Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1DE37E16C211EC947F9F6DD8A014CE.roa
File: AA1DE37E16C211EC947F9F6DD8A014CE.roa (raw, json)
Hash identifier: 6S8ro+FnlD7vk4EGm9ehm+rPI8C99xTCbxL6jbHZKs8=
Subject key identifier: F8:8A:06:F2:84:2D:04:F0:72:5D:EA:83:1E:08:40:A5:36:2B:C4:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 095D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1DE37E16C211EC947F9F6DD8A014CE.roa
Signing time: Thu 16 Sep 2021 07:49:48 +0000
ROA not before: Thu 16 Sep 2021 07:49:43 +0000
ROA not after: Sat 16 Jul 2022 07:49:43 +0000
asID: 133201
IP address blocks: 156.224.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 07:49:43 2021 GMT
Not After : Jul 16 07:49:43 2022 GMT
Subject: CN=6142f71b-a1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:e4:02:2b:68:b7:42:f1:06:c5:fa:1b:75:
72:99:bf:8c:ec:2c:1e:e6:a4:94:78:6a:f7:21:84:
3d:49:ff:97:4c:7c:89:28:69:e7:69:66:37:66:33:
12:44:fc:8c:dc:86:04:a1:e8:3d:6b:32:df:36:0f:
52:c4:41:4f:0a:66:fb:45:32:81:df:a1:69:e9:71:
5b:f5:8b:a5:ea:86:16:cc:22:8f:37:9f:1e:0c:bc:
55:7b:59:93:42:af:66:c1:b4:fe:d5:35:29:90:77:
50:b6:03:67:e0:f9:3d:bf:44:be:70:68:73:5b:56:
34:73:42:28:74:c3:14:15:83:7a:79:1d:14:23:23:
71:87:85:99:03:32:8e:15:59:f0:66:f0:e8:13:0e:
9b:15:11:d0:ae:e1:a3:e9:0f:0a:49:01:f6:54:6f:
fc:2b:dc:3f:33:8d:b0:bb:f2:da:2c:3c:4e:c1:b6:
c0:35:22:0f:9f:97:c3:0c:ec:ca:35:9f:ee:d8:83:
1e:ac:4e:b3:bc:cf:45:2e:2f:f9:d8:cf:4c:0d:e0:
f1:6a:bd:0a:3d:c1:78:cb:15:cd:23:0f:0a:d8:7b:
03:21:06:75:00:8f:e9:b9:cd:f7:f7:5a:bb:7b:c6:
12:eb:01:db:c7:18:35:f4:0b:75:e5:5e:46:13:65:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:06:F2:84:2D:04:F0:72:5D:EA:83:1E:08:40:A5:36:2B:C4:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA1DE37E16C211EC947F9F6DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8b:d1:cd:99:5b:65:fa:9e:c3:45:c7:14:21:84:fa:32:3e:e9:
b2:35:ce:fc:b8:0b:87:1d:d0:a2:cb:b3:7a:a9:e7:01:42:7a:
01:65:d5:55:4c:1c:82:d8:98:30:f6:ec:99:12:39:52:27:70:
44:8b:8b:a9:49:23:2b:62:30:e8:1d:22:2c:7c:b7:dc:b2:ea:
28:d8:82:40:c1:35:06:05:69:3d:20:f3:23:bd:85:7d:8b:4f:
6c:bc:fc:0c:b0:25:4a:91:d5:44:90:77:3c:44:96:f7:b7:d6:
97:60:ad:74:d0:e8:62:b8:a9:f6:b4:54:99:03:87:ad:dd:b9:
41:4f:90:04:27:69:b9:d7:ca:9c:30:1c:04:2b:c2:46:ab:33:
02:af:d6:2f:94:03:39:7b:5a:63:47:b1:ad:2d:b8:05:42:72:
ac:04:41:f7:97:a1:d2:fb:f5:a7:0b:5f:e4:b6:70:35:a5:12:
11:cb:a8:a9:08:e4:e4:d2:df:74:ce:3a:ac:a4:ee:ea:f1:5e:
e4:6e:7a:9e:64:6d:e6:41:51:4b:a3:fb:75:49:60:c5:89:ba:
dc:a0:61:3e:c0:06:a1:48:a0:1c:66:0f:50:34:26:ec:51:88:
ac:45:3f:46:f2:f8:58:70:a8:29:e9:22:ff:cd:0f:8d:4a:8e:
2e:6e:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org