Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38614DEDD9E11EB80548D3AF8AEA228.roa
File: B38614DEDD9E11EB80548D3AF8AEA228.roa (raw, json)
Hash identifier: lnRAKODcih5+H/fHL8WAuIowLPQsNpQCQc9KPmgeha4=
Subject key identifier: 1C:46:5D:C7:8D:09:5F:A6:09:01:E6:57:5A:7C:2E:DD:00:C9:68:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38614DEDD9E11EB80548D3AF8AEA228.roa
Signing time: Mon 05 Jul 2021 14:38:45 +0000
ROA not before: Mon 05 Jul 2021 14:38:40 +0000
ROA not after: Mon 05 Sep 2022 14:38:40 +0000
asID: 22773
IP address blocks: 156.242.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 14:38:40 2021 GMT
Not After : Sep 5 14:38:40 2022 GMT
Subject: CN=60e31975-fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:02:3e:07:a3:c7:2e:b1:80:03:67:89:e9:ff:
2d:fe:a3:18:ea:ef:b5:27:02:00:5a:81:ba:29:63:
f0:f1:0c:60:0f:dd:73:86:f3:36:ec:8f:25:7a:dc:
56:74:ac:80:dc:ac:8f:bd:b0:7d:4c:d9:15:ab:d4:
a7:c8:f0:d9:61:83:3a:38:56:ca:19:f9:5d:30:19:
fc:d4:f3:9e:8a:21:18:08:65:d6:6c:49:90:11:2a:
ec:53:d1:e9:61:3f:78:74:d8:92:a2:5a:57:44:3f:
83:1b:63:40:5f:dc:a1:f8:86:2e:60:4c:fa:bb:43:
f7:76:f4:0f:b0:a6:64:66:f7:1a:f2:17:f4:52:37:
28:56:39:33:44:db:15:8d:83:40:d6:b5:54:89:cf:
11:fc:09:57:97:d8:79:ef:a4:b8:eb:b6:91:13:21:
b5:07:5a:67:4b:19:ed:47:3d:52:4c:fc:8c:07:2a:
a6:dc:ed:99:2b:c8:ef:54:1e:59:54:5e:4f:8a:9f:
7b:40:9e:56:ea:a4:db:69:ab:7d:7d:e8:c4:3b:8c:
fd:f0:dd:09:ce:26:31:d5:dc:01:92:85:9f:6c:3f:
4d:7c:38:60:89:6c:89:f2:12:c5:83:44:51:ca:d5:
bf:1a:31:57:a6:e0:cb:77:11:ba:73:47:2b:07:8f:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:5D:C7:8D:09:5F:A6:09:01:E6:57:5A:7C:2E:DD:00:C9:68:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38614DEDD9E11EB80548D3AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.28.0/22
Signature Algorithm: sha256WithRSAEncryption
18:62:95:05:57:7f:69:86:f6:04:ac:f8:fa:ae:93:e1:cb:9d:
50:39:8c:11:8e:a7:b9:db:5d:11:37:39:99:83:a0:b6:34:bf:
b0:27:bd:ad:2c:bb:5b:fa:db:a6:54:fa:1f:49:6b:20:ef:e2:
33:25:b3:88:5e:e5:13:74:71:b9:c5:0f:f8:f3:c5:55:a1:01:
a4:a1:94:03:8e:14:fd:54:fc:bd:6d:17:64:f2:17:36:e2:25:
a3:02:91:cb:a6:18:20:81:74:a3:ec:44:6a:b7:d0:b0:2a:aa:
80:70:49:1b:b3:56:fe:87:86:05:24:29:ef:3a:aa:3d:84:7d:
a7:40:6a:14:d2:d1:18:49:51:7a:d2:7d:99:75:34:6d:92:22:
39:44:e4:dc:e3:11:e3:a7:17:6b:1c:79:7c:4b:61:32:15:16:
7e:5a:0d:0c:63:ad:da:74:df:b2:1f:96:a9:c5:63:ab:3f:b4:
26:ba:92:df:73:f6:1c:89:fa:05:9e:63:5f:7d:c6:c1:59:73:
b6:13:fd:07:74:80:4c:cd:44:c0:9e:af:f6:98:49:45:91:0e:
a4:c8:f3:35:fe:68:1b:ff:24:12:14:2b:64:63:eb:92:c6:12:
86:9b:91:76:9a:20:24:b0:44:d4:0b:f4:64:04:3e:85:ce:f4:
5f:6e:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org