Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70A3AF4AA43211ECAD9FF89A5A40D577.roa
File: 70A3AF4AA43211ECAD9FF89A5A40D577.roa (raw, json)
Hash identifier: fOHKTpS+8FNjToR2kkNTnndUwXOQEkMkxKAisWmT3oA=
Subject key identifier: EE:6C:AE:9B:47:37:BC:5A:7B:69:22:61:5F:CC:B2:B3:07:FF:F2:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1259
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70A3AF4AA43211ECAD9FF89A5A40D577.roa
Signing time: Tue 15 Mar 2022 07:35:09 +0000
ROA not before: Tue 15 Mar 2022 07:35:04 +0000
ROA not after: Sat 31 Dec 2022 07:35:04 +0000
asID: 133201
IP address blocks: 156.255.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4697 (0x1259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 07:35:04 2022 GMT
Not After : Dec 31 07:35:04 2022 GMT
Subject: CN=623041ad-24cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:cb:5a:9f:ab:55:fa:26:16:01:64:26:2e:
38:6f:2a:19:b2:2e:dc:ff:2a:01:b4:64:ac:5a:d3:
ea:58:c9:da:12:96:f7:91:ab:4b:5e:31:57:ea:48:
4d:4e:02:72:a1:bc:21:b0:c2:5e:d0:c6:81:4a:5f:
1b:e9:75:37:8d:d3:99:80:73:c2:3a:02:64:7c:38:
91:28:72:98:d9:c3:d1:74:b0:e2:24:5a:01:51:59:
b6:4f:bb:a7:d0:12:86:5e:b2:15:7b:4b:3a:7c:e8:
5a:8d:62:60:89:2b:f6:fd:32:1b:49:9a:dc:ec:0b:
36:11:94:3f:b9:23:59:57:5d:30:4d:a1:76:c3:cf:
fd:66:79:35:fb:23:d9:84:c3:79:e1:58:8d:c5:bf:
a2:e4:f9:e3:92:d5:f0:95:b5:68:1d:61:26:3c:c4:
c4:d2:dd:80:db:b1:fe:8a:e1:a8:59:b3:19:b8:14:
8f:52:45:81:f4:e6:ca:ca:e2:1e:dc:31:5d:48:97:
f6:ee:b8:bf:09:a8:02:da:2a:de:72:ac:c9:07:4b:
24:1d:5b:cb:e5:89:ac:d7:f9:77:17:27:13:fe:88:
f5:03:b6:87:c7:05:2e:52:29:a8:b9:89:d6:3b:de:
6a:9b:d9:3a:de:fa:3a:8d:4f:63:dd:7a:8d:a6:83:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:AE:9B:47:37:BC:5A:7B:69:22:61:5F:CC:B2:B3:07:FF:F2:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70A3AF4AA43211ECAD9FF89A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:a2:8a:57:17:48:90:01:2e:ea:39:01:9d:48:71:e2:39:de:
51:cd:94:3c:34:6f:ad:62:78:83:07:cc:8d:3d:f2:b5:46:00:
f7:e7:6f:f9:7a:a9:8a:79:41:57:59:4e:d1:64:a1:79:b1:92:
04:02:ca:15:80:4b:a4:34:22:5b:b3:06:15:02:7f:bd:c8:9c:
11:49:6a:2f:05:21:3f:96:fc:c7:1e:7d:ab:56:b0:0c:78:c9:
00:9c:d0:d6:61:d9:c4:65:c7:2c:e2:a3:f7:00:b3:9f:ae:dd:
43:bd:26:da:3e:70:53:20:18:80:d2:46:91:40:32:1c:58:c6:
a9:9a:04:ef:4c:a3:7a:41:e4:de:53:eb:ea:97:3a:28:03:05:
d3:b6:dc:6e:f5:ae:12:f5:39:2f:90:2b:11:f2:31:85:b6:5a:
47:4a:d6:29:27:26:1d:5e:d5:67:98:c6:fe:51:d1:48:0c:7b:
e2:e4:00:36:51:dd:9a:d2:64:5a:a1:2e:f1:5c:e7:20:64:63:
59:c4:ee:b4:a3:02:23:75:53:90:4e:47:0f:95:2e:94:ab:c4:
9a:59:a3:68:00:4e:93:5f:d8:82:a5:db:ec:5e:97:a8:36:8a:
00:6c:af:d8:23:de:19:8e:fd:11:99:2e:56:fa:56:12:e0:ae:
30:21:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org