Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9E8B828125811ED8DEF8FF3F1222468.roa
File: B9E8B828125811ED8DEF8FF3F1222468.roa (raw, json)
Hash identifier: oZdCQZEVtvub7qLXwO+c/5yENvkMv3UJT1vGE7E+46c=
Subject key identifier: 3E:85:49:AF:EA:E4:3B:BC:C3:23:22:14:B6:2A:2D:89:40:A4:DA:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9E8B828125811ED8DEF8FF3F1222468.roa
Signing time: Tue 02 Aug 2022 11:46:20 +0000
ROA not before: Tue 02 Aug 2022 11:46:17 +0000
ROA not after: Wed 26 Oct 2022 11:46:17 +0000
asID: 133861
IP address blocks: 156.245.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5640 (0x1608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:46:17 2022 GMT
Not After : Oct 26 11:46:17 2022 GMT
Subject: CN=62e90e8c-e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:94:e2:43:a0:5c:1f:90:d2:75:f6:16:65:
40:32:1e:75:e2:93:8d:e5:91:ac:da:58:f2:da:6f:
d3:b0:cf:db:4f:04:47:c8:e3:3c:9f:72:96:c6:13:
b9:e5:0a:45:2b:6b:b1:5d:6d:e9:53:ce:a7:fe:eb:
fb:df:1a:9a:23:aa:d5:38:a3:5a:14:ad:8d:50:59:
8f:54:31:fd:8a:71:a4:1f:61:46:b7:9e:77:13:e0:
b8:53:c6:70:6d:d5:39:3b:7c:7f:bc:ba:46:2d:5e:
9c:2b:18:ac:34:b7:c4:15:fc:4d:9f:e7:85:bd:60:
b9:d9:d0:b3:61:b9:be:bb:02:63:5a:b2:15:95:c3:
dc:3d:f8:31:e6:18:7e:1e:25:1c:31:46:d7:14:4f:
07:05:34:65:bb:a0:ff:6c:17:94:fe:68:8b:b1:f8:
2f:3d:5c:65:26:bc:66:8d:46:9e:1e:d8:38:7d:40:
8d:5f:33:37:df:e5:bf:11:02:eb:b9:2d:35:de:3a:
30:e4:61:31:4c:9e:db:13:41:a7:30:6e:9d:7e:fd:
48:83:0c:85:7c:11:35:bf:60:43:a3:fc:3c:01:27:
c4:47:d8:a2:2c:1a:b6:3c:b6:b1:4d:37:4c:f4:7d:
66:fc:cf:f3:8b:c0:c6:6f:d2:d5:e0:7f:2f:e4:d3:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:49:AF:EA:E4:3B:BC:C3:23:22:14:B6:2A:2D:89:40:A4:DA:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9E8B828125811ED8DEF8FF3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:0f:4d:d6:43:12:68:43:da:77:08:ee:5d:b2:91:66:95:
1a:85:4d:f6:94:ad:f6:e4:b7:59:5f:5b:9a:29:24:0f:29:c1:
03:47:a8:f1:3c:cf:13:e5:88:28:74:af:20:17:86:02:70:09:
28:0c:f7:5d:44:8e:dd:5a:53:d6:59:3f:f1:45:32:b9:c9:75:
71:af:e0:ff:62:bc:ac:67:74:48:4d:e6:88:f3:d8:cf:6f:ce:
e1:2a:b2:36:2e:75:d6:b8:b1:a7:78:ec:79:64:1c:dd:cd:36:
31:4e:3e:18:92:da:2d:d9:4a:94:ca:46:85:59:cd:3a:f0:66:
e7:71:cb:ba:91:cb:9f:2f:30:59:c7:6a:88:7e:68:79:e7:2d:
04:6a:70:2d:77:d8:27:e5:ee:6d:4d:61:3c:82:0a:f7:e2:ad:
bd:6e:f0:12:09:73:70:bd:13:92:f6:28:5c:f1:76:b4:ef:13:
4c:f4:18:14:8e:0b:7e:9e:f8:26:e3:21:05:0c:75:8e:46:78:
fe:5c:ba:b8:f1:53:24:55:bb:cc:74:a0:70:a2:c9:5e:c0:62:
0d:c8:9e:24:01:d0:d3:3f:8f:4e:0f:3a:5a:92:62:94:e4:90:
d5:79:23:e3:9c:b7:a4:2d:94:85:ca:e7:29:e0:e7:0d:ef:b1:
78:0f:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org