Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3AA0E44395F11ED8C1A8BADF1222468.roa
File: A3AA0E44395F11ED8C1A8BADF1222468.roa (raw, json)
Hash identifier: xPRyWcX615Zp7ih7X5z/zc5CTUTTCaqZXXhanRiaKCk=
Subject key identifier: 69:06:A9:47:B8:35:78:A9:BD:1A:FC:2C:EF:B9:11:93:7D:F9:F7:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 182F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3AA0E44395F11ED8C1A8BADF1222468.roa
Signing time: Wed 21 Sep 2022 03:44:05 +0000
ROA not before: Wed 21 Sep 2022 03:44:02 +0000
ROA not after: Fri 30 Dec 2022 03:44:02 +0000
asID: 35916
IP address blocks: 156.231.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6191 (0x182f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:44:02 2022 GMT
Not After : Dec 30 03:44:02 2022 GMT
Subject: CN=632a8885-b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:80:f0:bc:23:4b:bb:46:61:68:e8:5f:42:
b0:2e:5e:15:20:0f:08:59:4a:bc:4e:29:9a:e9:27:
4b:1c:1c:6b:37:09:1c:d6:2a:de:40:66:b9:73:48:
92:b7:20:dc:87:17:fb:63:67:ba:c3:fd:52:d7:5e:
2b:74:4d:f4:2e:71:6b:a1:00:82:c1:af:c0:08:29:
f4:b8:02:7f:ef:3e:db:08:ff:b1:72:1d:27:57:4d:
17:b0:39:e9:59:73:2a:66:7b:5e:74:69:9a:c6:81:
5c:1e:e1:06:14:ab:b0:f8:21:38:26:54:41:27:e7:
e4:cf:16:74:15:7e:7b:99:55:bb:82:17:a8:21:b5:
ca:49:09:5c:bb:82:71:1a:a0:de:34:3e:17:1f:aa:
a6:8d:6a:8a:0f:36:9b:c7:86:4e:53:39:3e:3b:fa:
8f:1f:8f:24:0f:f9:9e:85:d4:ec:03:12:2d:23:a2:
6a:3c:70:0c:d3:ba:33:83:09:6e:38:73:43:5c:45:
a1:00:1b:66:47:70:c9:3a:50:ee:34:18:64:b5:7c:
14:bf:a8:91:51:0c:06:f7:f0:c2:7e:d3:34:f8:67:
ae:f0:60:9e:b1:25:d2:c3:53:37:b1:db:37:e7:18:
bc:fd:17:88:c9:5f:58:23:0f:31:6e:f9:b7:78:ab:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:A9:47:B8:35:78:A9:BD:1A:FC:2C:EF:B9:11:93:7D:F9:F7:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3AA0E44395F11ED8C1A8BADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.120.0/22
Signature Algorithm: sha256WithRSAEncryption
09:39:07:65:69:3c:ad:a3:8d:7c:60:32:8b:1a:b6:ce:87:46:
11:e2:5a:e5:88:5d:c2:80:82:e5:17:cb:00:13:d7:a9:4c:ae:
72:8b:a6:f4:84:cc:3f:be:c8:60:06:7e:4b:26:e7:8a:6f:bf:
76:ad:f0:47:71:dd:41:7c:87:4f:3b:9c:30:4c:33:af:76:f5:
a3:26:ae:a9:f8:03:ff:6d:42:55:5d:ae:d5:48:35:a0:f6:9f:
39:f2:f6:be:13:0e:ea:b1:76:89:24:78:71:32:82:8c:27:2a:
ed:a5:07:2d:96:ac:d5:07:20:a1:9e:e6:49:9a:db:c0:b4:30:
24:3c:b6:1d:f7:64:68:64:15:db:8d:00:b9:bc:ab:b9:56:3d:
13:ad:0e:7c:ec:f7:62:8e:8d:c9:e7:c1:d6:61:a5:31:9c:50:
39:10:aa:0d:bf:2b:54:24:a9:58:ee:46:76:88:80:93:10:ee:
f7:84:e0:b3:98:79:90:71:94:bc:83:b0:0b:b0:a0:0c:d2:d8:
91:52:49:db:6a:c9:23:ce:b6:9c:07:c1:92:16:cc:bd:9e:c4:
f3:37:72:b0:3f:fa:12:a4:67:2c:bb:92:77:00:3e:bb:56:0b:
a4:36:a0:d2:d7:64:46:b7:38:18:a3:03:d0:48:29:3b:ff:c9:
d3:9e:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org