Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C7FB54A43511EC8432EEA45A40D577.roa
File: 89C7FB54A43511EC8432EEA45A40D577.roa (raw, json)
Hash identifier: Tjfm4nCg9rJZS2h9i+ctxOtWGqojRi3HA/yuSIwww70=
Subject key identifier: 02:14:7D:2D:76:CC:44:BD:07:F9:DF:B1:D8:A5:FF:4F:ED:83:85:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1269
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C7FB54A43511EC8432EEA45A40D577.roa
Signing time: Tue 15 Mar 2022 07:57:19 +0000
ROA not before: Tue 15 Mar 2022 07:57:16 +0000
ROA not after: Sat 31 Dec 2022 07:57:16 +0000
asID: 133201
IP address blocks: 156.255.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4713 (0x1269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 07:57:16 2022 GMT
Not After : Dec 31 07:57:16 2022 GMT
Subject: CN=623046df-9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:02:f7:70:70:69:c2:7c:19:c1:2b:09:bd:
c5:43:81:6d:82:b0:e3:71:a9:79:a9:b1:9d:8b:53:
9f:f4:5b:61:54:10:c5:18:70:90:ef:4e:53:da:7d:
df:73:59:44:9f:91:3d:bb:c5:53:9b:83:cf:b7:6a:
f2:fe:f5:c9:bb:e6:11:17:e3:84:74:25:52:ad:3a:
20:e0:1a:08:c7:81:7d:25:df:06:cd:12:a1:34:d2:
48:bd:9a:e5:cd:1d:cc:74:83:7f:ab:e2:80:0d:e2:
ed:12:78:4e:d0:6e:d7:8f:39:11:f1:1c:8b:df:54:
5b:09:b8:27:ec:53:54:d2:b2:a3:53:07:6c:20:10:
a8:b4:d3:8a:0a:42:b6:1d:1c:cc:22:95:fa:67:cb:
01:21:be:3b:bb:55:a0:c5:90:99:6b:39:6a:d3:14:
74:9a:6f:77:25:25:93:6e:d5:44:eb:fe:e9:02:49:
8b:06:d9:03:cd:ed:3d:a4:e7:45:e9:1b:ff:a0:3a:
a7:3d:f4:6f:88:c2:f9:60:c6:df:b8:9e:73:bd:79:
d1:f6:b4:96:59:70:97:4b:a4:b4:4f:a3:d0:e5:9b:
10:7f:62:f0:53:f5:29:7f:02:95:87:41:75:ed:24:
c8:3b:e5:68:c7:a9:74:be:0a:02:a4:62:5f:0b:c4:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:14:7D:2D:76:CC:44:BD:07:F9:DF:B1:D8:A5:FF:4F:ED:83:85:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C7FB54A43511EC8432EEA45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.10.0/23
Signature Algorithm: sha256WithRSAEncryption
31:39:6f:60:1a:b5:c3:3f:05:59:1f:9e:d3:eb:42:9b:37:71:
bf:7d:e4:53:38:f4:e9:5a:14:2b:8f:59:30:24:25:5e:1c:12:
40:9f:5c:b8:05:71:42:45:55:e6:80:be:5f:2e:7b:70:13:34:
70:e6:d2:a0:66:20:0f:4c:a4:c9:d1:9e:76:7d:b0:40:6a:ef:
72:3f:b5:3f:d5:d1:8e:6b:b3:22:61:29:3c:9e:3a:fe:ab:20:
e8:38:6b:69:a9:c0:82:4a:b4:81:d8:be:b3:a3:d9:50:9c:aa:
3c:4e:7f:a2:64:08:9e:ae:a7:40:0b:3b:16:56:b4:31:f8:cf:
01:93:03:55:ae:51:53:88:53:30:b4:1c:09:d6:ea:76:44:8f:
c5:03:3f:69:42:d3:17:5b:49:88:87:be:a3:10:c7:6f:bb:d9:
ce:4c:15:77:ef:e2:eb:4b:44:e2:2b:37:e3:31:34:d5:18:44:
d1:47:f3:68:90:4c:2b:fc:3f:e2:81:a7:c4:1c:4c:71:47:5b:
64:39:cd:34:d8:36:ee:69:c2:8d:bc:cf:6a:14:af:fa:84:e0:
ae:01:53:cd:27:62:3d:7b:97:1e:f3:77:13:1a:3d:15:cb:5f:
44:73:b4:b5:22:67:41:eb:fc:73:27:63:dd:4b:9d:5c:40:ab:
f7:c6:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org