Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C17BECC7A311EC815CFEF5F1222468.roa
File: C2C17BECC7A311EC815CFEF5F1222468.roa (raw, json)
Hash identifier: g21xjF1AFnKLAEc5Y//d/JkCFrv+UYm2aQ07mvEkbvM=
Subject key identifier: 63:78:74:A8:7D:16:B1:2A:6D:D0:E3:9E:86:44:0D:01:40:46:2C:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C17BECC7A311EC815CFEF5F1222468.roa
Signing time: Fri 29 Apr 2022 10:04:31 +0000
ROA not before: Fri 29 Apr 2022 10:04:26 +0000
ROA not after: Fri 30 Dec 2022 10:04:26 +0000
asID: 328608
IP address blocks: 156.240.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5037 (0x13ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 10:04:26 2022 GMT
Not After : Dec 30 10:04:26 2022 GMT
Subject: CN=626bb82e-2efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:e7:4a:87:5d:25:2f:82:19:af:9b:0d:17:
47:c2:da:1c:ec:48:f6:f3:fc:86:3d:c6:c4:57:72:
60:c5:ca:e6:95:eb:9e:89:c2:f7:6a:e2:85:14:e3:
1f:0d:c4:b1:72:03:a8:7d:61:f5:bd:95:99:e0:f5:
0d:7c:ee:25:2b:c2:8e:7c:a7:0c:d2:5e:71:63:f6:
85:a3:5d:44:37:cd:2f:c7:91:ec:35:78:0a:10:e7:
a2:a0:50:b6:36:cb:b6:fa:90:9e:3b:16:b2:fd:83:
62:a6:42:45:e8:d6:f0:4d:3f:f2:b9:50:65:75:f0:
a4:b0:4d:f6:b7:53:38:7a:07:53:30:cb:26:68:ff:
04:f7:72:87:71:7e:40:b6:c9:8f:e8:00:22:75:d9:
2f:bc:b0:93:a8:53:45:e1:67:a6:fa:3c:49:4d:e2:
e8:70:ad:bf:f4:ad:66:3b:ed:3c:77:61:f6:ed:bb:
22:50:6b:1f:64:f7:49:35:a3:e5:33:1a:9d:d6:5a:
b6:fc:39:ed:0e:40:c0:7c:ff:04:28:6c:7d:4f:99:
67:d8:76:7b:04:6d:81:18:6b:0a:85:db:9a:16:fd:
ba:00:8f:d7:9c:26:71:5b:41:6b:75:2d:15:41:1e:
fc:59:93:7e:4a:b7:70:84:11:a1:2b:e3:aa:a6:c3:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:74:A8:7D:16:B1:2A:6D:D0:E3:9E:86:44:0D:01:40:46:2C:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C17BECC7A311EC815CFEF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d3:55:6e:91:50:16:85:81:d4:28:b8:26:19:81:16:2e:e4:
3a:b3:ac:ec:16:26:e0:31:e7:b0:05:db:90:66:68:5a:48:f8:
d5:48:87:eb:f2:69:f0:55:98:e7:f2:ec:06:5c:e1:e0:a4:fe:
be:88:1b:a6:63:9e:1d:1f:68:11:9b:65:5f:22:86:7c:92:a7:
ee:a3:8e:eb:c0:76:f9:3f:a2:cc:de:53:ef:ee:46:ca:40:39:
83:c5:37:b2:dd:a4:62:7b:2c:7f:69:23:76:07:7a:86:79:70:
a9:c7:37:38:b5:bc:e9:8d:ab:77:cb:ab:97:af:7b:4c:1e:d3:
00:1e:45:a7:ab:8e:76:cf:f3:db:36:6d:f3:06:9b:a4:c6:6f:
30:98:7b:c0:23:31:97:97:93:7b:62:74:9e:f4:3a:8f:c2:66:
e0:d1:88:65:d4:3f:ac:ec:27:dd:a8:6e:26:27:71:c8:7a:9f:
54:61:20:82:b5:72:14:d8:e3:05:ff:e3:14:41:b1:27:e3:a2:
46:2a:7e:22:e6:52:d9:25:57:ab:bc:c5:75:a7:00:25:9d:40:
15:cd:a0:ce:df:d5:71:7c:a7:2b:11:62:27:47:f1:b8:f6:26:
06:aa:b1:63:76:9b:2d:7f:f8:cb:98:ee:1e:48:c0:62:57:03:
b0:a3:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org