Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A856C0DD9F11EBA50CC43BF8AEA228.roa
File: 71A856C0DD9F11EBA50CC43BF8AEA228.roa (raw, json)
Hash identifier: lSsSCiRq3qemsPiMT3O2IB7MUXyR0P3S+1rRVNuYx/M=
Subject key identifier: 6F:CC:59:FA:3E:7F:8F:15:5D:5C:11:E4:05:90:E1:AE:97:B7:CF:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A856C0DD9F11EBA50CC43BF8AEA228.roa
Signing time: Mon 05 Jul 2021 14:44:04 +0000
ROA not before: Mon 05 Jul 2021 14:43:59 +0000
ROA not after: Mon 05 Sep 2022 14:43:59 +0000
asID: 22773
IP address blocks: 156.246.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 14:43:59 2021 GMT
Not After : Sep 5 14:43:59 2022 GMT
Subject: CN=60e31ab4-efbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:e5:ba:73:d0:cc:3a:fd:75:d9:f4:e5:f1:
46:d1:c8:9f:58:38:a2:64:e1:1f:4e:e5:c0:72:6c:
1e:c8:41:84:53:60:c7:b1:a9:74:ab:58:fe:7d:ed:
1a:74:69:22:77:30:d9:e2:1b:5c:2b:fa:ef:76:70:
fb:4f:4d:8b:01:d2:6c:9f:5f:68:ab:91:16:09:b3:
9d:05:21:35:ca:ff:ad:9a:fb:af:d1:91:22:68:8a:
16:3c:5c:44:2c:7e:21:9d:01:63:2b:64:61:3b:8a:
cb:0d:f1:26:79:ee:b4:1a:33:e9:e4:35:83:33:9f:
68:ad:f0:fd:df:e5:47:f6:17:d9:6e:2c:14:a7:c3:
35:f4:73:69:16:88:d4:e1:2a:e9:70:c4:f6:94:61:
f0:8a:f9:cc:79:16:96:32:2b:be:94:63:af:ac:fb:
e7:d7:c9:70:d6:ee:e5:b8:06:7d:51:45:a2:65:b3:
f7:7f:2f:b6:51:b1:86:fb:13:f2:43:38:be:5a:b2:
73:4c:30:c2:66:d5:19:31:1c:ec:91:49:bb:6c:c8:
0a:77:6b:9d:c4:ed:b7:cb:d5:f0:8f:1b:3c:18:22:
f0:ce:9d:62:03:04:39:6a:b8:d1:1f:74:15:ba:af:
39:4e:4a:31:ca:bc:4b:3a:34:30:3a:4d:50:4b:46:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:59:FA:3E:7F:8F:15:5D:5C:11:E4:05:90:E1:AE:97:B7:CF:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A856C0DD9F11EBA50CC43BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:a6:b9:3b:2f:d7:71:f9:ca:5b:f9:eb:37:6a:0e:84:15:23:
94:56:b7:6f:74:0a:5a:b8:01:ab:d3:bb:30:cc:9a:aa:98:db:
50:3e:4e:2e:84:5f:bc:d3:cc:04:ce:7f:9d:28:cb:5b:f2:6f:
e7:3e:a9:71:b3:ee:9e:13:7c:90:57:d5:62:94:12:cb:fb:a0:
ce:2d:13:5f:2a:81:bb:10:8f:4a:cd:9a:07:91:e1:d2:77:e7:
11:6f:ba:fe:fe:78:bd:e8:93:cc:83:63:e0:fb:95:09:06:28:
7b:f9:45:3b:2b:d3:80:38:9b:6b:e8:9b:9d:dd:e1:a1:e1:89:
96:8f:be:ca:32:65:cb:33:13:e5:b5:6b:91:80:5b:52:58:3c:
60:14:31:60:8e:00:78:af:b4:bc:90:f3:d0:81:b1:5b:3f:89:
ed:71:e5:79:5c:e6:1c:ec:5c:b7:b5:eb:27:67:02:94:09:29:
00:50:4a:d6:01:5e:55:92:2d:93:ab:9f:3f:39:fe:a7:52:b2:
c8:92:a4:8c:de:9c:99:b1:86:45:0e:4a:9c:2b:ab:7a:59:2d:
79:b2:9c:31:9a:2d:a3:38:0f:56:24:25:71:9b:5d:79:c1:5f:
87:87:9b:40:c8:ee:50:3d:e1:1e:78:50:6a:a2:58:d3:e7:86:
92:4c:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org