Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D472B2434DA11ED9931B5B9F1222468.roa
File: 9D472B2434DA11ED9931B5B9F1222468.roa (raw, json)
Hash identifier: 0FCnqW2bQ5zaK90shR0dNZj7DZi1awCl5SZQ1HGseds=
Subject key identifier: 7A:B2:C0:BB:BB:9D:21:87:99:B7:81:D7:A0:82:5F:C4:95:BB:2C:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D472B2434DA11ED9931B5B9F1222468.roa
Signing time: Thu 15 Sep 2022 09:41:46 +0000
ROA not before: Thu 15 Sep 2022 09:41:43 +0000
ROA not after: Wed 31 May 2023 09:41:43 +0000
asID: 1239
IP address blocks: 156.225.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:41:43 2022 GMT
Not After : May 31 09:41:43 2023 GMT
Subject: CN=6322f35a-c860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:9d:48:95:c5:e7:6d:3d:81:92:76:84:74:
6e:35:e1:5e:84:cd:4e:72:10:ca:12:f3:1a:a3:48:
93:74:cb:14:06:39:63:ee:0c:f8:80:75:ae:93:10:
bd:2b:16:8c:fb:6e:6c:8c:ce:78:ab:8e:61:e8:8a:
b4:c3:e3:70:d8:ea:94:fe:8e:51:98:bd:d0:f4:22:
fd:04:60:aa:63:8f:54:37:8d:8e:da:72:6e:ce:3e:
0c:a8:17:65:87:25:7f:de:77:4e:60:44:1e:2f:54:
84:74:2f:a5:19:91:11:2f:9e:bb:4b:b5:53:31:95:
09:4f:92:cc:5b:70:5c:4c:6a:e9:35:7f:b6:f8:a8:
a4:f1:76:2f:23:67:83:12:b0:7b:9a:3c:8d:11:57:
c4:d6:8d:a7:e7:04:9a:2a:5f:dc:40:47:25:fb:2b:
b2:6d:05:37:5c:06:c8:e7:e2:68:7b:a9:79:fb:57:
43:05:a8:29:20:3e:b1:51:d5:ef:02:3a:31:ce:20:
a8:ff:c1:ad:23:38:98:a5:1c:86:f1:a0:e4:3a:a1:
6c:b4:32:4e:ed:ef:4c:f8:4a:34:83:d2:e3:07:11:
03:dd:a5:8e:5c:c6:b4:30:6e:0a:c6:50:9d:ef:2d:
b8:59:2d:7a:da:14:92:27:3b:bf:8c:61:47:f2:e2:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:C0:BB:BB:9D:21:87:99:B7:81:D7:A0:82:5F:C4:95:BB:2C:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D472B2434DA11ED9931B5B9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.72.0/22
Signature Algorithm: sha256WithRSAEncryption
03:57:53:0e:85:24:6b:4f:9c:4b:05:0b:57:00:be:8c:8d:45:
47:57:1d:c8:7d:86:a8:14:af:e2:8d:9b:eb:d4:3a:61:15:01:
1f:82:03:21:07:4c:b2:74:dd:e7:0c:93:5e:b0:df:94:0e:f1:
4c:73:f6:9f:2a:f3:a0:b3:c4:de:1e:8a:a1:99:f0:59:6c:cf:
c8:5a:01:e1:17:1e:fd:c7:bb:be:b1:47:aa:ae:ec:ba:68:cc:
97:a3:03:3a:45:d5:50:99:66:4b:8c:e8:ff:c2:30:70:25:d9:
00:8d:71:f8:0c:f5:38:9c:63:b2:4e:8f:16:d2:b3:62:30:82:
8e:d6:c4:f4:72:ce:dc:5b:6f:32:4a:b9:07:33:99:df:45:39:
b5:a6:e4:5b:38:06:4c:d4:1d:3e:0b:82:93:1d:7b:81:43:94:
dc:e1:b2:e0:70:29:0d:7b:40:be:db:3c:6d:3a:a9:56:db:ed:
a7:26:29:15:e7:a1:70:a1:61:cc:e0:0f:6d:5b:35:20:38:4f:
d8:d2:0e:54:77:95:a7:3e:5b:9f:68:4b:2a:ba:97:6b:1a:a3:
53:e7:60:e6:90:fc:fd:46:e3:22:bb:2e:f2:bb:96:89:74:5c:
ca:17:e9:a6:9a:86:cf:d6:b6:2c:3e:ca:8a:77:21:ba:ab:c6:
bf:7b:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org