Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF61BF7A277F11ED973580B5F1222468.roa
File: BF61BF7A277F11ED973580B5F1222468.roa (raw, json)
Hash identifier: UXyneJd8DI6lX+yEuPQ1P1XmjyTP4HNK2y5hkdKI3w0=
Subject key identifier: EB:A4:58:4A:0C:F1:45:FC:27:95:06:DD:B1:04:3D:2B:FA:DB:D2:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 172F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF61BF7A277F11ED973580B5F1222468.roa
Signing time: Mon 29 Aug 2022 09:48:35 +0000
ROA not before: Tue 30 Aug 2022 09:48:30 +0000
ROA not after: Wed 07 Sep 2022 09:48:30 +0000
asID: 1239
IP address blocks: 156.237.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5935 (0x172f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 09:48:30 2022 GMT
Not After : Sep 7 09:48:30 2022 GMT
Subject: CN=630c8b72-3020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:f2:eb:ea:6d:b0:a7:2b:2c:7a:52:1b:2e:
e0:aa:f9:9c:e3:70:e3:00:3e:26:46:34:31:b9:30:
19:8b:10:85:bf:8f:d8:06:e0:5e:b2:7d:e5:56:42:
6d:05:96:0b:45:75:2d:f9:0b:06:0a:67:fb:6d:41:
51:27:a5:e5:07:a6:db:d2:c3:c3:8e:15:48:26:3c:
66:00:36:e1:8e:52:07:32:b6:1e:50:ef:02:a9:9a:
8c:95:f0:31:1f:05:d8:68:25:48:76:fe:6b:8b:eb:
e7:2d:22:03:f3:1f:9d:81:19:14:a3:1f:18:3b:05:
94:c3:88:ec:c9:c1:96:17:97:71:00:75:ac:d3:d0:
36:0f:39:32:39:89:2a:94:3c:c3:5c:47:3c:ab:d5:
cf:46:29:52:e9:0e:3e:04:6d:5f:17:57:33:9a:28:
a3:aa:d5:96:a2:f1:4e:09:d2:fa:2b:58:52:77:64:
ae:a1:5e:60:80:53:ea:7a:94:eb:43:c5:76:64:b1:
f5:27:13:f6:7d:7c:ec:10:fc:ba:b0:8c:3a:63:44:
a1:fe:bb:ad:8f:01:e6:35:e9:ab:53:e9:a9:a2:a3:
dc:3a:46:e0:ac:2b:0d:3d:83:3b:b5:d6:be:bb:e5:
a6:6c:d1:d3:a5:79:83:7d:6f:34:3a:13:6f:3e:e5:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:58:4A:0C:F1:45:FC:27:95:06:DD:B1:04:3D:2B:FA:DB:D2:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF61BF7A277F11ED973580B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.32.0/20
Signature Algorithm: sha256WithRSAEncryption
64:0b:9e:42:e0:5a:65:d6:d7:89:3c:33:1c:17:58:6a:08:25:
4a:11:e7:53:21:c5:fa:b5:ec:18:41:83:d4:cf:2f:c6:ec:68:
6a:80:2e:d9:12:1b:07:bf:86:f0:6d:43:44:00:57:92:70:2f:
bf:06:de:da:d9:40:cd:9a:94:2a:fa:4c:fb:79:ca:8c:43:3c:
d6:cc:25:77:ff:08:b9:76:81:83:b4:33:96:22:8b:02:49:52:
45:8f:e1:77:65:d6:bf:4d:27:3f:83:33:18:31:ac:2f:09:3b:
b9:e7:f0:bc:8d:92:bf:9a:56:be:f7:93:9e:69:cd:09:d4:34:
67:49:99:16:aa:99:ed:34:66:75:62:12:ee:81:00:71:fe:54:
cc:3d:2a:cd:1c:4d:8e:db:79:fc:94:ea:48:77:b4:5d:7e:81:
5f:e3:01:64:cf:9d:0c:23:d1:ea:e7:35:24:af:29:46:7e:b1:
d7:15:0b:98:34:19:af:14:9e:22:4c:cf:5b:d8:96:cc:d1:23:
a9:d8:c7:5c:3c:fb:41:d3:67:4e:32:f5:57:bb:1d:17:11:4b:
9f:84:b7:16:d1:89:52:e1:80:e7:02:9e:33:86:54:ea:5c:3d:
a7:f0:c0:57:af:8a:b9:73:7d:26:86:4a:9c:fd:90:6b:ab:da:
45:cf:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org