Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D147224C0AE911EC96759D4FD8A014CE.roa
File: D147224C0AE911EC96759D4FD8A014CE.roa (raw, json)
Hash identifier: LUfLe2oC7O/AiV9XKCaFKkLPvDZvBLmK1hYHMZAyxL4=
Subject key identifier: 06:0C:00:23:53:86:36:61:7B:6F:3F:8E:DE:07:1F:0D:F0:01:3A:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D147224C0AE911EC96759D4FD8A014CE.roa
Signing time: Wed 01 Sep 2021 05:59:50 +0000
ROA not before: Wed 01 Sep 2021 05:59:44 +0000
ROA not after: Fri 30 Sep 2022 05:59:44 +0000
asID: 136744
IP address blocks: 156.226.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 05:59:44 2021 GMT
Not After : Sep 30 05:59:44 2022 GMT
Subject: CN=612f16d6-403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:56:98:1e:e2:2c:98:05:cc:34:8b:f3:2e:
33:5b:b8:e3:7b:a2:25:6a:1b:d0:55:89:4a:91:f5:
ca:90:cc:09:a6:25:de:26:06:1a:d7:0c:a2:73:91:
a1:96:a0:16:13:0d:98:4e:ea:c4:75:ba:8d:cd:57:
2e:34:58:0f:54:02:61:a8:a5:b7:d2:a0:40:a8:df:
ec:14:8c:6e:11:91:e0:77:00:5d:07:37:6c:b1:84:
d4:fb:67:97:8f:55:2f:a5:6d:8f:43:f2:a6:81:5d:
a6:5d:a6:ad:4a:ae:95:1d:78:bd:30:05:d3:b4:45:
b4:78:e2:c7:7b:a7:54:7c:6c:5f:6a:5c:0e:c2:f1:
9d:81:da:eb:87:e7:dc:47:61:19:1e:5e:04:14:65:
b5:5a:d7:d3:d4:e8:1c:a3:6a:ef:7c:89:8c:05:cf:
15:43:b9:d0:eb:47:81:87:20:2c:d5:c2:23:97:9f:
da:3f:20:98:86:3b:9f:f5:b3:ee:e9:c4:65:d7:f8:
14:9e:79:f6:36:3c:f2:ba:b7:72:e2:55:62:be:52:
80:98:75:77:3a:da:3e:24:c1:5f:59:5a:ad:b9:1e:
3e:26:5a:11:ba:92:ae:8b:38:29:a6:82:a7:5d:b5:
bd:26:29:24:d6:8c:f5:5e:f7:9a:65:d2:a2:36:58:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:00:23:53:86:36:61:7B:6F:3F:8E:DE:07:1F:0D:F0:01:3A:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D147224C0AE911EC96759D4FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:44:90:9b:a2:07:db:9d:55:38:26:9a:50:52:d9:6d:f4:cf:
d6:39:e2:e0:ee:33:9f:ba:66:8e:63:c1:53:c6:d0:6b:64:c8:
5e:69:f7:c2:c0:19:bd:d3:d6:52:52:ce:d9:29:91:91:11:eb:
9f:c3:65:48:a7:56:82:1e:58:9d:48:04:e1:cb:5a:7c:c9:8a:
58:3d:1f:b4:ec:cf:8f:b0:c9:45:10:64:d3:a4:b0:da:ad:c6:
92:3d:ea:69:10:c2:01:c7:e0:07:8a:cc:5f:6a:a0:a8:9b:ae:
0b:a3:0e:9d:a0:aa:17:92:a6:09:e6:16:f0:84:42:a1:99:7c:
95:b2:ca:9c:7b:1d:93:22:66:9c:4f:ff:46:cc:97:04:16:77:
3b:1c:5b:2b:b5:91:4f:f5:f7:9b:77:dd:82:78:dd:ba:9c:1c:
81:a2:d7:55:48:82:50:b9:12:40:d9:1b:e2:6a:bf:a3:01:14:
82:5a:65:cd:ff:04:70:91:75:ac:73:ab:83:d3:4f:49:22:83:
97:d6:57:ac:4e:55:a9:13:8f:67:2d:f3:08:0f:4a:17:c0:4b:
4f:45:43:30:7d:84:1c:f9:c5:4a:52:e1:04:3c:9a:49:d8:27:
3a:0e:8a:87:7b:c4:9a:c1:90:2b:2c:22:48:63:a1:b0:e3:b0:
36:24:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org