Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
File: B648B4F0620611ECA45A9AE45A40D577.roa (raw, json)
Hash identifier: t21uxOWEHGAJDniJ9+NujRD4l88rFDxVTKqxaX5HvsM=
Subject key identifier: E3:A7:D6:98:48:9A:78:43:A3:87:E4:ED:30:B9:C2:D4:D4:C5:DC:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1105
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
Signing time: Tue 21 Dec 2021 02:35:51 +0000
ROA not before: Tue 21 Dec 2021 02:35:46 +0000
ROA not after: Fri 30 Dec 2022 02:35:46 +0000
asID: 35916
IP address blocks: 156.233.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4357 (0x1105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 21 02:35:46 2021 GMT
Not After : Dec 30 02:35:46 2022 GMT
Subject: CN=61c13d87-c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:cc:62:60:0f:90:e6:ac:f6:7e:77:a5:99:
5a:e1:ef:2e:e0:96:5e:c6:aa:e6:5c:37:96:a9:88:
a1:e8:2c:0c:b7:9f:c4:34:04:62:6c:d1:dc:33:78:
7a:1a:e5:94:16:73:4c:e1:46:b7:8b:d5:e0:32:7b:
d6:87:a6:e3:c3:b5:a3:c3:80:5f:b8:ec:f4:ca:eb:
ba:a5:20:15:7e:00:e0:41:df:af:17:58:91:21:a2:
ab:ab:12:fc:0e:4a:90:bf:68:9d:a2:fb:15:06:1a:
18:5a:19:a7:d9:39:d5:29:25:d5:86:44:b5:a2:74:
1a:67:9d:4e:4e:fe:0f:78:77:4e:77:e9:3c:d0:d9:
54:64:19:41:5a:14:63:3d:fc:2c:d5:6d:22:28:f4:
18:1c:c3:f3:5d:45:da:ce:20:23:6c:de:df:d2:90:
aa:e5:15:0d:a3:8d:00:e4:6c:0a:d5:56:d8:70:dc:
48:d7:97:4f:42:30:e4:dc:25:51:3a:72:1e:18:b5:
67:56:40:90:f1:39:dd:fd:15:51:22:e7:d9:1a:69:
81:20:f8:95:0b:09:7b:6c:11:44:3b:c7:f3:13:03:
57:45:24:46:53:2e:e0:c9:87:db:ee:95:ec:55:57:
64:5b:c7:ac:b3:08:7c:0e:1e:97:b6:cd:ec:41:98:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:D6:98:48:9A:78:43:A3:87:E4:ED:30:B9:C2:D4:D4:C5:DC:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B648B4F0620611ECA45A9AE45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ac:0f:2d:52:46:b3:a4:b2:be:36:3f:de:7f:ac:46:99:65:
3d:0a:59:26:60:c0:46:ab:9f:90:b5:c7:15:1e:79:48:a6:b7:
3d:c2:16:54:97:62:5f:08:70:1d:b8:ac:7c:b3:c3:c5:a7:be:
34:fa:9c:75:e6:86:71:3a:e0:3d:44:b8:ea:de:07:47:e9:3d:
e3:d8:5d:77:41:ed:e5:2d:01:fa:62:38:65:c9:94:14:32:03:
59:22:be:24:bb:85:0f:c1:c9:62:66:4f:f6:cb:22:d9:c9:54:
29:ab:78:35:cb:83:86:52:0d:fb:20:e2:97:26:1d:9b:99:26:
e5:b1:7d:d9:c6:0a:cf:e2:a2:8a:3d:92:54:1b:fe:73:4a:88:
61:13:ef:d0:c5:cd:ea:71:9f:2b:7d:e4:44:fe:0c:03:70:9a:
87:f5:90:54:51:b5:e0:9d:86:ce:56:4f:a0:7c:78:59:c8:50:
71:c4:ec:73:f5:fe:c4:c0:69:98:f0:66:e2:00:e8:a1:83:ae:
25:80:1d:54:2d:40:b1:f5:1f:ff:ec:38:f4:85:e5:db:8e:65:
39:cd:b0:ef:48:b2:f1:0f:32:4b:a9:b7:f3:9f:e7:90:08:1a:
7c:bd:ba:b0:7f:69:f6:5c:97:3a:03:63:e9:ed:c3:13:d6:05:
66:be:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org