Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC81EBEE90D11EB8B1DDD6AD8A014CE.roa
File: CBC81EBEE90D11EB8B1DDD6AD8A014CE.roa (raw, json)
Hash identifier: +lyct8a8bsi4DGyFfxYTslf7AfAYeE3b+MxZNDQ9dTE=
Subject key identifier: E8:69:32:EF:F0:81:F5:CA:99:7F:A2:37:C4:A5:CA:9B:D4:98:F7:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0794
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC81EBEE90D11EB8B1DDD6AD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:51:50 +0000
ROA not before: Tue 20 Jul 2021 03:51:47 +0000
ROA not after: Thu 15 Sep 2022 03:51:47 +0000
asID: 1239
IP address blocks: 156.233.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:51:47 2021 GMT
Not After : Sep 15 03:51:47 2022 GMT
Subject: CN=60f64856-eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:9d:23:a9:37:1d:78:d9:d0:2f:32:b5:da:
b0:2c:89:95:d4:af:57:76:f6:a8:e2:c4:00:2a:5b:
a3:d8:22:e1:6b:2f:d5:ae:d5:3b:d6:ff:22:39:3d:
33:25:7f:23:86:d5:74:1b:45:26:c7:03:e0:b9:d0:
38:88:c0:99:31:23:64:31:60:75:42:7f:e3:a1:9a:
f4:9c:d9:52:5c:f3:07:c3:a5:d0:ce:d4:90:00:17:
40:b0:a8:26:f1:4f:8c:66:31:67:8a:a2:1c:bf:1c:
ed:13:6e:c6:32:0a:b1:a1:1c:89:92:89:26:b3:c8:
58:fb:6e:aa:41:61:1e:f5:26:94:2f:8e:c6:31:6e:
75:47:2f:a5:79:80:6a:bd:c9:cd:9d:82:eb:53:32:
64:16:5a:b1:9c:ab:e7:6e:1f:f0:40:1d:e2:d4:aa:
cf:24:f3:18:15:0f:c8:41:5a:e4:a7:ff:b0:be:04:
b0:57:6c:88:a1:4a:e6:80:6e:89:c4:f7:18:e3:48:
44:6c:46:22:b8:43:fe:b8:9d:b3:88:c1:75:4d:95:
39:ca:c6:3f:68:55:ab:ef:a3:18:8d:dc:be:79:38:
58:f8:60:cd:a6:c9:17:93:1f:63:46:38:5a:71:1b:
8a:69:da:f4:6b:0e:55:89:2b:95:71:7c:18:a3:16:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:32:EF:F0:81:F5:CA:99:7F:A2:37:C4:A5:CA:9B:D4:98:F7:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC81EBEE90D11EB8B1DDD6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:0c:da:f4:82:3f:67:80:3a:0e:ee:32:4f:1b:44:d3:cb:98:
6b:2f:bf:93:ef:56:38:fb:88:a9:ec:bd:38:fa:79:e1:de:8a:
37:e8:f9:ce:69:f6:63:17:76:8f:e6:e3:ee:f8:9e:ef:76:3b:
18:84:7a:48:c1:27:d9:54:a8:3c:ac:97:b7:27:b2:73:2e:9b:
e4:63:fc:b5:53:ce:0a:76:20:a9:81:3c:38:72:8f:17:a5:d1:
87:6b:ac:11:07:5d:7d:f6:1c:7a:7e:2b:20:21:1c:64:60:6f:
9b:6c:2c:a1:d4:a1:12:94:7e:ea:09:fb:d5:24:2b:43:d0:7f:
54:9c:18:66:74:13:ae:5e:c2:70:4f:24:8f:85:0d:66:2f:c2:
f8:f9:91:58:dc:10:86:3d:7b:14:43:77:6c:e3:1d:5b:f5:ef:
4d:0b:cb:86:d4:b0:75:50:da:22:eb:a3:d6:01:20:61:a1:c0:
95:18:e6:31:ee:75:7f:be:02:1a:db:f2:82:d6:d1:09:32:0b:
02:3d:d6:f2:f1:a6:6c:16:2e:bd:87:8a:40:ac:84:43:0e:d9:
bf:42:53:93:c3:45:ed:88:47:65:d3:72:9d:14:62:93:fa:58:
ae:b1:92:81:d3:0b:85:d7:ec:18:66:ea:e7:b2:86:95:9c:24:
db:7a:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org