Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D91674CF49811EDA3399C6A4AD9E6FC.roa
File: 9D91674CF49811EDA3399C6A4AD9E6FC.roa (raw, json)
Hash identifier: Z21adFYLxcu+dCV3LZTcxkJzgiSdiErrevHFbb0vulU=
Subject key identifier: C5:32:6F:E7:94:20:8E:67:B8:A2:C6:AE:15:98:BF:02:8B:7A:C6:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2558
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D91674CF49811EDA3399C6A4AD9E6FC.roa
Signing time: Wed 17 May 2023 09:53:04 +0000
ROA not before: Wed 17 May 2023 09:53:00 +0000
ROA not after: Sat 17 Jun 2023 09:53:00 +0000
asID: 20473
IP address blocks: 156.240.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9560 (0x2558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 09:53:00 2023 GMT
Not After : Jun 17 09:53:00 2023 GMT
Subject: CN=6464a3ff-97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:84:9e:e1:a8:f6:80:70:f2:42:29:2d:14:
fb:ee:8f:6e:25:a8:13:d9:dd:ef:f8:48:14:d2:88:
ad:4e:2b:05:a4:c5:c3:ed:a9:0a:7e:ac:38:10:61:
b6:ad:8f:7d:b1:9e:ed:2b:1f:eb:b7:29:a0:3b:fa:
12:65:d5:f2:fd:89:14:51:dd:1b:10:48:36:ef:56:
da:4f:b5:67:5b:e5:a5:9c:aa:6d:9c:4b:41:ce:3c:
5a:15:57:7c:01:4e:3d:af:f1:ff:1e:31:76:92:f6:
2d:e4:5d:e9:f9:9d:4b:13:90:7b:0c:8c:ba:d9:4a:
fd:d0:85:18:2d:f4:d4:ab:24:7a:6a:20:c4:cc:57:
33:d4:85:fc:cf:b0:ed:8b:ec:20:90:be:18:ba:79:
1e:87:e0:96:95:c9:47:e5:07:a6:e8:77:45:62:74:
03:b3:2e:56:df:53:fd:9f:ac:9e:70:42:84:61:fe:
04:ab:fc:a9:f7:1d:05:83:f2:79:e5:ce:f9:fd:70:
6e:10:b1:9c:d6:64:76:ba:19:1d:b9:b9:f0:c6:dd:
b0:46:9a:1e:6e:2e:e8:3c:ab:73:78:d4:f4:76:d8:
8d:ac:da:1f:33:cf:7a:e9:31:11:8b:6a:35:b0:79:
92:b6:ac:4b:f5:71:bf:67:77:83:de:e0:71:ff:73:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:6F:E7:94:20:8E:67:B8:A2:C6:AE:15:98:BF:02:8B:7A:C6:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D91674CF49811EDA3399C6A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.97.0/24
Signature Algorithm: sha256WithRSAEncryption
20:49:68:ae:70:e8:a5:ca:d8:ea:3d:f1:b0:e1:e7:c5:9b:7b:
00:ac:79:17:ef:bf:73:0e:1d:30:14:95:12:e2:00:92:cd:f9:
23:ce:ec:6c:40:15:97:3b:93:0d:74:b1:48:7b:b6:f0:1c:b0:
ae:f7:d3:30:93:53:1b:21:6c:12:4a:c4:b9:9b:c0:0d:d1:4d:
49:a8:c7:2c:04:7c:b9:6f:a9:4a:bc:54:ec:b9:ea:9c:f0:a3:
d6:62:7c:8b:29:44:38:ab:39:10:9c:bf:a3:74:3d:43:f0:fd:
8a:cd:6f:2c:ef:46:3d:7c:51:0f:f1:da:e7:39:f0:e7:1f:2e:
79:88:87:0f:55:e7:63:5f:03:b5:2e:b8:d0:39:50:8a:93:f1:
af:a9:73:ae:30:ad:80:99:98:09:96:1a:02:7c:d8:4d:89:49:
f1:9d:4a:7e:b9:bd:b5:13:59:16:f7:60:05:e2:ef:95:74:86:
ef:55:d3:2d:87:d6:ec:a2:cf:27:01:5a:2b:f7:69:da:a6:58:
71:ec:98:7e:cd:1e:db:20:00:bf:e6:2e:45:43:af:4d:9e:de:
ef:82:ef:82:c9:ef:68:af:53:0b:91:c3:84:14:a2:33:49:ab:
d5:3a:89:29:9d:fe:83:8c:22:2d:8a:07:59:a9:16:70:26:83:
28:3d:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org