6a:cf:a2:da:78:d5:14:6a:d4:dd:13:20:
4a:61:88:9d:89:2b:f0:ea:1a:58:33:15:4d:9d:38:f4:f6:ed:
51:90:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org