Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB58FD4C326D11ED90E452C0F1222468.roa
File: AB58FD4C326D11ED90E452C0F1222468.roa (raw, json)
Hash identifier: K4uyI/uyIMbcUGlH5+kscb1jiH9yFhpMwght4rT9D7M=
Subject key identifier: 41:A4:73:A1:CC:69:D6:5E:F9:48:E4:3E:78:FD:D0:2D:F4:21:84:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB58FD4C326D11ED90E452C0F1222468.roa
Signing time: Mon 12 Sep 2022 07:36:53 +0000
ROA not before: Mon 12 Sep 2022 07:36:48 +0000
ROA not after: Fri 15 Sep 2023 07:36:48 +0000
asID: 55720
IP address blocks: 156.245.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6041 (0x1799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 07:36:48 2022 GMT
Not After : Sep 15 07:36:48 2023 GMT
Subject: CN=631ee194-2656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:32:57:4a:ba:4b:e1:aa:8f:17:de:3b:6c:
4f:7a:e6:df:98:da:1c:ed:03:32:d7:e2:14:46:b1:
49:0c:c4:e9:38:dd:a2:3f:9d:76:4b:82:23:c4:ac:
08:fa:49:a4:27:c0:cc:51:45:6f:af:7a:3a:86:b8:
6c:d7:48:92:ed:1e:2a:23:a3:f1:4d:74:d2:b3:9b:
62:5d:e4:ed:85:95:02:d6:a3:2e:b0:2a:5d:2a:0e:
08:02:76:f1:1e:93:4d:45:f2:2f:8c:18:c8:c2:49:
ba:42:1a:72:a4:24:fd:d1:04:5e:df:ce:b1:dc:34:
d9:eb:ca:f0:1e:ce:74:63:a0:da:31:02:f4:14:c3:
70:95:d6:c8:49:af:dc:fe:e2:49:d0:b1:df:e6:b4:
63:f8:76:93:56:58:25:d7:3a:b5:a8:6d:f5:27:12:
b8:a6:f1:01:be:89:78:80:24:17:d9:cd:4d:5b:d4:
e5:4d:d8:04:6d:40:1a:21:07:1f:48:f8:c7:3c:cd:
c8:ba:4a:e2:3c:e2:d3:58:e9:b3:cb:96:c1:f9:13:
88:7a:2c:f9:c4:fe:b8:b8:4d:9b:be:62:52:7a:3f:
d2:5c:0d:00:1a:cf:e7:89:94:a1:4a:c5:be:c6:c2:
19:cc:dd:83:23:9d:2d:4b:c0:02:e0:09:90:10:c8:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:73:A1:CC:69:D6:5E:F9:48:E4:3E:78:FD:D0:2D:F4:21:84:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB58FD4C326D11ED90E452C0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:38:15:1d:f0:e6:4d:db:c9:77:8d:8e:c0:74:b1:ea:56:27:
31:74:6d:15:62:24:90:ae:72:bd:f3:9c:26:16:11:60:da:ff:
92:02:b7:c2:74:fa:e4:95:11:5a:c8:b7:9c:e7:82:02:ab:50:
07:c1:36:09:ca:bf:81:3d:43:ce:ba:db:1e:b6:1a:d5:87:40:
b9:11:70:76:b3:97:af:9e:c3:41:71:39:8a:27:7c:0f:2f:33:
6b:8c:ee:2d:d4:e4:4d:b0:79:de:5a:cf:9b:87:3b:ef:d2:dc:
d3:af:79:d1:38:d5:d1:42:a4:f9:0c:01:e2:e9:ff:d1:b7:0a:
00:94:3c:87:ca:48:8f:ae:c6:9d:13:fe:de:cb:3d:f5:62:4e:
0d:2d:11:46:a3:11:e9:cd:fd:17:ca:31:7f:95:43:bc:7a:6a:
f7:de:bf:e4:a3:a3:5d:32:83:c3:54:24:45:42:f6:e3:26:dd:
12:a8:43:51:ef:a4:8b:02:2e:f3:2f:7b:04:ad:3f:16:ae:9c:
a1:8c:76:8c:c7:0a:7d:61:ea:3d:97:99:96:9a:c6:ab:9a:a1:
df:3d:56:bd:0d:ee:55:55:f3:ea:66:d1:12:e4:50:92:36:da:
ce:3f:cb:6c:e7:eb:fd:2b:dc:ee:90:6d:fb:4f:0b:1e:aa:03:
0f:cc:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:03:18 2023 by rpki-client on console-ams.rpki-client.org