Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/871E260EFBE211EBACAB1036D8A014CE.roa
File: 871E260EFBE211EBACAB1036D8A014CE.roa (raw, json)
Hash identifier: V5TCgUn2V3bf4nFdQ8RWhTtuG70hQXJwm/bVwr/kQN0=
Subject key identifier: B7:B7:1E:79:E7:FC:0C:01:DA:86:8A:2D:1F:3C:A0:F4:32:A5:DB:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0897
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/871E260EFBE211EBACAB1036D8A014CE.roa
Signing time: Fri 13 Aug 2021 03:00:35 +0000
ROA not before: Fri 13 Aug 2021 03:00:25 +0000
ROA not after: Mon 13 Jun 2022 03:00:25 +0000
asID: 22773
IP address blocks: 156.237.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 03:00:25 2021 GMT
Not After : Jun 13 03:00:25 2022 GMT
Subject: CN=6115e052-1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:e4:8d:0f:c3:69:20:5a:c3:7f:87:76:29:
49:89:c3:96:a3:7d:d9:d2:b0:47:52:ed:a4:b6:ed:
67:11:f0:8d:5c:c6:c6:58:ee:8f:e4:22:65:73:27:
b5:1f:ba:08:a8:8b:06:f3:d6:44:ba:07:98:a6:76:
4e:31:0c:0b:4f:47:6f:91:ee:a5:0d:4e:92:98:5c:
fe:b7:a6:c6:9b:5f:73:9d:1a:b3:ec:d4:36:60:79:
d1:01:40:a2:09:49:2e:eb:3b:3e:6d:47:4d:e2:4c:
72:08:3f:28:75:4a:87:24:cf:9f:69:e8:9d:1d:23:
34:04:04:7c:ca:59:98:ed:ed:6c:df:0b:ba:59:11:
49:58:7a:49:e8:85:68:65:dc:62:84:47:08:c7:df:
63:af:b2:c0:e1:6a:e8:54:2d:9b:97:53:3f:0e:10:
72:b3:71:33:6c:3a:78:f2:9e:60:9b:97:3d:57:d4:
37:73:59:9c:83:bd:7c:8e:a9:f0:65:02:83:4c:ea:
7d:79:7f:64:3b:e0:e8:83:be:e3:a3:d4:4d:44:ac:
83:07:ce:f5:60:1e:01:94:9b:dc:d9:a6:38:05:74:
c2:8e:ec:c2:08:98:f2:fb:8a:b5:6a:34:f7:dc:cf:
fd:a9:96:89:f3:5c:32:59:ac:27:bd:f1:7c:48:4d:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:1E:79:E7:FC:0C:01:DA:86:8A:2D:1F:3C:A0:F4:32:A5:DB:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/871E260EFBE211EBACAB1036D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.16.0/21
Signature Algorithm: sha256WithRSAEncryption
57:4b:6c:04:67:da:48:8f:69:85:27:08:9d:d8:a7:3a:88:23:
f3:d8:d9:a7:6e:52:cd:5c:8b:40:6b:65:39:b3:75:9b:2a:2f:
d7:a8:15:e5:e2:38:2b:ac:b8:59:84:5d:8c:af:8c:1e:67:15:
f2:20:9d:c5:4c:18:d9:19:93:18:a5:b0:05:49:e6:8c:a8:f6:
52:6b:7d:46:c7:dc:b5:06:33:f9:5e:8d:c6:08:64:d5:5f:41:
41:7b:9b:66:21:c1:fc:80:1c:41:ff:a6:97:f8:5c:05:9a:25:
35:b7:a2:5e:a9:55:98:04:d4:e2:aa:61:e0:9d:54:05:12:5a:
16:0f:b1:39:d4:1c:97:3e:f7:25:76:cc:f9:30:15:bb:68:1f:
fb:90:ef:73:d8:e7:30:9a:3d:e7:7a:de:c6:8a:27:f2:74:71:
7b:54:5c:b3:32:a3:8a:10:6c:2e:fb:2d:48:b5:0d:8e:72:03:
a0:ff:91:df:f0:31:b8:9a:76:3b:58:33:65:c1:7d:ff:bc:92:
6a:08:b1:96:96:17:8e:45:af:ae:21:19:21:40:bb:d1:21:eb:
0b:60:e5:9c:5e:03:ae:38:2b:13:e0:7c:f7:54:45:cd:80:92:
3a:e7:c9:76:4f:67:80:cc:26:43:56:d0:d7:3e:38:91:8f:61:
63:27:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org