Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
File: D3F73F82D7F811EB9C6E9D4EF8AEA228.roa (raw, json)
Hash identifier: mOHDGxZ67/BF1xbkmW1b8p6AUA8a64Eza84gV+8rMrI=
Subject key identifier: C6:14:1A:39:6C:B3:E8:3D:66:64:5A:54:47:AD:6B:91:5D:C8:3A:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
Signing time: Mon 28 Jun 2021 10:08:48 +0000
ROA not before: Mon 28 Jun 2021 10:08:42 +0000
ROA not after: Sun 28 Aug 2022 10:08:42 +0000
asID: 271868
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 10:08:42 2021 GMT
Not After : Aug 28 10:08:42 2022 GMT
Subject: CN=60d99faf-040f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:a5:c7:5c:f4:cd:63:dc:a4:69:25:e2:c4:
ce:18:c0:1b:08:ad:2b:db:b0:84:f3:8e:08:47:c1:
76:a3:2d:92:3d:36:0f:14:61:1c:03:78:4f:6e:03:
3c:cc:69:03:ee:95:d2:ec:9a:30:62:25:cb:73:2d:
ac:09:6a:19:0b:1a:94:4b:b6:2b:30:21:cd:a4:79:
49:e7:7b:7b:bf:32:3e:45:af:7d:11:0a:79:25:f7:
5d:d6:2a:be:7a:c3:00:dd:ca:f3:6f:1d:fe:33:cb:
5b:27:af:2c:21:7b:ac:af:8c:51:9a:12:92:e5:66:
94:3b:c9:15:cd:6e:e6:59:06:b1:46:aa:5c:27:ea:
93:98:8e:50:fb:86:62:a0:a1:1e:66:3a:44:23:09:
97:b0:bc:60:77:a9:bd:c3:69:50:66:89:33:a4:1a:
b1:55:3a:61:ee:2b:1a:6e:f0:65:a9:7a:7d:bd:97:
eb:70:4e:0b:d8:06:fc:fc:30:22:6a:de:3c:0d:28:
13:fd:ae:79:85:7d:a9:ec:29:f7:50:46:ca:4b:c6:
f7:2c:6c:b0:a7:45:10:34:6b:c9:a2:89:b7:99:cc:
8b:e7:15:c0:1f:a9:c1:54:93:0f:c1:2c:b1:85:c9:
51:de:c7:0b:2a:5b:c6:54:2d:30:13:73:05:7e:01:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:14:1A:39:6C:B3:E8:3D:66:64:5A:54:47:AD:6B:91:5D:C8:3A:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F73F82D7F811EB9C6E9D4EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d5:1c:f4:73:1d:12:c5:fd:95:6e:91:0b:6e:c6:6a:4e:1d:
98:44:52:78:9f:b8:5b:9f:54:7f:d1:a8:17:0f:2a:38:f0:ae:
e1:9d:43:a9:47:0b:b6:31:52:5b:df:3c:f0:42:88:42:b0:90:
e2:ad:5a:eb:84:17:67:4e:32:ba:91:e9:13:6e:be:0a:6c:ec:
43:3b:9a:03:03:e3:50:bb:bd:c0:13:e5:06:68:b1:c0:ea:30:
53:17:27:cb:d7:60:e0:0f:a8:45:f8:28:f6:db:74:10:1a:d0:
ae:3b:da:a5:cb:6f:b9:38:3a:d0:70:70:5c:fc:6d:86:8b:2d:
ea:e3:d6:25:92:c4:86:81:da:28:42:98:ed:7a:c0:f4:fa:1b:
c9:3a:76:ac:b2:bd:d2:37:9a:8f:7f:be:8e:b1:a1:96:89:6a:
4e:fa:7a:a2:2a:73:3a:6f:48:bc:43:e3:87:b0:74:93:de:85:
99:c1:de:56:7d:65:ae:10:67:8a:26:82:ae:a3:46:91:c5:26:
56:2f:c5:0e:49:52:a5:0f:a5:89:86:fe:5f:da:e9:fd:63:9f:
fc:c3:e9:19:69:b1:39:08:67:32:5c:4f:1f:e9:91:53:38:ae:
02:1b:71:39:e7:ba:2d:a3:1f:1d:33:17:31:88:94:d3:fa:bf:
36:ec:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org