Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9008CED2A43311EC9A714B9E5A40D577.roa
File: 9008CED2A43311EC9A714B9E5A40D577.roa (raw, json)
Hash identifier: KTzhhf3unuietxQdbrRcZXsDORflSwuPJkCR0j+QKrY=
Subject key identifier: FB:33:2E:35:2C:58:A7:36:D1:D5:8A:5C:CE:F8:39:AD:EA:1F:BC:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1261
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9008CED2A43311EC9A714B9E5A40D577.roa
Signing time: Tue 15 Mar 2022 07:43:11 +0000
ROA not before: Tue 15 Mar 2022 07:43:07 +0000
ROA not after: Sat 31 Dec 2022 07:43:07 +0000
asID: 133201
IP address blocks: 156.255.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4705 (0x1261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 07:43:07 2022 GMT
Not After : Dec 31 07:43:07 2022 GMT
Subject: CN=6230438f-ee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:34:de:3f:cd:8b:1a:bf:74:7a:ba:82:46:
c1:0b:e3:3b:56:85:94:a1:73:6d:51:1d:09:45:7a:
85:05:4c:f5:c6:cf:ce:d1:d6:19:38:e5:f8:5d:5d:
47:fc:80:5b:0d:9f:d6:40:75:ab:0a:5a:3e:52:fd:
75:56:bc:a4:5b:df:c3:52:21:c6:3a:f8:c8:7c:55:
2f:9d:ae:c4:0f:87:e1:32:52:87:27:d5:b2:83:9b:
21:fb:0d:92:59:57:8c:8c:21:ec:c7:95:cf:82:d5:
02:9c:1d:6b:59:34:01:ec:ae:24:48:93:e6:fd:50:
da:e8:a0:26:97:15:d6:e9:a5:23:16:e1:c9:67:bb:
8d:f5:55:e1:ce:1e:4e:d7:68:60:90:69:1c:67:fb:
b4:70:b7:2d:0b:eb:0d:40:50:b7:08:e0:22:ed:0d:
97:55:e0:18:e7:05:03:f4:3a:f1:7f:b0:fb:ed:f7:
21:61:b9:74:75:8c:b4:4f:74:86:9d:c9:ba:71:38:
62:67:f9:dd:d4:61:b4:1b:e8:e9:f9:af:c8:07:8c:
88:19:3f:a6:7f:7d:bd:71:07:84:8d:4c:4f:3e:5f:
b5:db:da:31:f4:ec:96:1a:11:0e:fb:b7:de:b8:c0:
4b:96:ae:c6:1b:15:24:1e:ee:81:31:71:e8:4e:5c:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:33:2E:35:2C:58:A7:36:D1:D5:8A:5C:CE:F8:39:AD:EA:1F:BC:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9008CED2A43311EC9A714B9E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:c2:c6:f3:26:6c:92:84:b6:8d:b1:56:54:f5:ed:e1:f8:76:
8f:38:2c:bf:51:cf:c9:1a:d4:a7:2d:13:d3:71:81:40:d3:07:
2a:a6:94:4d:c8:df:f3:23:71:8c:c6:f6:03:ca:e3:70:4e:2d:
25:68:98:cc:b0:c8:e0:9e:38:c2:53:0b:2a:8e:43:79:0c:35:
b7:09:d2:86:d3:02:97:6a:fb:df:6c:58:49:18:fc:04:66:33:
66:33:c6:f1:17:7c:2e:8d:f6:5a:c2:62:68:af:b6:0a:b7:ca:
6e:ea:4f:37:3f:66:9f:79:db:8e:28:97:ed:f4:d4:0d:b8:a6:
0f:0a:d1:ee:e3:b6:25:76:93:62:62:ba:c4:e1:b8:a4:45:d0:
0e:fb:aa:91:8f:93:82:cf:07:ab:0f:e7:a8:a3:c2:a5:72:0e:
c1:ed:2d:0e:e2:f4:7a:70:a7:dd:f5:ef:2c:c3:37:3b:6a:11:
f5:24:9b:bd:1b:ee:7f:af:5d:dd:bc:69:b7:67:93:e1:b5:a1:
7f:bc:aa:d5:7e:01:ce:a4:cf:35:a5:62:5a:d7:92:c0:47:d3:
a6:19:2f:06:e3:21:c3:57:c5:aa:6f:a7:57:41:ff:28:c4:81:
1c:d1:73:88:10:34:a8:d5:77:7a:1d:5e:5a:ed:35:b9:32:28:
76:2c:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org