Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E8D12A200911ECBF59087CD8A014CE.roa
File: A4E8D12A200911ECBF59087CD8A014CE.roa (raw, json)
Hash identifier: SPiz8Wy+aJubybVxycjvyQq25fBxgTrb0DNzd4ukgo0=
Subject key identifier: 0F:D3:92:86:8F:8F:3B:57:B3:D3:C7:05:8C:80:10:79:39:8F:70:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E8D12A200911ECBF59087CD8A014CE.roa
Signing time: Tue 28 Sep 2021 03:10:34 +0000
ROA not before: Tue 28 Sep 2021 03:10:30 +0000
ROA not after: Wed 28 Sep 2022 03:10:30 +0000
asID: 132839
IP address blocks: 156.252.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:10:30 2021 GMT
Not After : Sep 28 03:10:30 2022 GMT
Subject: CN=615287a9-c6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:e3:14:c9:02:4c:06:55:91:17:5d:fb:c4:
9c:05:06:87:0c:f9:a2:c4:fd:d5:b3:5d:9d:b2:86:
28:8f:df:b1:f9:fe:99:8b:51:cb:f2:68:bf:54:15:
5e:98:2a:4b:65:24:b3:01:43:cb:bf:45:8e:91:b0:
29:99:21:65:1d:1f:b4:9c:de:13:5f:b8:31:86:82:
65:26:77:e1:7b:12:36:d9:5f:82:a8:ba:52:1f:4e:
09:bf:89:ca:e1:43:e1:08:fe:96:66:a3:94:d0:08:
74:a3:35:3f:08:d7:24:f7:6a:54:b0:d9:35:47:84:
d7:94:16:75:96:27:0b:f3:92:96:30:5e:b4:83:b3:
13:c5:f2:9b:99:d4:30:be:a2:b4:3b:b2:da:9d:74:
b6:cc:42:30:3c:27:7f:0c:0f:18:36:12:2f:82:ad:
9b:7e:6a:a0:37:81:bc:e9:28:55:27:26:c1:91:d2:
e8:a9:90:9f:50:a4:36:eb:82:bb:b4:7e:95:5b:00:
20:cd:27:a2:f3:fe:e5:7b:b3:a9:9a:74:73:73:96:
c4:39:4b:ad:45:0d:06:e1:e1:c1:45:8e:f3:d3:34:
2b:9e:33:e7:58:5d:bf:f5:1d:42:19:3c:5c:fe:c8:
f6:54:3c:c5:98:bd:21:6a:3e:28:cc:cf:e9:a4:96:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:92:86:8F:8F:3B:57:B3:D3:C7:05:8C:80:10:79:39:8F:70:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E8D12A200911ECBF59087CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:db:2a:3b:fa:90:c6:45:27:d5:d6:e8:ac:58:ac:57:5e:1c:
bd:ce:fc:e7:d7:00:e0:2f:2f:d0:d2:62:cd:9d:84:b9:8c:8f:
75:b5:6e:ba:03:e1:6b:b7:58:b6:c7:8e:f9:e3:f7:9f:39:36:
be:22:3e:f5:c9:c8:dd:45:cd:80:76:ac:36:94:96:14:7b:22:
f1:33:9c:3c:47:5f:4b:61:3d:72:fb:88:dd:b3:f7:4c:02:a0:
18:55:0e:d2:ed:7a:38:41:45:66:13:97:18:bd:fe:b3:e7:ee:
c1:55:a2:0b:47:39:dd:d6:3a:64:33:95:77:53:06:35:53:87:
3d:4f:72:ca:39:18:c9:ab:a2:a7:66:4e:f0:ba:0a:64:9e:05:
99:cb:f5:16:2b:30:f7:22:eb:25:a9:e9:b2:ff:e8:3e:cd:af:
9d:20:27:c3:79:82:32:64:e4:3b:8b:39:2a:bc:36:c2:23:00:
a5:8f:4a:c0:8f:91:da:12:ba:25:1c:c2:5e:89:1a:99:29:96:
7c:42:4c:53:5b:b7:c1:14:a7:30:3a:ea:05:60:88:0f:ff:24:
5d:d0:08:9c:19:7e:bf:67:d6:32:e8:ce:27:94:46:56:d1:c7:
b5:5b:68:df:51:c2:2f:f7:67:ee:3f:6d:52:48:bc:1f:a1:50:
c1:83:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org