Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A865E52179411EDBB8AA59EF1222468.roa
File: 6A865E52179411EDBB8AA59EF1222468.roa (raw, json)
Hash identifier: SfHoaVLZNE4oB9VZwdGsz9HyEFLX7cCEkCPPKObZdxA=
Subject key identifier: C4:20:79:B2:D8:AB:81:77:63:0D:D4:28:7A:6D:F6:8B:75:AF:8C:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1695
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A865E52179411EDBB8AA59EF1222468.roa
Signing time: Tue 09 Aug 2022 03:36:13 +0000
ROA not before: Tue 09 Aug 2022 03:36:09 +0000
ROA not after: Fri 30 Dec 2022 03:36:09 +0000
asID: 328608
IP address blocks: 156.246.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5781 (0x1695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 03:36:09 2022 GMT
Not After : Dec 30 03:36:09 2022 GMT
Subject: CN=62f1d62d-0a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:58:59:c6:f7:65:fb:30:97:db:02:b2:9a:
2d:c6:0b:1b:e3:a3:33:03:2c:2a:2b:2e:13:e7:62:
a3:58:c0:df:92:b3:ce:2d:24:9f:6b:2c:ee:f6:7b:
ad:c7:ae:04:27:ed:7f:31:50:d0:d6:b6:a5:7b:cb:
cb:d0:e4:99:97:d2:9e:5a:bc:c5:91:d2:75:50:46:
cd:15:8d:9d:ab:25:7c:bd:31:1c:19:53:26:1f:1f:
0e:86:69:c5:6d:15:6f:d0:fd:48:85:ac:60:0b:a5:
b7:5b:20:42:06:0f:8e:76:55:24:3f:6e:d9:a5:c2:
d5:8f:bf:59:44:cd:2e:77:6e:ee:30:5d:2d:9c:e4:
f0:a8:99:ce:b6:08:cb:83:9f:ee:7c:7b:a5:75:cc:
54:05:98:70:ce:21:80:cc:d5:25:f7:7a:dc:2b:ba:
00:2f:2f:3b:e9:0f:8a:1b:2f:17:45:e2:d2:92:a5:
a0:31:1c:48:57:3d:76:f1:0d:70:95:b0:d4:f0:c4:
cc:39:34:21:f7:3b:97:ab:39:3a:aa:03:66:30:71:
f8:4a:ec:fb:f7:b1:f1:80:09:81:aa:db:4f:e7:61:
e9:b2:89:d2:5f:59:d5:42:7a:bf:8c:bd:60:ca:91:
69:8b:c4:d7:2a:94:4c:a8:3f:9a:9c:87:f1:9a:7f:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:79:B2:D8:AB:81:77:63:0D:D4:28:7A:6D:F6:8B:75:AF:8C:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A865E52179411EDBB8AA59EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.200.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d3:21:df:ea:9f:b2:22:3e:c2:f3:6b:86:21:71:5a:f1:73:
1c:a7:cb:4e:c6:7e:d6:5f:d3:fb:f9:ef:f1:fa:24:3f:2d:8a:
0c:3b:1e:02:58:42:20:9b:45:9c:04:1e:7d:eb:d1:3c:c9:96:
da:86:a1:53:f9:c7:21:a2:1d:22:6f:56:b1:bb:2a:a1:37:80:
a5:6c:cf:3d:43:89:5c:7f:88:24:29:e9:6d:b2:6c:5c:6d:d3:
77:9c:1a:32:56:28:ce:46:9f:25:01:61:60:b2:14:48:14:c9:
27:f2:ca:17:c7:91:8e:71:7d:1e:1e:0a:a6:3a:ea:d6:cc:54:
d3:3a:34:06:68:68:84:94:c3:9b:88:89:d3:81:f1:c0:11:ca:
74:d2:79:5a:b1:86:1d:64:33:f8:f0:c0:67:66:26:bf:4d:4a:
65:e1:36:11:92:df:94:f7:1f:66:a3:4d:4d:bc:39:f3:79:9d:
48:81:bd:18:5a:03:83:ba:2f:ff:c5:f4:d8:b3:4d:49:a9:81:
6d:f0:39:10:c9:7f:ce:75:7f:b9:59:53:3c:e2:5c:54:85:ae:
9e:1c:78:bb:39:6f:42:1c:7b:a8:6a:07:0b:6d:e7:bf:bc:54:
26:a9:87:17:78:f6:89:62:99:76:b5:f4:2f:60:8d:3f:7e:3e:
80:cf:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org