Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A96F0E0E89711ECA30927C9F1222468.roa
File: 6A96F0E0E89711ECA30927C9F1222468.roa (raw, json)
Hash identifier: JcXwC1zCrEHqUksGe08koLfmXrrnQ+u0cm3oX7L0tKo=
Subject key identifier: CA:AF:E1:B0:66:8C:07:0B:E9:12:3A:00:11:0F:9F:99:C0:4C:AF:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 148C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A96F0E0E89711ECA30927C9F1222468.roa
Signing time: Fri 10 Jun 2022 08:29:17 +0000
ROA not before: Fri 10 Jun 2022 08:29:13 +0000
ROA not after: Wed 30 Nov 2022 08:29:13 +0000
asID: 133199
IP address blocks: 156.247.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5260 (0x148c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:29:13 2022 GMT
Not After : Nov 30 08:29:13 2022 GMT
Subject: CN=62a300dd-81b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:df:b3:24:f1:3a:d9:0a:5a:35:02:82:46:
21:d5:3a:a9:e2:ad:d3:83:20:84:d8:19:21:c2:89:
d3:1e:00:4c:60:f5:31:06:b2:70:37:94:f4:20:7b:
91:af:fe:e2:2d:ca:dd:6f:db:d0:09:12:b5:32:86:
0c:77:13:4c:50:af:14:cb:70:b4:76:10:0f:95:98:
55:db:34:e1:af:68:e7:df:78:94:52:58:55:55:c5:
09:7d:a4:75:08:39:c3:47:72:86:30:8e:2f:ff:6a:
68:d9:12:36:c3:42:db:f9:95:32:12:95:be:87:bf:
5a:d9:ea:af:18:44:fe:95:7a:23:e5:48:83:f0:aa:
86:06:03:73:69:6b:87:e0:5d:38:d0:c1:b3:70:67:
b5:e4:9a:c2:ea:73:0f:40:7a:23:70:85:2d:2c:ed:
53:6c:00:41:c4:e9:6d:22:fd:c4:eb:0e:87:38:8a:
cf:45:9c:4e:56:d6:71:d3:ee:64:4d:94:d3:af:bd:
30:8c:b1:fc:6c:09:84:cf:50:eb:04:34:12:9e:ac:
40:37:44:cf:63:8a:a7:08:a5:41:db:8e:0c:51:a1:
cf:0e:62:4e:c1:4d:4b:a1:db:28:81:28:2c:c9:13:
56:ed:fa:28:1c:5e:82:11:00:d5:dc:f2:1e:36:9e:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:E1:B0:66:8C:07:0B:E9:12:3A:00:11:0F:9F:99:C0:4C:AF:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A96F0E0E89711ECA30927C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c2:39:62:fe:d8:24:14:62:54:dc:20:8b:8e:82:87:9b:92:
11:62:d9:04:ef:39:57:2c:6d:48:f7:e2:38:90:50:0c:60:a2:
5b:d0:0c:60:9d:5c:ff:ce:71:dc:99:6d:1b:70:13:21:90:06:
a5:fa:73:15:26:2c:ea:a6:08:f2:d8:03:8d:66:e6:2c:44:b7:
70:06:30:ae:94:9a:f9:41:99:ee:bc:14:c7:80:c4:6b:77:35:
38:e7:92:5a:78:37:2e:8e:52:65:0e:63:6a:9d:f6:c9:25:41:
5f:a3:a0:16:2c:45:f4:bb:76:6d:16:7f:bb:c7:46:43:0c:44:
6f:87:44:7c:c0:43:f3:41:c0:2f:84:aa:59:d7:b9:91:18:91:
a3:b4:2b:0f:65:f1:03:54:de:69:c4:7c:0f:2d:59:6a:49:bb:
49:00:fa:bb:62:6b:6a:4b:1a:77:cc:11:f2:83:29:49:a2:31:
66:86:ae:57:b3:b5:c8:bf:e1:ae:8e:5d:f4:4d:ac:82:c9:fe:
04:12:1d:52:9a:99:7a:0b:bc:d1:e4:62:2e:0d:37:53:24:8a:
17:b8:22:7d:de:32:1f:7e:7a:9f:d5:6b:59:ef:d0:ed:a6:74:
c3:5a:54:00:1a:47:e9:43:22:46:58:1a:02:0f:ad:3d:9a:53:
56:b2:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org