Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E267AE6C21711EC88F9A080F1222468.roa
File: 7E267AE6C21711EC88F9A080F1222468.roa (raw, json)
Hash identifier: gJdZVSwst9EpdXsA0dw/bcI5B7dFMvuz1ZXPEkZ862s=
Subject key identifier: 76:52:B2:F7:01:09:05:7B:AB:A1:D5:98:3F:BB:67:2A:C4:25:48:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 134B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E267AE6C21711EC88F9A080F1222468.roa
Signing time: Fri 22 Apr 2022 08:37:50 +0000
ROA not before: Fri 22 Apr 2022 08:37:46 +0000
ROA not after: Fri 30 Dec 2022 08:37:46 +0000
asID: 328608
IP address blocks: 156.245.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4939 (0x134b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:37:46 2022 GMT
Not After : Dec 30 08:37:46 2022 GMT
Subject: CN=6262695e-3561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:54:00:48:a7:66:4a:e4:76:8c:82:a6:41:
ab:4d:fb:b2:5a:cc:2a:af:fd:13:a2:5c:65:86:e7:
8a:37:98:d8:2d:df:dc:07:cf:89:f5:b7:fe:61:bf:
db:ac:30:24:3f:53:7f:6c:56:77:29:12:7e:54:74:
52:d1:5d:de:af:ce:e1:6f:98:16:92:75:bb:25:c3:
c3:54:7c:6e:67:27:60:70:5e:2c:84:9e:3d:79:43:
39:b3:3f:92:02:44:b5:46:17:8b:1d:b2:75:ea:7d:
82:31:80:03:41:31:c3:d9:97:09:93:e4:21:5c:3b:
21:5c:22:11:ad:d6:d8:0b:18:f6:5f:a6:08:fd:a9:
a9:b5:7d:f9:ca:59:74:2b:cc:68:f4:20:5b:6b:9d:
b3:b3:11:80:7b:3b:70:01:51:a6:95:7c:83:27:06:
30:f9:e3:2b:f2:cc:8e:ae:3c:da:1f:04:4c:1c:76:
59:0e:c4:e6:5d:a0:98:46:32:a9:7f:8a:f2:60:00:
5f:6c:cf:59:c4:70:34:f0:69:f0:a3:25:4f:24:cb:
ca:83:18:0b:7c:6b:6e:e6:91:85:e7:51:a8:91:8f:
f0:6b:bc:5b:f9:ce:a4:5d:3c:af:c3:29:ba:eb:c1:
c9:89:93:df:a7:e3:24:72:0f:5c:33:f2:96:bf:18:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:B2:F7:01:09:05:7B:AB:A1:D5:98:3F:BB:67:2A:C4:25:48:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E267AE6C21711EC88F9A080F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.16.0/20
Signature Algorithm: sha256WithRSAEncryption
83:48:6b:ef:ed:a5:7b:f6:c7:79:3c:c7:0e:1f:d1:49:da:8b:
1d:5d:72:b9:ca:96:5f:c0:92:a9:ba:6c:cc:ae:1a:b1:97:96:
2a:22:56:7e:22:6f:41:11:87:5a:d9:f9:7f:d4:e6:8f:11:1b:
ac:37:28:f8:50:7d:c0:2d:9c:69:75:5e:48:0a:c2:ce:9b:79:
f2:61:21:df:cf:cb:bc:3b:55:67:33:53:7f:9b:6e:13:07:27:
ce:c9:b2:76:0b:3c:3a:36:bd:31:70:6e:0c:59:ab:a1:a5:63:
c2:35:63:9e:b5:8e:5a:c1:bc:81:ed:10:1a:c1:62:84:92:f1:
fd:42:06:9c:d0:bb:43:0b:30:4f:e2:7d:9b:fb:eb:a7:7a:b5:
36:dc:6d:7b:a0:37:7f:0a:0c:a3:37:40:03:cf:07:78:db:39:
c5:23:6d:6f:48:67:aa:22:15:a7:9a:02:d0:6d:c1:16:4b:f3:
35:ce:30:f0:e2:21:62:39:e8:49:bb:c9:bc:d5:76:06:75:4a:
e6:1b:15:d9:5e:d8:30:c0:bf:d7:73:e3:09:95:23:84:50:b8:
34:76:53:9c:fc:eb:9b:d0:b8:20:96:0c:0b:80:e7:90:ef:96:
e9:e0:72:73:aa:10:ef:4e:cd:37:3f:50:94:23:f0:9c:22:a0:
a9:77:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org