Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4ABE020250B11ED9A30F6E8F1222468.roa
File: D4ABE020250B11ED9A30F6E8F1222468.roa (raw, json)
Hash identifier: sXrZuFHA7iQL00X5IWxw1AMT9z9tIo9hT6NoWSCWglE=
Subject key identifier: 83:EB:5F:D9:7C:17:4B:E0:26:83:2D:14:DA:3E:82:13:3F:06:77:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4ABE020250B11ED9A30F6E8F1222468.roa
Signing time: Fri 26 Aug 2022 06:53:46 +0000
ROA not before: Fri 26 Aug 2022 06:53:43 +0000
ROA not after: Sun 15 Jan 2023 06:53:43 +0000
asID: 139057
IP address blocks: 156.225.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5895 (0x1707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 06:53:43 2022 GMT
Not After : Jan 15 06:53:43 2023 GMT
Subject: CN=63086dfa-093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:dd:1c:f9:b1:f2:d9:a7:2a:12:f6:86:81:
8e:76:85:23:20:d2:f6:0e:8e:4f:0a:31:c7:c7:20:
ae:87:0c:1d:92:76:89:6d:59:71:55:e2:de:4d:09:
8a:66:0a:0d:b5:ff:8d:8b:3d:94:9b:b5:51:2d:e8:
12:2c:e0:87:f0:ee:be:97:c3:e8:12:0c:a3:86:fe:
d8:e8:30:c3:ff:10:d3:0b:a7:ec:24:47:25:43:7c:
3e:33:f6:9c:04:bc:c6:f9:01:ff:b6:e8:64:57:19:
61:49:00:a0:80:56:dd:92:79:00:2a:7f:fc:ba:a4:
f6:99:76:ed:00:26:a9:8c:b1:8f:57:0c:ab:cb:80:
5f:fd:b7:f8:1e:b1:62:0c:41:92:62:9a:0d:11:1a:
7a:60:5a:35:a0:1d:17:f2:d8:cb:7e:14:24:2d:7c:
be:6c:73:af:f9:7f:37:c7:84:a7:b2:1d:13:32:ff:
f5:c3:9f:e9:0b:77:98:aa:d3:ee:86:9b:af:95:83:
6c:7e:5f:50:9c:67:03:35:53:01:e0:c4:3b:87:68:
26:a3:e3:64:6d:c8:98:9c:d1:00:e1:4a:47:e7:37:
3e:9b:1c:74:0d:0c:76:7a:1d:72:cd:41:5b:f8:0c:
f4:6e:80:72:01:97:5c:db:5d:90:e2:3e:69:d0:cd:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:5F:D9:7C:17:4B:E0:26:83:2D:14:DA:3E:82:13:3F:06:77:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4ABE020250B11ED9A30F6E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.106.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f9:b2:c7:74:0f:20:29:f3:0f:0c:dc:0b:0c:8f:41:1a:a3:
ba:66:b5:49:72:4b:c0:aa:dd:1e:29:ef:fa:90:bb:51:88:78:
e4:5e:9d:33:3d:a3:bd:b6:48:c2:a9:95:f4:f1:c2:2d:61:4e:
22:6e:a2:ab:eb:e8:e7:47:8c:97:21:fb:e7:06:cb:ae:e9:9e:
8c:3f:ab:1d:a1:4f:7d:c9:cd:14:18:3c:39:ce:1d:6c:17:63:
fe:20:08:e1:12:8a:2b:cf:bf:8e:6c:eb:01:8c:22:79:61:78:
38:46:0d:0e:97:16:a4:50:56:bf:55:84:17:4f:d0:bb:2d:c4:
9a:7e:a5:a9:cc:5a:73:b1:f7:9b:66:d5:28:96:4f:5d:55:df:
84:9e:80:e3:70:eb:02:17:7a:23:ff:cb:91:b8:23:c3:1d:96:
45:44:dd:44:f8:fc:09:9a:3c:73:e6:b3:72:0d:29:6a:8e:c3:
b5:a3:ba:9c:53:55:b1:c7:43:6b:ab:86:24:e2:a3:a7:43:d1:
e5:ba:3b:63:7b:2a:ec:5a:77:b1:f1:19:d0:58:86:dd:3c:b7:
4a:0e:f1:47:91:41:71:d6:f6:dd:11:22:85:58:1c:d6:be:ab:
2a:74:44:a1:f6:95:f4:79:86:c2:fe:94:b3:19:d2:85:84:ca:
27:9a:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org