Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C37A3EACEAF411EBB80E604CD8A014CE.roa
File: C37A3EACEAF411EBB80E604CD8A014CE.roa (raw, json)
Hash identifier: EFN0dXAnZNOaNyOCh4U5jNuVDphSDHJKDPL1WyCr4oI=
Subject key identifier: 50:CE:FE:E8:8B:91:00:7C:67:5F:E5:CA:51:DF:12:3B:32:7B:88:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C37A3EACEAF411EBB80E604CD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:57:45 +0000
ROA not before: Thu 22 Jul 2021 13:57:40 +0000
ROA not after: Thu 22 Sep 2022 13:57:40 +0000
asID: 1239
IP address blocks: 156.236.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:57:40 2021 GMT
Not After : Sep 22 13:57:40 2022 GMT
Subject: CN=60f97959-2412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:b9:4f:93:c5:a5:ec:90:bb:da:b7:e5:2f:
7e:b2:8a:26:79:09:6a:4a:0d:ed:d2:01:45:9f:2f:
a6:c4:e7:b2:dd:16:5a:cb:71:a8:92:4b:28:48:88:
67:e4:b0:5c:ce:be:26:9c:d8:90:74:2d:a5:2e:30:
1e:c3:49:74:f7:69:ac:9f:a9:7b:84:62:c8:45:ca:
84:4c:88:ef:1f:91:f6:d7:18:26:47:9f:69:a7:71:
90:a0:64:80:cd:1c:27:e4:ba:94:eb:74:d8:5b:e3:
e9:4c:f3:1f:ca:04:86:02:eb:6d:89:11:ac:e8:d4:
49:4e:a0:4b:9c:d4:93:85:41:de:87:44:36:36:21:
71:86:9d:9e:0b:e8:16:40:a6:d7:b7:89:60:f2:20:
c6:6e:b1:7f:e8:97:5b:7a:ad:90:82:9d:59:14:a2:
58:12:14:e1:d4:d2:2d:e6:d5:46:83:cc:53:a4:64:
ec:49:28:f7:27:4d:0e:6d:19:23:4c:f8:d0:1f:f6:
34:a2:9f:fa:74:1f:d3:29:25:95:5e:43:21:c5:be:
34:af:3f:e6:a8:73:3e:c8:27:48:b8:91:2c:7a:48:
de:3e:9b:00:c7:d8:c2:b7:f7:77:1f:6b:a9:a0:1a:
5a:b2:f6:fc:ca:58:65:79:57:5a:45:17:23:97:90:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:FE:E8:8B:91:00:7C:67:5F:E5:CA:51:DF:12:3B:32:7B:88:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C37A3EACEAF411EBB80E604CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.205.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f5:18:55:23:53:b2:cf:c0:4a:6a:3e:2b:33:0a:d9:6c:73:
cd:3e:ad:d9:dd:53:97:d6:bb:e0:66:f9:79:e8:f5:49:33:25:
a7:fa:73:68:45:fe:4b:cb:fe:93:c4:8b:4d:a4:38:cf:0f:10:
5e:ea:c5:79:62:b4:ee:dc:f5:d9:6f:61:60:06:d0:fb:21:31:
7a:37:08:7c:98:7b:63:eb:f4:ec:b0:4b:3d:e7:2a:5f:cd:33:
bd:db:14:3a:90:69:3c:ad:40:e4:68:33:61:c4:92:2a:95:aa:
c5:4e:a0:0a:cf:f5:ec:4d:30:71:7e:8f:52:8f:ad:77:65:9d:
8a:7d:9e:d5:79:0d:e9:6d:d4:68:ac:e3:b8:77:a3:e9:61:70:
fd:3b:26:e6:c3:c3:62:91:a1:f4:ca:30:ec:6d:e4:15:ef:78:
d8:f6:54:1c:69:a4:b4:f4:b8:27:59:06:11:94:75:4a:2c:8e:
67:3b:1e:83:96:97:a8:05:b1:87:bf:ee:8b:9c:71:a9:ff:a3:
24:0f:01:f3:c9:c8:62:0d:d7:55:be:42:b4:ae:b1:75:4b:b1:
ad:22:dc:68:8c:f5:a4:69:a1:61:ab:3a:9e:6f:27:af:39:8f:
0d:32:d6:b7:f4:cd:d1:19:2c:be:62:50:40:bc:e4:44:11:73:
07:12:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org