Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC6F93EAFD811ECB85DCCD65A40D577.roa
File: BCC6F93EAFD811ECB85DCCD65A40D577.roa (raw, json)
Hash identifier: 9IyoKzFjs7iWhpccx0oJ1aG1hVeHL8NmR3vufQllj68=
Subject key identifier: 11:62:75:EC:20:98:D8:3F:AC:3B:E2:DA:D6:33:F1:80:17:9D:B3:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC6F93EAFD811ECB85DCCD65A40D577.roa
Signing time: Wed 30 Mar 2022 03:23:16 +0000
ROA not before: Wed 30 Mar 2022 03:23:12 +0000
ROA not after: Tue 30 Aug 2022 03:23:12 +0000
asID: 35916
IP address blocks: 156.232.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4811 (0x12cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 30 03:23:12 2022 GMT
Not After : Aug 30 03:23:12 2022 GMT
Subject: CN=6243cd24-b2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:be:77:02:29:78:4f:64:e5:69:bf:32:eb:
b7:db:f7:db:6d:3c:46:63:5e:31:6e:d1:a7:85:89:
b0:86:6a:db:8a:29:93:c8:b1:e2:0b:71:35:71:8d:
c3:85:6e:fa:1d:8b:91:fa:dd:7a:f0:a8:8d:58:0f:
b1:2c:92:93:e6:0c:f1:5b:30:3c:eb:90:62:1e:b3:
73:08:6b:be:24:5a:a2:c6:11:3b:03:82:ef:78:fa:
a8:f9:62:31:e5:06:7b:ab:60:4e:0f:f0:ea:ef:93:
fb:77:ba:3c:cb:7d:9e:05:0d:6f:36:e9:20:6e:1f:
67:0f:56:b2:8e:88:df:7f:ab:83:fb:6a:a2:03:0f:
62:9f:41:cb:cc:ae:17:84:bf:f3:66:5b:80:f3:94:
c4:97:97:2b:b9:60:e5:e0:5b:f9:03:66:9a:11:e7:
a8:70:87:c7:99:af:cb:c2:84:d6:c5:f0:83:d7:0f:
a1:bd:bc:58:80:24:f9:4f:f0:93:06:7c:8e:1f:b1:
7f:b0:8b:4f:f4:ee:f4:be:3d:0f:5f:3d:d6:b4:83:
49:d3:18:70:98:ce:a2:c5:e6:ca:ed:92:72:f6:9a:
f3:5e:00:c8:2f:18:ba:18:99:55:07:3d:bb:62:01:
da:87:48:f0:5c:55:56:69:ed:84:f7:ad:97:04:83:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:75:EC:20:98:D8:3F:AC:3B:E2:DA:D6:33:F1:80:17:9D:B3:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC6F93EAFD811ECB85DCCD65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
70:4f:12:40:94:f2:32:b2:ec:6f:55:9b:df:ab:0c:39:3f:5b:
7f:51:1a:dd:e6:10:28:00:11:df:29:59:4f:fe:75:11:da:58:
f5:c5:a3:8c:ca:42:6b:f7:a7:44:3b:05:ef:a6:10:be:5f:db:
66:91:16:04:69:5e:af:72:fd:15:b8:dd:db:f4:df:70:aa:62:
f5:46:2f:59:47:49:95:ef:c6:a0:51:ce:39:91:22:dd:8e:02:
bb:fb:b5:ce:04:d7:23:0a:22:e4:19:24:5c:08:4d:49:7d:e6:
69:00:b0:5d:63:e0:49:ab:b0:75:3d:e9:8c:22:69:b6:d1:47:
c6:f9:94:80:21:22:b9:96:73:c9:ae:81:9b:b4:6b:85:10:94:
b4:e0:37:aa:ab:98:4a:1b:d4:a3:96:6f:89:77:61:e9:b6:33:
c4:5b:fa:54:0b:e8:11:c1:5f:d4:f0:24:c2:1a:8f:8c:5e:1b:
5d:14:1d:72:e0:4a:f8:c8:5d:af:66:f9:fd:47:9b:d9:f5:64:
35:b9:a9:ab:01:c7:13:0a:ec:cd:d2:fb:37:6f:83:98:96:77:
ed:60:c1:76:34:6e:fa:37:2f:3f:a5:b1:fc:ea:00:d3:c8:a9:
69:82:6e:c3:1f:47:b6:b2:ab:24:59:7f:5d:1c:45:28:b0:68:
6e:88:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org