Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C965A8FE65FE11EBA63FA40FF8AEA228.roa
File: C965A8FE65FE11EBA63FA40FF8AEA228.roa (raw, json)
Hash identifier: wkBEedBhewg/kBN9zzTExqy0EQj/X84f7AI5IRqhpzI=
Subject key identifier: 4F:23:F5:06:19:90:97:A1:BF:DF:28:69:08:2D:C9:61:CE:37:77:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C965A8FE65FE11EBA63FA40FF8AEA228.roa
Signing time: Wed 03 Feb 2021 09:04:15 +0000
ROA not before: Wed 03 Feb 2021 09:04:08 +0000
ROA not after: Thu 03 Feb 2022 09:04:08 +0000
asID: 35916
IP address blocks: 156.242.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 09:04:08 2021 GMT
Not After : Feb 3 09:04:08 2022 GMT
Subject: CN=601a670f-eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:0a:22:62:92:c5:30:a7:d4:1f:69:5d:a6:
3b:46:2d:94:f7:25:65:88:0d:c0:23:4b:73:e8:93:
e4:b3:f1:95:29:fb:55:55:be:d2:25:fb:e3:e0:06:
8f:4f:7d:f9:e7:55:2a:a9:35:ff:24:c5:3a:46:53:
5a:50:d4:95:96:85:5d:46:39:bd:d8:28:ec:f0:56:
7e:f8:f3:03:23:a7:92:8a:7c:cc:57:45:24:5c:ef:
5a:99:f1:a6:88:2c:6c:fe:67:71:ca:39:3e:ad:83:
31:b9:a3:b7:26:2d:48:56:ed:06:44:d6:57:d1:c0:
f5:65:d9:32:37:55:ae:16:25:66:54:43:9b:ad:65:
a9:23:e0:1a:0a:2d:a6:c5:29:52:c7:cc:80:21:09:
5e:6b:b9:2d:e5:4c:a0:ac:a7:aa:1f:ae:a5:92:65:
31:f7:60:b8:81:77:09:a1:8c:ad:fb:35:e8:12:5f:
f7:e5:e1:20:1f:9d:f3:c2:23:d9:15:ac:df:c6:e3:
dd:78:d5:1b:05:17:05:3d:5b:de:63:7f:1a:7e:86:
71:24:46:55:3c:b5:1d:c6:57:c8:3e:aa:e9:8f:88:
73:c7:ef:8c:91:8c:a7:5b:0d:9c:c5:1c:4e:a9:f4:
47:e1:94:ca:63:fe:92:21:24:58:ef:42:d1:ab:18:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:F5:06:19:90:97:A1:BF:DF:28:69:08:2D:C9:61:CE:37:77:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C965A8FE65FE11EBA63FA40FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:27:51:4b:db:86:64:51:28:bb:00:75:77:24:75:7c:49:23:
66:21:f2:cc:16:cb:36:df:81:77:05:a1:3b:7d:0b:64:c7:20:
a9:bc:f5:ff:0c:02:e2:fb:22:a2:2b:30:72:5d:a4:21:9e:04:
57:47:f4:c6:f0:14:7d:4c:f1:be:cf:c6:a8:ed:d1:ad:37:09:
8e:7a:7e:9d:da:ad:f1:d8:7a:c7:80:7e:40:6d:5d:2e:76:50:
a3:de:c4:cf:12:f5:4b:ef:22:63:0a:1b:a1:0c:d8:ce:d9:0d:
f7:28:43:44:bd:82:ea:33:ec:1b:f9:89:21:45:3b:cb:a1:c3:
16:62:52:c5:0e:e3:fe:e6:99:b5:b6:f5:b8:0f:2e:af:3e:f5:
64:3f:77:36:7f:62:83:91:92:32:e8:ea:e2:6a:9e:0a:46:52:
a4:24:28:3e:a0:f6:1e:05:d2:21:a0:95:9a:3f:51:ea:77:2f:
19:d5:10:37:27:a0:4b:9f:57:5e:9a:07:94:b6:3f:e2:53:83:
80:61:b5:64:7a:6f:d0:a7:26:e2:fd:0d:f5:04:f0:d3:19:50:
70:9a:26:08:aa:0b:c6:1d:3a:b0:f5:bd:35:17:ef:4a:04:8e:
37:54:1f:91:76:84:3d:c5:1d:3e:c8:04:89:44:8d:92:04:ff:
59:49:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org