Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C91D290EA44011EC8AD18EC45A40D577.roa
File: C91D290EA44011EC8AD18EC45A40D577.roa (raw, json)
Hash identifier: QuO48XuhHHvNpeLfMpZOkeLL7JSvDaK6R/2z+pdy1BE=
Subject key identifier: CC:AE:04:C2:61:D8:F0:CD:EF:D0:95:AA:E4:62:70:55:91:0D:91:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1275
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C91D290EA44011EC8AD18EC45A40D577.roa
Signing time: Tue 15 Mar 2022 09:17:50 +0000
ROA not before: Tue 15 Mar 2022 09:17:46 +0000
ROA not after: Sat 31 Dec 2022 09:17:46 +0000
asID: 133201
IP address blocks: 156.255.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4725 (0x1275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:17:46 2022 GMT
Not After : Dec 31 09:17:46 2022 GMT
Subject: CN=623059be-b55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:fd:a6:c9:d9:81:b0:05:cd:2e:34:bf:5e:
ff:1b:f8:10:37:04:a7:a3:20:fb:72:d9:b8:ff:a1:
91:71:69:70:c4:a8:47:c8:c7:54:ce:06:4a:6d:fd:
d8:41:33:60:6f:79:9c:20:8c:06:6f:cb:06:c5:77:
9d:b6:67:45:13:33:38:4f:20:44:1d:97:e7:ea:2f:
7f:a5:10:1c:2a:07:30:3e:90:2d:19:18:51:23:cc:
c0:b1:ec:af:5a:93:75:39:4d:3d:32:64:79:32:8a:
86:73:2d:da:e3:3e:44:6a:3f:31:fd:a2:0f:d0:d5:
f7:cc:4d:61:4d:ae:7c:16:df:37:0a:1e:50:8f:f5:
55:9a:d3:20:b8:bd:6a:ad:5f:1e:c5:88:85:c0:10:
36:8a:0d:b6:46:cf:ba:f2:d2:ad:0a:7a:44:66:9d:
76:14:41:4b:a1:61:f2:80:4d:5f:24:e2:2c:0c:88:
38:c6:9b:e5:87:b5:c9:f4:af:fc:35:bd:c3:82:a9:
72:fb:8a:60:1c:6b:dc:3a:f2:4c:bc:05:28:a0:92:
5b:66:89:77:d0:1f:0c:00:91:83:e8:4a:50:e1:03:
9f:65:dc:64:06:df:3c:e7:49:c9:3c:49:70:b9:e1:
31:e5:91:69:00:ce:8e:b9:1f:fb:87:4d:aa:a2:b8:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:04:C2:61:D8:F0:CD:EF:D0:95:AA:E4:62:70:55:91:0D:91:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C91D290EA44011EC8AD18EC45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:58:40:d7:6e:e2:91:14:ce:33:b2:dc:a8:43:c3:c4:63:c3:
34:50:b1:18:a0:c2:6f:4c:15:83:9d:99:68:2e:30:b1:0a:76:
72:d5:28:04:5c:e2:07:f7:71:79:d8:fd:a4:b0:18:2f:0b:20:
07:e2:0b:e5:54:3c:8d:46:f3:af:bb:9c:2f:01:b9:42:dc:b3:
b2:c6:d8:42:3a:3f:8a:74:ca:ed:20:b7:a0:d3:9b:64:a2:c9:
21:40:71:17:72:3d:67:b8:57:89:49:91:05:94:2c:39:01:d5:
25:8a:75:13:be:a0:8e:8f:27:9a:96:d1:ee:b4:00:2f:02:65:
af:05:74:d5:83:d5:59:ff:6c:b7:47:43:ec:3e:2f:d4:37:6a:
25:a1:bc:88:ff:fc:08:bb:f4:ec:2b:f5:11:88:44:98:c1:8a:
e1:a4:cd:c2:f1:91:b8:ae:c5:be:42:b7:69:82:42:4c:bb:5b:
c8:35:d4:ba:50:99:cf:60:0d:0d:aa:3c:d3:4c:ef:40:31:ac:
af:e1:20:39:42:37:69:eb:00:10:45:a7:b6:78:03:06:cf:28:
27:5c:09:64:9f:4d:74:f7:2b:85:c9:c9:21:7d:f4:12:85:ea:
a7:95:c9:eb:0c:40:41:ce:ff:ad:fe:0d:f7:34:c7:a6:e4:35:
40:9d:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org