Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD34481EEAF211EB92694D49D8A014CE.roa
File: BD34481EEAF211EB92694D49D8A014CE.roa (raw, json)
Hash identifier: iZ5+wXWkwAYGYbci84mkmP1PaT7srMYZnYjmQ0QweSI=
Subject key identifier: 64:91:84:AC:FE:29:2B:7A:A3:E3:B8:21:B7:8C:50:B5:08:D7:41:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD34481EEAF211EB92694D49D8A014CE.roa
Signing time: Thu 22 Jul 2021 13:43:16 +0000
ROA not before: Thu 22 Jul 2021 13:43:09 +0000
ROA not after: Thu 22 Sep 2022 13:43:09 +0000
asID: 1239
IP address blocks: 156.236.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:43:09 2021 GMT
Not After : Sep 22 13:43:09 2022 GMT
Subject: CN=60f975f3-beae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:90:a4:6a:84:87:db:76:ad:70:e6:9a:c0:
84:81:00:5b:27:86:6f:0d:e0:57:9f:4d:fa:20:c4:
47:2c:9b:dc:40:85:21:c0:01:bf:4b:cf:a6:15:d0:
bc:e9:85:b3:a4:de:5b:3d:3f:b9:36:bc:cb:31:b4:
15:a1:4f:e4:5f:a7:19:a9:8d:ea:01:65:fd:02:13:
65:16:82:aa:5a:f6:26:65:b5:59:cf:41:e0:e1:0f:
d6:b1:93:d6:c8:d0:3b:4b:cd:ea:04:88:d3:95:f7:
ec:73:07:7b:81:dc:dd:eb:3c:8b:f3:47:a2:ae:94:
a3:f5:d8:97:5b:b7:7d:9a:5b:12:f6:2c:d4:3d:cb:
3d:65:39:e7:a5:98:dc:94:02:fd:3c:cc:8d:71:6a:
f2:49:33:ea:4b:8f:08:26:f9:42:1c:a5:0e:59:5c:
82:91:99:4c:2a:5a:7e:0a:e9:16:ad:bd:33:20:06:
93:56:b9:97:6b:d3:91:a5:2d:2c:67:c9:fd:5d:bd:
b9:2e:1f:43:19:34:aa:b1:f5:8e:73:a8:a6:b3:d7:
eb:4c:47:78:47:cc:33:5e:f3:a1:1a:48:11:50:af:
1b:e6:0e:f6:eb:b6:a5:f8:b3:58:5a:9a:06:e9:aa:
23:3c:4c:8e:5f:a7:da:b9:d6:35:70:33:35:60:d5:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:84:AC:FE:29:2B:7A:A3:E3:B8:21:B7:8C:50:B5:08:D7:41:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD34481EEAF211EB92694D49D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.170.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1d:51:c0:59:83:54:ea:fe:08:27:73:7f:fc:07:b2:4e:69:
6c:f5:3c:34:a3:03:16:7b:f1:7c:ec:13:a0:75:dd:f3:07:38:
86:79:4d:75:f8:db:a6:0b:27:c2:9e:91:06:b2:ca:5e:96:12:
f0:6c:6c:20:30:7b:57:70:ac:1c:df:6d:7b:d7:9b:ff:f7:a9:
3f:82:b8:57:3d:e1:a3:99:28:e9:59:82:9e:65:a1:62:5e:a2:
13:df:f6:30:c1:0c:48:6a:4f:17:35:ac:7d:19:73:58:62:3f:
bc:4d:fa:9d:40:cf:2d:0b:0e:6d:b9:db:4c:9b:1b:26:4a:bb:
9e:b2:3d:d2:66:96:c0:ba:71:5e:a5:2a:95:00:e2:f8:28:7e:
44:ae:17:ec:e8:41:c5:d9:13:57:16:e9:4a:79:62:01:43:aa:
dd:22:43:2d:be:0f:c5:1d:b6:9c:28:59:5c:c2:37:9d:b1:30:
bb:e5:06:5b:df:43:b4:14:57:d3:86:7f:7f:57:59:a1:d9:5f:
33:cf:6d:38:e2:76:94:f9:5f:de:d6:b0:41:85:a5:4a:3d:69:
99:ce:83:62:a5:1c:1a:b2:d3:9f:0f:b0:5e:e2:9c:39:bf:3a:
f9:57:57:d6:a3:cb:61:2d:41:7d:cc:14:af:80:fb:ca:73:e2:
f9:31:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org