Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81526B7E66D011EB8341ED67F8AEA228.roa
File: 81526B7E66D011EB8341ED67F8AEA228.roa (raw, json)
Hash identifier: 0lwmoolL+QKsSArrlGfQ2awpmOhBpuFLFRfqR4ebYz0=
Subject key identifier: 38:06:56:0A:8C:58:55:1D:F8:0B:BC:E0:38:3D:81:2D:B3:B6:56:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81526B7E66D011EB8341ED67F8AEA228.roa
Signing time: Thu 04 Feb 2021 10:05:28 +0000
ROA not before: Thu 04 Feb 2021 10:05:23 +0000
ROA not after: Wed 04 May 2022 10:05:23 +0000
asID: 2386
IP address blocks: 156.248.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207 (0x4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 4 10:05:23 2021 GMT
Not After : May 4 10:05:23 2022 GMT
Subject: CN=601bc6e8-bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:ce:36:fa:23:26:1a:72:2f:53:74:12:79:
ef:3e:1d:25:09:7e:65:5d:74:2f:a0:2b:c9:d4:2d:
d2:8c:38:51:9a:33:1b:5a:58:50:f9:9b:44:1e:2c:
88:d3:e2:46:93:5a:29:eb:57:b0:05:ae:bc:19:96:
50:71:60:c5:b5:8f:23:b3:06:2c:ab:a9:df:ac:4d:
1e:07:de:09:8c:2e:15:04:c5:63:f0:35:6f:44:a2:
37:c1:48:f0:a5:af:5a:2c:01:36:8b:68:de:f9:10:
4e:41:b8:1a:88:97:60:bc:19:b5:15:92:3a:56:3a:
f9:bb:5f:cb:6c:a6:f3:8a:04:2a:19:93:31:45:2d:
23:d6:1c:61:60:01:b0:2a:67:66:ed:dc:4c:d4:61:
f7:08:0b:1a:36:b2:49:73:45:25:ac:ae:2b:0c:40:
be:b6:1a:c6:39:df:1f:e0:cd:b9:03:94:f4:1d:29:
d4:78:27:f6:b8:17:86:ce:6c:49:d6:4d:01:42:14:
a4:f1:c2:23:ae:ab:44:8d:bf:50:2a:92:a1:06:ca:
2c:32:81:1f:73:e9:f3:0c:25:60:42:d0:17:44:38:
61:4f:9d:d2:4e:76:16:72:d8:ae:78:d7:44:85:58:
0a:a1:35:a5:1e:61:96:6a:bb:bf:31:e3:2a:d6:b6:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:56:0A:8C:58:55:1D:F8:0B:BC:E0:38:3D:81:2D:B3:B6:56:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81526B7E66D011EB8341ED67F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.104.0/21
Signature Algorithm: sha256WithRSAEncryption
27:74:2e:fa:92:51:f3:d8:a9:92:34:be:b6:19:98:0d:ac:4e:
94:6d:0e:a0:ab:1b:de:66:ae:6c:f0:fa:75:af:5b:b0:0a:92:
c9:bc:e5:f5:75:cc:e4:28:07:d6:92:32:c4:74:ee:5c:13:1e:
e2:63:55:5f:3a:f7:ad:c5:2c:e8:68:c2:d1:c5:14:ac:1d:37:
65:87:ce:e7:a4:ca:4b:42:75:60:9b:24:99:8b:ed:87:bc:b3:
49:15:d3:24:6d:c6:76:c3:97:6a:39:94:17:da:75:f6:89:50:
5a:06:32:bf:e0:c1:cb:95:2c:b2:48:27:40:b8:41:7f:53:85:
9f:71:c5:8e:45:2f:33:26:e4:91:d9:08:e3:b5:76:93:cd:dc:
a4:5b:7d:e6:ae:74:7c:45:8e:72:7b:45:ac:33:74:7f:90:2f:
32:00:99:6d:c5:21:9f:fb:3c:83:31:ca:bc:a9:b1:a0:8f:40:
35:d7:31:8f:a6:6f:fa:cf:4e:3b:70:89:09:fa:d5:f4:6a:b2:
d4:79:67:54:8a:0f:4a:44:65:6f:fb:ea:da:a9:c7:d8:4c:ce:
34:c5:b8:81:b5:13:70:fd:f4:35:50:76:f9:03:0e:88:98:b3:
d2:fb:2b:af:dc:dc:0f:99:7a:d1:b0:45:a0:f2:c5:5e:ad:17:
a0:fc:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org