Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71FC8FEBC6D11EBB697007AF8AEA228.roa
File: A71FC8FEBC6D11EBB697007AF8AEA228.roa (raw, json)
Hash identifier: r0Y3mITuGMvHHXtNNzYtcu8xa0nPt04kBxex5QVv+DU=
Subject key identifier: DA:E3:FF:4C:25:F6:F9:6D:D3:C8:F6:F6:F4:ED:9D:8D:A7:E9:2B:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71FC8FEBC6D11EBB697007AF8AEA228.roa
Signing time: Mon 24 May 2021 08:54:31 +0000
ROA not before: Mon 24 May 2021 08:54:26 +0000
ROA not after: Sun 24 Jul 2022 08:54:26 +0000
asID: 28419
IP address blocks: 156.233.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:54:26 2021 GMT
Not After : Jul 24 08:54:26 2022 GMT
Subject: CN=60ab69c7-edaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:f0:a0:3e:bc:71:c7:84:be:36:a7:aa:f5:
ef:c2:2d:e4:27:81:b3:89:9b:e0:df:39:33:11:f1:
3c:04:20:74:8c:07:3a:cf:5b:18:76:05:0f:68:ec:
ef:a4:f8:c8:95:84:e4:e0:db:ca:d9:a8:69:a7:be:
93:ed:ba:13:c5:dd:af:8e:aa:5a:39:a1:f7:4a:46:
44:23:d6:75:cb:5e:77:1f:3c:d7:71:ae:e9:2d:40:
50:7a:64:fe:29:8e:8a:bd:24:7f:28:2b:5c:bf:54:
4e:9a:30:55:a1:b4:f8:07:82:a9:b2:d3:cb:90:c3:
85:3b:e5:66:53:eb:e7:c4:01:56:33:88:dc:73:ee:
60:7a:27:f8:47:06:39:ee:d6:96:c5:e0:91:e4:52:
d2:16:4b:51:74:4b:95:1b:cd:a8:c4:e1:3a:79:20:
16:ac:d3:19:e5:d5:f6:68:f2:f2:a8:9b:f3:56:cd:
a6:c9:6c:31:44:e2:6d:e7:ef:e3:e7:87:4c:fb:48:
c0:cc:ae:62:35:03:3f:b6:67:09:81:4d:d4:69:66:
c9:23:d5:74:9e:52:21:30:61:c6:e2:f3:8b:6d:47:
59:82:fb:b2:6b:82:13:01:07:42:c9:83:30:84:ff:
69:45:66:74:87:e3:c1:2c:97:88:87:db:ab:ef:50:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:FF:4C:25:F6:F9:6D:D3:C8:F6:F6:F4:ED:9D:8D:A7:E9:2B:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71FC8FEBC6D11EBB697007AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
82:33:6b:06:3e:a3:73:74:be:d4:22:f9:35:a5:81:a0:ee:f6:
e4:30:99:7f:46:be:5c:b6:9a:ed:b0:f2:ce:37:53:74:08:7b:
a4:4c:ba:73:cb:b8:a1:ed:04:dc:31:39:b7:6d:54:0b:31:76:
82:db:53:40:83:23:bf:a6:0c:8d:a7:2c:91:c1:42:c4:cf:0a:
49:a7:f3:c9:53:47:1d:ca:de:e1:e9:20:e0:c3:7b:22:1a:51:
fa:f4:c8:90:1f:93:fc:8e:8b:d7:02:0a:d7:c0:0b:40:9a:3a:
da:2b:64:ce:b4:8b:7f:5e:d0:5d:28:7c:6e:a4:88:eb:2e:77:
4d:12:78:2b:53:47:27:3d:b0:8e:02:ee:14:40:f5:87:68:b3:
6a:36:24:b0:86:18:76:79:97:cd:c4:3a:f1:28:6f:ca:7a:93:
d2:66:3a:d9:82:18:f9:2c:44:35:c3:e2:30:f6:d9:1c:2f:e8:
ac:fe:26:5c:d4:44:09:5c:77:da:f6:0c:a9:f0:58:1d:e1:ca:
d0:eb:c8:68:14:36:3c:75:61:3a:eb:bd:e2:2d:8f:72:3d:74:
66:85:3e:e6:c6:38:76:70:5e:5d:70:a6:31:de:6b:63:46:94:
de:f5:8d:0f:30:f5:c5:ae:b1:eb:b4:c5:db:7c:d8:55:9d:b3:
40:8e:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org