Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1E740E413E11EC896D993ED8A014CE.roa
File: 7E1E740E413E11EC896D993ED8A014CE.roa (raw, json)
Hash identifier: 9qmi5he6mwTNBBBehTsRZfZR3GDTQzZ4GULfZexVrNA=
Subject key identifier: D4:B4:29:E2:D6:FD:04:BD:31:85:7B:87:C7:96:FA:7D:F5:B2:FC:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1E740E413E11EC896D993ED8A014CE.roa
Signing time: Tue 09 Nov 2021 09:22:00 +0000
ROA not before: Tue 09 Nov 2021 09:21:57 +0000
ROA not after: Sat 31 Dec 2022 09:21:57 +0000
asID: 399674
IP address blocks: 156.252.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 09:21:57 2021 GMT
Not After : Dec 31 09:21:57 2022 GMT
Subject: CN=618a3db8-b0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:73:56:ec:87:df:ff:c8:18:66:ab:8e:89:
e4:67:67:51:bd:40:73:a0:f9:55:1b:ee:4f:06:da:
d0:53:11:09:b3:71:39:1a:cd:2c:d9:8c:bf:d0:2f:
d0:b8:ac:83:37:4b:0b:8a:86:46:4a:62:44:c4:e9:
d7:95:06:b5:fb:dd:9d:3b:3e:92:cf:d1:dd:56:73:
e7:25:35:d6:a5:2d:3f:16:27:68:87:5a:00:5b:43:
ad:e8:71:c2:f4:3f:4f:c0:86:21:47:a9:e9:c3:b3:
fb:51:f3:98:78:c3:37:ff:9f:ec:5e:6f:4f:35:9d:
f7:80:1b:82:e6:bc:3f:97:9d:13:c9:06:8c:de:eb:
3d:64:41:32:72:27:bf:94:a5:a8:9b:5c:a6:79:40:
26:0c:1a:b9:f8:88:e7:11:1a:05:3f:ec:98:f9:09:
0c:6a:fc:fb:46:08:78:19:15:57:35:00:9c:86:70:
51:e0:11:5a:c9:08:58:36:bb:0d:d0:aa:0c:97:40:
ab:fa:b3:6a:a0:d8:49:81:e8:0d:bb:fb:ee:63:a8:
6f:e8:9f:da:db:f1:3f:36:49:02:33:a1:8a:af:1f:
2a:b6:2d:6e:41:29:28:51:76:54:63:d1:aa:76:b9:
c4:2c:27:8d:79:c8:21:2c:b6:60:c1:e9:ff:50:a6:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:29:E2:D6:FD:04:BD:31:85:7B:87:C7:96:FA:7D:F5:B2:FC:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1E740E413E11EC896D993ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:84:aa:5b:4d:b6:81:be:59:f9:db:9f:65:90:c9:27:6a:75:
a5:f0:e0:f2:86:29:07:5a:af:00:1c:b8:0c:6c:41:4a:a2:88:
e6:59:87:62:34:91:1b:bd:42:52:17:ab:ba:c0:bd:00:3a:a7:
99:0c:2c:ca:b2:9e:06:68:6a:58:48:f2:dd:1e:85:3f:2f:4a:
ff:db:ab:08:51:16:54:ed:27:87:7e:d0:aa:cb:5e:bf:df:9f:
f7:db:92:26:cc:29:09:40:53:ac:76:5c:be:0b:bb:3b:c9:b8:
ed:8d:4e:50:58:a2:1a:bf:83:cc:d7:fb:7a:e8:5b:a6:6e:45:
4d:6e:7f:d2:6b:5b:0b:f4:64:96:bc:99:5f:33:2e:5b:21:35:
6c:ac:07:f1:cd:b7:b0:34:44:da:5f:0a:a3:cf:e4:d7:ce:ea:
6a:39:c1:16:68:08:69:57:21:bf:ef:ea:13:19:92:45:9c:89:
08:e8:eb:c2:0b:0d:1b:a3:bb:2d:96:8c:77:54:2e:94:0b:c7:
61:6d:15:52:f9:0f:93:6b:03:0f:26:69:3f:22:91:15:25:da:
e7:d3:a6:78:fa:9e:70:0c:5f:da:cb:c9:af:ad:e9:de:b3:51:
92:d0:38:08:f2:ea:73:fa:e0:d5:50:23:49:ca:e7:a2:9f:48:
89:45:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org