Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77ECCF8A597D11EBAF229C0CF8AEA228.roa
File: 77ECCF8A597D11EBAF229C0CF8AEA228.roa (raw, json)
Hash identifier: 8blAPodx9mTk709/h2ed47t1xbDOn2cvHbKgpG0tWMU=
Subject key identifier: 8F:2B:69:63:25:56:81:7F:5A:2B:82:CA:A0:FE:C5:65:9E:05:1A:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77ECCF8A597D11EBAF229C0CF8AEA228.roa
Signing time: Mon 18 Jan 2021 11:08:19 +0000
ROA not before: Mon 18 Jan 2021 11:08:14 +0000
ROA not after: Thu 14 Apr 2022 11:08:14 +0000
asID: 139811
IP address blocks: 156.240.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 11:08:14 2021 GMT
Not After : Apr 14 11:08:14 2022 GMT
Subject: CN=60056c22-d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:19:e8:9f:d8:c5:38:9d:86:2d:b0:d8:bc:
aa:36:6d:27:d1:ff:c0:20:54:84:f2:f2:6f:da:41:
d0:aa:e7:21:27:aa:b2:1b:a7:b5:fd:2a:a0:ad:10:
cd:10:1d:9f:73:f8:7f:f7:96:a8:8f:3a:cf:14:4b:
d0:bc:72:c1:93:59:ed:ad:13:ee:d6:6e:f9:58:02:
be:ba:a4:fa:5b:5b:b5:99:6a:c6:0d:85:59:70:c2:
1d:21:de:fb:98:04:d7:cd:6a:3e:ae:75:40:c0:b5:
2e:e7:6b:44:56:fe:93:04:7e:52:22:c1:ac:09:74:
a7:40:9c:63:d7:76:c4:84:36:6e:90:20:e2:b1:6f:
09:aa:28:6f:98:46:80:b2:26:c4:50:f0:36:5c:6c:
88:c5:3f:1d:ff:09:c4:31:a9:af:63:7a:95:c0:3d:
fa:92:0b:0b:9b:75:48:ec:8f:b5:2c:cf:ce:2a:f6:
4f:56:f3:42:e8:5b:7a:52:6e:3e:2e:ca:74:bd:10:
d7:1a:92:10:2e:bf:20:ab:0d:92:e0:8d:fa:34:a4:
61:71:82:28:19:74:47:0d:5b:4e:12:7c:ab:7a:48:
9e:90:b4:03:57:5e:68:d3:ff:c0:57:39:39:c1:a2:
7a:5c:50:ad:55:ce:38:7e:78:88:3e:16:88:85:d1:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:69:63:25:56:81:7F:5A:2B:82:CA:A0:FE:C5:65:9E:05:1A:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77ECCF8A597D11EBAF229C0CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6c:9f:0a:16:39:fa:83:cf:ae:50:c2:79:82:2a:83:c2:b3:
e1:38:fb:7e:f5:d5:86:00:26:8c:78:a8:98:7e:43:65:0c:4a:
80:27:d1:4b:e0:80:a6:3c:fd:39:81:20:c2:ea:8e:f4:4d:bc:
ff:16:b8:04:95:b4:52:9a:b3:0d:fd:c8:35:78:2f:ea:53:0a:
56:0e:b9:dd:49:96:66:b9:b2:21:80:a2:f8:0b:1d:dd:3d:65:
bf:4d:fa:1b:d4:3e:71:fa:67:1f:90:ab:a0:73:14:b5:37:e1:
72:31:d6:b0:a3:7d:17:9c:2f:eb:61:33:9b:e9:d9:84:6e:df:
8f:29:d1:00:78:12:a5:e0:da:1d:83:22:e4:da:e2:10:3e:5d:
12:26:7c:ec:e8:22:d4:cf:9a:9e:83:e2:88:27:d5:14:61:c3:
5b:12:2f:b1:95:43:b6:ce:e3:18:b9:d2:27:eb:b1:b0:a5:a4:
b6:7f:47:a7:89:76:a0:50:fe:e5:dd:ad:5d:ec:c4:46:c5:a2:
f7:23:8c:67:c2:db:58:2c:40:06:28:05:7b:b3:73:8e:26:18:
81:1f:54:43:b3:e7:e2:ab:27:92:62:20:d9:1b:33:14:de:aa:
c6:50:99:10:b9:b6:de:65:dd:da:fb:4c:85:3b:f9:9c:fe:0a:
28:e9:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org