Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB11C9865EE111ECB5634BA65A40D577.roa
File: BB11C9865EE111ECB5634BA65A40D577.roa (raw, json)
Hash identifier: pBbU/5//Si0pCleCanIFYNZGAXM+L1Vti6zs/q6HwJk=
Subject key identifier: DA:28:2B:DB:09:A5:73:68:A9:0D:85:BA:61:92:D1:1F:A6:1F:3F:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB11C9865EE111ECB5634BA65A40D577.roa
Signing time: Fri 17 Dec 2021 02:33:34 +0000
ROA not before: Fri 17 Dec 2021 02:33:31 +0000
ROA not after: Fri 30 Dec 2022 02:33:31 +0000
asID: 42286
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4342 (0x10f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 17 02:33:31 2021 GMT
Not After : Dec 30 02:33:31 2022 GMT
Subject: CN=61bbf6fe-7bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:66:1e:61:a0:7f:ec:97:95:4d:f7:44:0b:
d8:1f:72:30:45:be:a3:27:ea:3f:58:56:d6:25:34:
92:a4:b4:43:7a:f6:ac:77:3b:6e:77:70:7c:8c:67:
c7:80:e4:83:9f:35:7d:17:d0:b6:b5:21:27:1a:f7:
44:71:fd:bf:a1:3a:15:6e:e7:16:d1:34:68:31:d4:
82:33:dd:26:46:44:8c:eb:a0:1d:53:f9:d6:9a:87:
e4:81:f5:99:e5:32:5f:a7:28:5a:03:e7:e4:cd:37:
df:81:1e:c8:be:fc:2e:f3:d5:6e:01:f8:ff:8e:17:
7f:40:eb:f8:33:af:07:01:70:ed:23:cf:e9:5d:56:
67:ad:e4:4e:92:42:be:bb:29:9c:5d:4a:be:64:c7:
e6:9e:43:e6:72:13:b1:63:ae:74:f1:65:5a:4e:4c:
09:0e:98:57:d1:4a:74:97:87:ca:20:27:80:89:0d:
71:da:67:d9:d5:0d:26:21:be:24:6f:c2:e6:90:02:
f1:5f:ee:bf:0b:92:7e:5e:50:9e:73:41:1a:62:93:
88:06:80:7d:43:93:b1:ef:62:e6:9a:8e:10:f0:09:
fc:7b:40:2d:4e:c6:34:12:10:3b:ea:22:d4:ae:7e:
97:2f:a7:35:4e:2c:71:f8:75:17:63:e5:cc:90:80:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:2B:DB:09:A5:73:68:A9:0D:85:BA:61:92:D1:1F:A6:1F:3F:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB11C9865EE111ECB5634BA65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
97:83:87:98:a3:cb:d6:41:ab:4d:e7:07:b4:b1:97:3e:11:dc:
95:59:f4:9e:80:c6:72:b1:36:ac:77:a9:c3:4a:69:37:28:27:
ea:ab:6c:7e:4b:1a:74:d8:60:6d:e8:69:49:f6:70:4f:49:f0:
a1:ff:5e:d6:a6:60:5e:9c:de:8f:bc:f9:27:c3:dd:84:38:4e:
68:69:98:f9:8c:a5:89:16:e2:8e:49:ca:6f:79:3e:90:4a:7c:
aa:b0:34:41:c8:ef:58:04:78:93:c5:b4:6a:c6:16:71:d9:03:
03:a1:9e:ce:ef:e5:31:8c:39:cd:e5:08:ca:75:57:99:fc:74:
93:7e:5f:66:c5:22:e6:c3:51:c8:ae:56:fe:9f:bd:3a:d4:58:
22:3f:c8:80:97:e6:37:b0:e4:a1:02:8b:8e:c0:3f:de:17:84:
53:1d:30:17:b0:3f:82:87:24:b1:d0:d9:b4:02:a3:51:08:a0:
b0:7b:dc:ec:4a:b1:20:3d:c4:c8:bb:d9:66:15:46:0a:04:1b:
4f:31:a5:2f:39:95:66:8e:0c:9e:ec:2a:54:4d:dc:a6:8b:cb:
07:b5:64:8f:16:ae:f9:1b:80:64:33:b7:d6:97:2b:80:65:2e:
5e:8e:65:5b:be:1e:87:00:11:df:bc:63:d4:ce:fb:a5:45:e9:
73:5f:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org