Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98CAE7D813CF11EDA47BF59FF1222468.roa
File: 98CAE7D813CF11EDA47BF59FF1222468.roa (raw, json)
Hash identifier: BZ+FNr/SVBtakB5ZWlOTmJlWFy1ie8pwj8Kc1Cm7wvw=
Subject key identifier: 61:A1:A7:2D:7F:08:0A:B8:06:2C:1E:D3:F5:89:66:AE:DB:DA:F1:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 161E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98CAE7D813CF11EDA47BF59FF1222468.roa
Signing time: Thu 04 Aug 2022 08:29:46 +0000
ROA not before: Thu 04 Aug 2022 08:29:42 +0000
ROA not after: Wed 26 Oct 2022 08:29:42 +0000
asID: 133861
IP address blocks: 156.245.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5662 (0x161e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:29:42 2022 GMT
Not After : Oct 26 08:29:42 2022 GMT
Subject: CN=62eb837a-69a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:e0:b6:8d:2f:6d:e7:e8:cb:0d:75:0c:b0:
7d:ff:e0:9c:01:c4:37:a4:20:47:82:ef:c8:6a:92:
5f:df:a2:51:ef:41:30:24:81:ae:82:cb:e4:00:36:
91:e6:cd:e1:5d:e0:03:68:e5:1a:84:4a:56:09:2a:
72:80:4e:e5:19:9d:4e:65:cc:15:c3:38:42:45:de:
6e:e3:1a:40:12:8a:16:91:ed:df:6c:5e:5f:85:55:
52:19:46:ae:5a:a9:e2:93:99:f2:aa:da:da:50:be:
c0:6b:39:b5:b6:c7:36:56:ff:ef:dc:0f:f2:08:f1:
8c:e0:b6:bb:a5:a8:cb:a0:a2:c5:18:c6:a1:73:d7:
01:94:95:af:3a:a1:5c:59:53:d2:98:48:39:93:95:
f3:90:43:a0:2a:4d:a3:55:ae:dd:a9:fd:29:64:97:
33:47:8e:5e:10:ef:0a:a1:1c:d6:27:3d:00:ca:52:
e2:b9:19:29:c1:2d:92:a4:19:38:ad:41:93:09:eb:
51:0b:f1:58:a0:4b:1f:f3:ba:40:2b:66:86:d7:52:
da:96:40:98:5c:fe:32:4c:9d:34:ab:f3:c8:74:69:
33:6a:a7:1e:d9:bb:a5:43:90:46:79:d0:cd:a8:b9:
2d:a2:fb:15:26:cd:a7:21:bd:f2:1e:e9:61:13:f0:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:A7:2D:7F:08:0A:B8:06:2C:1E:D3:F5:89:66:AE:DB:DA:F1:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98CAE7D813CF11EDA47BF59FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.25.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7a:4f:70:8a:d3:cc:08:c2:49:55:45:0a:33:ab:27:bb:0f:
85:d0:38:4c:2a:14:9b:16:76:af:a8:6d:7d:8d:63:43:ee:02:
70:78:ad:78:19:b1:79:e0:a1:b7:16:da:60:40:96:e4:3a:5a:
27:5e:3f:b5:56:45:6e:cc:8f:ff:3f:0e:bb:4c:69:ee:c9:0f:
35:2c:62:d0:31:57:c6:df:a0:73:f8:d8:90:8f:c6:f7:45:5e:
ca:11:7f:9d:a0:b8:cb:a8:3d:ca:d8:e3:d0:2b:00:75:30:a8:
4e:f2:da:21:36:61:69:2f:4f:d0:1e:70:45:31:35:60:fd:8f:
00:41:1d:ca:e5:74:d6:9d:d7:7a:60:4a:b9:c3:24:9c:d5:0c:
4a:e6:d2:f2:31:b8:79:96:2c:c9:4d:58:6c:68:f5:6e:ef:25:
9c:d5:b6:05:bd:2b:dc:c2:83:ba:fd:cf:17:cc:49:a9:13:fa:
07:08:30:8c:f4:ba:7b:32:1d:94:f9:c0:e2:5b:ca:e4:01:67:
ae:4c:b6:5e:80:ac:91:37:4d:ce:86:92:a8:50:37:1d:1b:5c:
45:e6:d6:92:51:d2:61:a1:0b:6d:d9:08:56:60:9e:fb:fe:39:
30:b2:65:83:f8:ed:cd:a9:7a:4e:ac:e0:82:a6:f0:bb:e5:dc:
94:3e:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org