Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5FFD6CE90D11EBB1A0A16AD8A014CE.roa
File: AC5FFD6CE90D11EBB1A0A16AD8A014CE.roa (raw, json)
Hash identifier: n1smbAfbwUQRGBagmdgCHHCbFK00b+xguXVYhCNYs1k=
Subject key identifier: F1:F7:6E:DD:D0:C4:1B:13:91:39:A8:43:71:5A:A4:89:D9:55:CC:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0790
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5FFD6CE90D11EBB1A0A16AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:50:57 +0000
ROA not before: Tue 20 Jul 2021 03:50:54 +0000
ROA not after: Thu 15 Sep 2022 03:50:54 +0000
asID: 1239
IP address blocks: 156.225.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:50:54 2021 GMT
Not After : Sep 15 03:50:54 2022 GMT
Subject: CN=60f64821-71b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:70:28:5a:ae:45:49:93:dd:7b:dd:ed:97:
74:58:0e:13:af:ad:9a:c7:67:e8:e8:4c:2f:32:ce:
9f:c6:43:55:db:1f:36:9c:eb:12:5e:ab:6f:7c:dd:
2f:41:03:45:59:0e:45:20:dc:dd:d6:22:93:e1:b2:
70:0a:ad:e5:5b:2f:4a:d0:71:c1:8a:08:b3:0b:91:
f4:dd:1d:ae:f0:a0:24:1b:90:a0:a8:87:20:9b:52:
4a:66:d4:9b:35:98:be:7d:e1:30:92:e5:85:79:5c:
18:a3:f3:de:82:b7:1b:f2:0a:51:78:8d:04:bd:17:
ad:de:d7:9d:1a:d8:f7:82:9a:48:fb:49:ab:60:74:
fa:b4:80:26:ec:3e:a2:28:00:bf:dc:fb:7d:44:f5:
54:44:30:87:3c:3d:32:5b:76:b4:40:3d:8f:8d:7c:
40:5b:af:23:c5:30:2b:f0:3e:34:a0:47:48:3a:a2:
44:76:84:30:5b:b0:de:f5:4c:fd:99:06:0a:5b:43:
f0:9a:3f:dd:43:42:6f:d4:ad:74:e3:26:26:4c:08:
96:9e:de:ed:a9:54:f4:24:a0:cf:c8:d6:fb:ad:48:
66:c4:0c:e9:22:49:ac:3b:b3:65:fb:0b:68:91:a8:
3b:da:41:b1:a5:95:66:b1:8e:24:91:fe:ad:cf:0b:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:6E:DD:D0:C4:1B:13:91:39:A8:43:71:5A:A4:89:D9:55:CC:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5FFD6CE90D11EBB1A0A16AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.64.0/20
Signature Algorithm: sha256WithRSAEncryption
14:60:c7:fa:92:d0:39:11:2b:87:46:9b:ad:f4:4a:a3:6c:a3:
8c:40:be:18:21:79:2c:2a:fd:9b:a6:00:52:17:44:ea:81:aa:
11:cf:1e:a7:07:bc:67:c5:7b:ad:87:d9:cc:65:c9:a4:13:f6:
bc:df:43:01:f4:43:4e:f9:67:c0:c4:3d:11:4d:86:13:4a:4f:
26:4d:5e:9c:b1:f5:a0:c1:3f:2d:e2:95:f2:c2:bc:05:3c:30:
dd:7d:d4:fd:84:2e:34:21:94:49:a5:53:b3:08:34:1f:0b:e6:
d6:9a:ce:00:48:27:4a:ae:d7:c4:ea:2a:f6:7f:fc:f2:55:3b:
68:2c:0b:bf:87:4c:f6:38:a2:0f:7b:8e:8d:81:25:25:59:d9:
68:0f:ed:55:e6:f9:58:ed:8c:bb:67:02:83:3b:bb:e4:80:89:
12:16:23:c0:14:d9:56:4b:45:aa:10:f8:3f:a6:d1:0d:7d:a9:
a4:b3:19:bb:ca:c8:c1:1d:74:76:47:f4:9c:4d:55:6a:72:e5:
1f:3c:73:e2:86:6c:97:4d:65:6a:e5:13:9d:78:0d:e3:d7:a2:
24:60:56:08:5f:10:d4:0d:ab:68:47:f9:94:06:ad:a4:69:ba:
75:81:f6:a4:d6:18:ad:e0:09:94:78:7e:5a:54:50:26:df:75:
2e:1b:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org