Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E349DA34DB11ED85ACD4BCF1222468.roa
File: C1E349DA34DB11ED85ACD4BCF1222468.roa (raw, json)
Hash identifier: k3ruXLZvWa1axoIrPWBtFTlRypbTn/I5ofRlLAhvalQ=
Subject key identifier: 3A:52:F4:6E:0A:B1:79:0E:F7:5C:66:D5:82:0F:6D:E2:DF:79:B9:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E349DA34DB11ED85ACD4BCF1222468.roa
Signing time: Thu 15 Sep 2022 09:49:57 +0000
ROA not before: Thu 15 Sep 2022 09:49:54 +0000
ROA not after: Wed 31 May 2023 09:49:54 +0000
asID: 1239
IP address blocks: 156.231.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6109 (0x17dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:49:54 2022 GMT
Not After : May 31 09:49:54 2023 GMT
Subject: CN=6322f545-fb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:d2:73:e3:87:2e:ea:ed:ec:87:d2:8d:b9:
99:b6:8d:b7:ba:b8:c9:ca:d9:3e:62:de:e0:e8:48:
e4:d0:d2:c1:d5:f1:a1:fa:d8:ea:33:68:d7:b2:48:
c3:73:3c:ed:0a:a7:8b:0b:8e:ab:77:0c:b6:fe:6b:
0e:4d:47:50:7e:c2:d9:de:0f:ab:fc:29:9e:c3:a4:
6f:3e:57:65:8d:ae:46:5c:6a:b4:15:8c:33:0a:28:
20:d7:36:a7:7e:54:6e:16:40:c9:62:39:88:93:93:
37:1f:b8:9b:0b:61:bf:ad:15:33:b6:50:b5:2d:5e:
9b:7f:93:bc:e5:9a:d1:b7:80:42:36:c5:09:8f:3b:
8a:61:18:7c:7d:d3:c7:9b:15:95:a8:31:4b:f5:00:
ae:1a:72:55:a1:07:35:be:76:e8:f3:58:ef:e7:31:
87:7b:ca:21:1b:24:d5:c0:1e:90:75:63:fd:d8:e2:
3e:7c:d0:e2:de:d2:3e:f6:bd:6d:32:e4:8b:0f:84:
12:41:ee:91:51:c8:3e:f4:06:e9:78:ea:57:be:0e:
20:ba:08:d3:4e:44:f7:60:bb:e1:ba:5a:34:79:37:
4e:22:b2:ae:d3:5e:b6:a9:47:1d:ff:dd:09:a5:f8:
9d:b7:bc:5f:ec:04:54:85:4c:c0:84:2b:4a:99:ec:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:F4:6E:0A:B1:79:0E:F7:5C:66:D5:82:0F:6D:E2:DF:79:B9:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E349DA34DB11ED85ACD4BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:6e:a1:ed:f5:48:d0:92:8d:f4:73:87:ee:36:f2:0c:2a:be:
e4:b6:9b:50:b0:ec:81:01:ca:98:f4:2e:e0:5a:42:13:63:b3:
6f:2f:8c:57:1c:eb:71:4c:2b:dc:16:fb:92:1b:3a:15:55:bc:
08:66:0a:46:ab:3e:ff:88:e8:56:40:d7:2b:a8:4d:a1:83:ab:
8a:9e:44:02:f2:ea:71:78:b8:99:46:95:79:ad:b7:0a:c2:f6:
17:00:44:8c:46:9c:c5:37:ce:9a:cb:74:8a:56:ad:61:97:15:
57:74:a2:12:c1:32:3b:7b:f1:90:c3:11:db:26:2a:3e:90:2e:
11:58:28:15:fa:43:01:a5:cd:57:82:2b:3e:67:07:5b:45:93:
6f:f9:85:b5:11:2c:a8:29:d6:4e:bb:00:b0:df:99:9f:6e:da:
c1:02:71:ee:31:cb:c2:d1:f4:00:9e:4b:1f:0a:2c:4c:6a:c0:
a9:e0:34:f7:66:52:31:e5:79:3e:d6:4c:f5:0f:b1:bc:20:67:
7d:7c:58:b0:e3:71:cd:5e:13:a7:76:e7:45:ba:12:dd:aa:29:
6e:90:3b:fa:fa:91:31:a0:19:a7:38:bc:6e:26:37:89:f0:9f:
e9:6e:ad:59:fe:da:c0:ab:3e:07:21:06:88:9d:46:4f:7d:45:
cc:13:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org