Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79E0AD0DF2E11EBBFFF9855F8AEA228.roa
File: C79E0AD0DF2E11EBBFFF9855F8AEA228.roa (raw, json)
Hash identifier: jDNluHzOiZ1yXimmskUE7zkKWUuV0K5FZk2YPw8sJXU=
Subject key identifier: A7:9B:D0:70:32:31:32:3F:A4:86:67:77:67:12:B8:36:F5:D2:06:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79E0AD0DF2E11EBBFFF9855F8AEA228.roa
Signing time: Wed 07 Jul 2021 14:22:38 +0000
ROA not before: Wed 07 Jul 2021 14:22:33 +0000
ROA not after: Sun 07 Aug 2022 14:22:33 +0000
asID: 22773
IP address blocks: 156.238.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:22:33 2021 GMT
Not After : Aug 7 14:22:33 2022 GMT
Subject: CN=60e5b8ad-7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:e3:2a:72:75:0f:5e:9e:a8:26:b2:44:40:
2d:f8:56:07:06:02:ae:e2:61:85:4b:74:c9:79:0e:
68:5b:b5:62:35:d5:f6:fd:f2:eb:3c:b3:8d:c4:92:
2c:69:f0:1d:2d:0a:57:59:92:5d:78:55:96:db:94:
90:04:14:ae:6d:8d:e5:f1:42:a3:c7:fe:c1:3b:56:
da:04:1a:5e:2d:f9:1a:54:51:d8:80:f3:88:85:ad:
c3:02:ac:85:d8:42:a0:7e:b5:a4:16:c7:b7:3d:d9:
11:b7:d3:66:aa:80:fd:b8:b8:1a:f2:cd:5d:ec:c4:
26:34:a4:20:73:01:73:5a:76:d6:fb:08:dd:24:cc:
4e:eb:43:ce:f6:15:b2:b8:58:63:0e:eb:70:48:ee:
62:e5:47:e6:d1:98:d8:43:fd:0e:ca:3d:20:a8:41:
fe:d0:98:91:17:94:f8:54:3e:00:20:f9:25:e6:e0:
fb:87:23:57:c9:60:5f:b7:f0:f4:23:45:1d:f7:47:
c9:52:98:eb:10:8c:09:cc:59:17:85:92:cb:5b:3a:
85:fc:6b:48:2b:46:dd:43:04:08:d1:36:3a:c1:94:
de:e0:86:5d:7f:0e:75:93:22:61:d6:1d:b8:87:6a:
77:69:18:4b:f7:89:c8:aa:91:01:a1:d7:67:07:8b:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:D0:70:32:31:32:3F:A4:86:67:77:67:12:B8:36:F5:D2:06:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C79E0AD0DF2E11EBBFFF9855F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:05:9e:67:7a:4d:6e:3c:22:02:52:1d:95:74:65:cc:e7:59:
4e:b0:6c:01:33:f8:f6:1f:e4:d0:8d:5d:ba:f3:58:d4:0f:f1:
62:fc:7b:c9:4d:d1:14:68:34:cd:5b:44:13:6f:74:49:a0:38:
b8:fc:8a:dd:4f:d4:ca:79:d9:53:8c:f7:c2:dd:a1:a9:c3:7e:
5f:14:72:3b:6c:0c:25:f7:e1:77:01:0c:16:ab:b1:06:50:73:
9e:79:81:5d:41:24:e7:d7:9f:a9:0c:35:51:d4:5d:fe:ec:98:
6c:b7:f6:ac:d5:85:bb:fd:cd:7b:e7:d1:4b:a1:d7:96:71:e6:
e5:a8:ba:86:3a:7b:7c:83:1d:ea:45:24:e5:76:65:7b:c2:d4:
cc:11:75:b1:88:a8:6a:af:57:c7:fa:98:d0:05:49:46:26:e3:
4e:11:b6:09:95:90:e2:c3:61:e4:cd:e2:34:2c:26:63:0b:15:
12:ae:d3:c3:73:68:3f:41:f0:62:75:ea:1a:f9:e5:7c:3f:08:
97:15:c1:2c:67:68:1f:5a:69:81:78:4f:0d:b9:d2:47:13:d3:
50:9b:2b:5d:b0:c9:7a:42:80:cd:e6:34:9a:a3:bd:9d:d4:3e:
f7:44:20:41:bd:61:c4:2f:e2:29:54:19:0a:36:fa:47:e7:01:
f6:25:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org