Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B882CE0A57D811EC81C370CF5A40D577.roa
File: B882CE0A57D811EC81C370CF5A40D577.roa (raw, json)
Hash identifier: pnecicPs30V34EuJF8duaZ+E6WalD079dRtQlpwypNw=
Subject key identifier: 7C:D4:94:CA:32:2F:C2:3C:C9:84:78:6F:C7:78:14:2B:50:43:FA:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B882CE0A57D811EC81C370CF5A40D577.roa
Signing time: Wed 08 Dec 2021 03:41:26 +0000
ROA not before: Wed 08 Dec 2021 03:41:23 +0000
ROA not after: Wed 10 Aug 2022 03:41:23 +0000
asID: 138039
IP address blocks: 156.241.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4264 (0x10a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 03:41:23 2021 GMT
Not After : Aug 10 03:41:23 2022 GMT
Subject: CN=61b02966-b8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:ab:2d:61:81:23:58:23:64:d4:c6:39:5d:
d6:7a:1f:d1:dc:43:64:f1:ec:42:0e:2e:0f:14:89:
ca:79:8d:d7:8b:5b:0d:68:93:a6:35:9e:ca:e4:51:
4d:82:dc:0d:2d:3d:02:56:d7:ce:bb:27:4f:1f:bf:
00:5b:f8:90:05:c9:37:08:12:f2:bd:5a:02:4c:e5:
d7:e1:e1:6e:f1:05:7c:3e:02:17:56:57:a6:b7:93:
e0:b9:7e:11:9d:a4:ae:48:fc:05:a2:48:90:f3:d9:
80:de:56:91:01:da:a4:1c:a6:f7:40:a4:b8:f3:f6:
e1:a9:ba:f9:c3:00:48:75:24:76:a4:e6:30:7f:b0:
64:61:ee:dc:e5:c5:12:9d:0d:78:49:fd:4b:94:d0:
a9:34:e5:05:d3:79:18:2a:fe:55:95:6f:18:7c:32:
4f:7f:d9:c1:bc:4b:98:ee:78:b5:5a:57:fa:28:63:
e3:1a:df:ff:98:70:09:7f:ba:08:b8:b6:93:65:62:
31:86:17:21:60:c2:c5:15:dc:79:e8:44:6c:01:fa:
94:c1:53:e8:e0:15:eb:3d:83:3a:d6:3c:ff:c2:fb:
bc:53:16:c0:f1:2b:46:3b:1b:53:57:96:4f:52:67:
eb:06:74:4d:97:ea:d0:ca:54:98:4a:4b:c7:9d:2f:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:94:CA:32:2F:C2:3C:C9:84:78:6F:C7:78:14:2B:50:43:FA:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B882CE0A57D811EC81C370CF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:05:df:6f:10:17:19:2b:a6:71:b6:a6:c1:b5:82:ec:27:89:
f0:f3:91:be:32:c5:4b:cc:a1:e4:e1:47:05:03:46:53:51:88:
67:bf:cc:c3:04:2e:4a:b7:b8:cb:db:25:89:01:62:f1:de:12:
a1:7b:b7:2e:9a:d2:c6:63:dc:93:1a:1e:61:ac:8a:ae:27:a4:
4a:92:5f:9f:3c:53:ac:ef:a3:d6:8e:6e:09:b3:3b:4a:de:f8:
18:72:33:79:c4:b8:81:1d:98:a6:b3:99:ec:46:e7:5b:e5:ac:
f0:11:6a:92:88:32:ba:30:cb:c1:64:22:ed:8f:e5:73:67:c6:
71:f6:04:53:11:62:ad:0a:a6:ea:64:26:15:fc:bc:b7:f2:0c:
96:f2:1a:4c:ba:40:1c:21:2b:cf:43:86:97:17:ea:32:9f:df:
f3:fe:26:68:e4:7c:8b:17:95:69:8e:2e:a9:f1:40:54:9d:43:
b5:56:a8:57:bc:e5:1c:1c:f3:82:6c:06:5c:fc:e2:e4:70:1d:
95:8c:8b:85:b1:ae:a0:f7:5e:af:02:ff:67:3f:ca:ce:33:6e:
54:84:68:ba:2b:37:b6:20:84:ea:bf:69:45:60:28:0c:ab:0d:
16:1c:5c:6b:3b:ce:e0:ed:2c:e8:10:98:8c:87:98:b4:5b:a6:
2e:88:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org