Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
File: 7B81359CCCF911EB8D0C6D43F8AEA228.roa (raw, json)
Hash identifier: kf8yQo9aTtXIs5vF1nzYxCrWn4Vb7xcY9uU1jnD/pPk=
Subject key identifier: 40:77:25:6E:B6:A2:B7:8A:90:5C:9A:91:82:81:12:A4:F0:36:20:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0663
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
Signing time: Mon 14 Jun 2021 10:15:46 +0000
ROA not before: Mon 14 Jun 2021 10:15:41 +0000
ROA not after: Tue 19 Jul 2022 10:15:41 +0000
asID: 5065
IP address blocks: 156.233.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:15:41 2021 GMT
Not After : Jul 19 10:15:41 2022 GMT
Subject: CN=60c72c51-0ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:2f:4e:6f:a0:dc:44:b9:41:81:e9:68:0a:
40:4b:47:77:49:6f:35:04:78:77:2f:b7:d7:4f:e3:
2a:7d:a1:a4:54:08:8c:47:e9:f1:bb:66:e3:8a:35:
d3:e0:1a:3f:8e:f2:a0:e3:ba:7f:06:91:25:85:72:
e6:1e:38:8e:c4:4e:d0:91:ad:b7:62:5e:4a:b9:5d:
92:dd:77:51:e2:3e:78:be:68:5f:86:12:45:8b:75:
7e:90:1e:8f:1d:2f:49:82:5b:26:cc:ac:48:86:1b:
7e:07:8a:bc:18:42:59:97:29:32:99:dd:1a:e0:e0:
fd:1e:31:4d:6e:44:db:19:23:da:bd:bf:a8:71:a8:
c6:00:ac:05:45:88:28:c5:92:8b:dd:c5:1d:d3:a5:
fc:bd:5e:3b:29:20:bc:38:05:b6:a5:07:40:51:7e:
46:61:1d:7f:4f:49:08:77:5b:e3:05:94:b6:d0:dc:
86:52:d2:ea:b0:e2:b9:a3:53:5d:81:fb:bb:12:d7:
e5:c1:64:ea:0c:b4:1e:14:b5:a0:41:59:e2:c8:b4:
c1:c0:ba:25:16:74:d5:8e:28:b0:f2:29:75:95:fd:
3f:7f:56:3c:ed:e1:22:db:b4:25:29:5e:9b:d9:5d:
81:6f:c9:d4:fa:59:38:7e:70:c0:9a:f9:12:c8:de:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:25:6E:B6:A2:B7:8A:90:5C:9A:91:82:81:12:A4:F0:36:20:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B81359CCCF911EB8D0C6D43F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.20.0/22
Signature Algorithm: sha256WithRSAEncryption
51:3f:6b:2a:9e:9d:47:c2:c4:ae:af:ac:e3:ce:dd:95:30:07:
cf:85:a4:2b:14:76:98:56:ea:a4:22:13:0e:0c:62:30:3e:76:
f3:f2:9b:f9:9f:12:68:d4:ef:e9:a5:5d:43:11:3c:cf:ad:27:
6e:91:94:7f:21:db:62:99:b9:fd:3c:e9:f9:03:b7:52:fd:81:
04:90:ac:b4:c9:c6:70:3a:5f:42:41:e2:78:0d:82:81:f5:1e:
1a:03:79:62:d2:70:64:ba:25:ba:af:90:ed:cd:f9:da:7d:dd:
e8:5f:7d:55:4b:8f:d5:91:52:75:ae:9d:d3:1a:8e:5f:bd:4b:
ef:4b:83:c3:28:b1:73:2b:40:40:e0:d9:fd:e0:e2:be:dc:cf:
9f:44:06:ff:c4:3f:67:31:2c:f8:ef:d9:30:96:a4:22:7e:0d:
a4:d0:c4:c4:37:09:ea:6f:6e:78:68:d5:55:99:a4:46:a3:7f:
cd:0f:2c:7b:1a:7d:4a:26:8e:73:1b:81:e6:f2:67:4c:65:12:
b1:bf:01:8e:1e:6a:7e:e2:93:c2:12:74:11:7c:a4:5d:a6:1d:
79:57:f8:e7:84:22:bf:de:75:94:dd:c9:d1:e9:45:2b:0e:c2:
50:7d:bb:a2:9d:3f:07:2f:4a:21:60:a1:c2:02:37:0b:79:da:
af:39:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org