Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94B571AFBE211EB9B2E4E36D8A014CE.roa
File: A94B571AFBE211EB9B2E4E36D8A014CE.roa (raw, json)
Hash identifier: g1eN0K7MDAijmCiiKArlaJMjNNHy4QBzCxO6DToOiaY=
Subject key identifier: DC:51:C3:F3:21:12:A2:8C:9D:80:1D:CF:F2:3B:FF:FF:9C:32:C9:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 089B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94B571AFBE211EB9B2E4E36D8A014CE.roa
Signing time: Fri 13 Aug 2021 03:01:32 +0000
ROA not before: Fri 13 Aug 2021 03:01:28 +0000
ROA not after: Mon 13 Jun 2022 03:01:28 +0000
asID: 22773
IP address blocks: 156.239.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 03:01:28 2021 GMT
Not After : Jun 13 03:01:28 2022 GMT
Subject: CN=6115e08c-059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:ab:52:c8:01:0d:48:2a:21:07:12:b6:ca:
f5:fe:30:ea:6b:19:fd:ff:d6:55:5a:cb:46:ac:4d:
2e:b7:a3:7b:91:a3:8c:e8:dc:2e:a2:2a:18:a1:f6:
31:d0:5d:0c:bf:8c:27:ef:3e:65:d2:0c:0f:10:45:
f1:d0:3f:37:b4:c2:a0:8f:4d:a1:14:a8:52:7c:2c:
b8:ee:67:28:d4:df:8e:c7:9b:d7:d0:6b:52:68:57:
f6:cc:a4:42:5c:ea:b6:09:58:ef:3f:eb:fa:60:dc:
9a:df:ab:24:45:ed:8a:99:39:99:19:b3:3d:26:e7:
61:b3:47:66:c0:6d:d5:cb:59:5e:6b:b8:eb:dd:d0:
bd:48:c8:d9:55:6d:cb:52:56:b7:7c:bd:be:33:4a:
5a:fc:73:d8:ae:3c:d1:94:45:a6:df:66:a4:fa:41:
ad:ad:3c:fb:93:ce:11:f2:ef:e1:26:74:79:74:d3:
a4:55:c2:1b:f4:e4:70:e7:80:5c:ca:91:81:e5:f0:
c8:fe:be:15:4e:90:f3:b6:c4:b7:95:df:ce:f7:26:
12:0e:39:86:ee:a8:73:5b:44:60:5b:23:c5:cc:9c:
fc:c3:0d:d2:0b:59:5b:95:db:d0:0b:23:5e:a5:45:
29:84:be:af:ea:d5:d2:70:29:8f:34:7d:98:37:5a:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:C3:F3:21:12:A2:8C:9D:80:1D:CF:F2:3B:FF:FF:9C:32:C9:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94B571AFBE211EB9B2E4E36D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.144.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:13:f1:fa:ee:ec:74:8a:30:6b:9d:bf:9b:a1:b7:98:76:02:
4f:31:2b:ed:6d:97:0d:f6:ba:52:3f:33:2a:f1:b5:d9:2d:41:
9c:29:eb:99:8e:21:2a:7b:fb:6c:9f:88:83:69:c9:22:ba:c2:
c6:c0:47:b5:b5:cb:7f:78:62:81:48:77:fe:f5:69:e1:aa:ca:
d3:1e:5b:e7:6e:f2:11:10:39:27:3b:ed:78:4a:0b:6b:3a:6b:
da:b8:ad:ae:65:86:d0:5a:da:78:89:b6:84:03:4d:b1:3f:d0:
0d:b2:18:77:3f:31:ce:6c:76:7e:7d:46:f6:12:b9:8f:cb:d8:
21:08:ed:78:ce:f1:35:e4:8a:fb:e6:23:7e:cf:2b:04:59:27:
99:af:2e:dc:74:22:d7:53:18:94:cf:32:5b:bb:9e:51:c4:64:
77:6b:61:d5:03:a4:85:34:7e:f0:b7:2d:45:12:46:13:76:62:
50:f5:86:0d:f1:61:b5:57:cc:75:b5:21:d9:44:d8:f7:ba:9e:
f8:0d:20:6d:63:21:10:e5:95:cd:a5:b6:e0:81:85:15:d4:79:
ad:14:f0:73:66:9b:bd:c6:c9:87:ee:a6:d8:d5:a6:5e:5b:b1:
bd:6a:86:a8:a8:cf:40:a9:13:da:a9:49:b1:15:41:9e:5a:72:
7f:da:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org