Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACC7DF5CEAF411EB8C052C4CD8A014CE.roa
File: ACC7DF5CEAF411EB8C052C4CD8A014CE.roa (raw, json)
Hash identifier: eL5J/Xel7u1SVrHxFaqPTFsbUzeps4JNO7a6uwCpyTk=
Subject key identifier: AD:B3:4D:F6:E2:CB:29:5D:D5:6C:EF:64:C7:39:32:8A:F4:1E:B0:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACC7DF5CEAF411EB8C052C4CD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:57:07 +0000
ROA not before: Thu 22 Jul 2021 13:57:02 +0000
ROA not after: Thu 22 Sep 2022 13:57:02 +0000
asID: 1239
IP address blocks: 156.236.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:57:02 2021 GMT
Not After : Sep 22 13:57:02 2022 GMT
Subject: CN=60f97933-44ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:91:ea:7f:0a:5a:80:86:78:17:e4:b0:5f:
ff:1d:cf:73:e5:45:fb:48:73:9b:9b:b5:32:ff:fa:
33:73:4a:31:14:99:a8:0f:2c:aa:f0:f4:19:31:0c:
f6:09:35:8e:bc:92:a0:6b:5a:5a:7b:ba:d5:d9:33:
bf:b9:33:70:d4:1d:81:8e:be:af:31:17:50:4d:21:
d6:be:68:70:05:91:7e:db:ad:60:21:d6:17:91:1c:
7c:35:23:03:62:10:f8:9e:57:c1:09:6e:7d:5e:73:
0c:71:d1:6b:3e:52:0d:ed:0d:f2:a0:45:24:89:4d:
81:01:b4:37:20:14:03:f7:63:74:0d:16:c5:a8:4e:
e2:5f:e2:0e:9a:ac:5b:c0:f6:6b:88:60:a6:ff:d6:
69:15:8b:2c:56:51:2f:8c:b9:2e:8a:e8:7e:16:58:
90:9e:af:8a:0e:da:70:c2:13:49:9d:ac:0e:72:e1:
cb:76:81:1c:52:a4:2e:38:f1:18:59:3f:b0:0a:86:
80:5f:de:38:32:89:63:50:bf:47:1f:e7:f5:c4:10:
50:c7:37:f0:db:5a:6e:be:8b:38:28:0d:ee:ad:28:
c1:c9:e0:6c:49:c3:ed:62:40:e3:66:f5:aa:cc:81:
25:b2:0b:65:1c:ea:af:8f:87:7c:e0:50:3c:b7:02:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:4D:F6:E2:CB:29:5D:D5:6C:EF:64:C7:39:32:8A:F4:1E:B0:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACC7DF5CEAF411EB8C052C4CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.173.0/24
Signature Algorithm: sha256WithRSAEncryption
83:90:fd:9b:a8:21:ab:2c:7a:e5:1c:8d:8c:92:2b:03:97:d9:
ae:17:22:87:e7:42:c3:d7:4a:3b:9f:3c:42:ca:ab:27:ac:fa:
dd:9d:bf:06:2d:a3:20:af:c3:0e:45:1e:b5:1e:90:c0:f8:21:
d8:99:30:d9:09:61:95:f6:ae:90:88:47:03:b8:98:51:35:34:
31:70:9d:9e:a8:8d:8f:92:03:c1:56:3e:4f:df:10:89:5d:ea:
97:3f:cf:14:38:ab:e0:48:1e:8f:37:b4:2b:16:6b:0e:cd:bf:
5d:d0:b3:6d:ea:86:5f:30:f9:b7:25:12:8a:ae:d5:6f:c4:f2:
7b:18:4a:be:58:e5:f7:aa:b6:42:c0:16:39:2d:e3:45:ad:35:
40:6f:a6:f6:16:4e:30:34:f5:76:0e:e0:e7:0d:7e:25:dc:c7:
93:50:9a:c8:cf:95:e2:2e:9d:54:4a:fb:de:32:eb:56:7a:e6:
30:67:4d:06:58:4b:09:cd:53:59:fc:28:81:90:ce:30:82:79:
10:ab:0a:2c:4b:0d:3f:26:0b:99:ec:45:e6:6f:1b:94:61:b9:
18:8a:2f:6f:b4:d2:ea:0c:a2:ab:71:76:2a:84:9e:e7:29:47:
86:c0:38:e6:ab:df:4f:a4:4a:b5:d6:c4:2d:87:8a:90:a2:59:
9e:a3:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org