Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BDA7463E0D11ED885A11ABF1222468.roa
File: D8BDA7463E0D11ED885A11ABF1222468.roa (raw, json)
Hash identifier: zHu4VS0pJB2/Lt3DQaMroEv9LyEym3p1UjIGh83Rz1g=
Subject key identifier: 47:15:45:2D:75:5A:A6:7A:3E:23:BB:75:59:CC:22:8C:C3:06:37:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1870
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BDA7463E0D11ED885A11ABF1222468.roa
Signing time: Tue 27 Sep 2022 02:41:11 +0000
ROA not before: Tue 27 Sep 2022 02:41:05 +0000
ROA not after: Sun 15 Jan 2023 02:41:05 +0000
asID: 18004
IP address blocks: 156.225.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 02:41:05 2022 GMT
Not After : Jan 15 02:41:05 2023 GMT
Subject: CN=633262c7-eb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:32:5f:d8:c0:e1:30:7a:cf:c1:0f:22:2f:
9e:77:7b:00:af:90:5d:fb:6c:48:5b:3e:fb:02:7a:
7a:bd:03:0e:15:3a:cd:0f:da:5b:6d:f7:95:39:12:
3b:b7:95:df:0f:70:e6:36:67:15:06:88:1d:a9:45:
04:0f:f6:d8:02:6c:2d:e9:09:e1:0f:ae:5f:6b:b6:
8f:8a:46:a6:49:7e:c8:fe:31:a8:0b:8e:51:db:5e:
54:1b:bc:f6:2f:fc:a5:31:e7:f3:00:f6:d5:6b:7d:
db:29:a7:29:2a:f5:ee:cf:86:7b:fc:e7:ed:e6:e7:
56:42:63:84:d3:61:93:a3:11:ed:43:1a:95:d5:30:
ca:fa:c5:b1:83:ea:d8:d8:43:16:67:cd:82:3c:b6:
cb:1e:11:0c:8d:08:9f:ea:58:37:d3:59:3c:c5:cd:
a0:cb:06:45:cd:09:b4:55:bc:1d:e7:f7:cd:da:bc:
ff:46:0b:08:9a:b0:9b:73:4e:60:c1:14:9f:bd:c0:
53:15:84:58:32:4a:94:c5:08:b2:c6:5e:07:1b:67:
e2:42:ad:67:04:95:47:a7:72:e0:01:0a:a3:be:a8:
c4:c5:cd:77:84:99:24:29:63:52:78:95:62:81:ee:
68:42:c2:41:8b:3e:b7:95:3e:1b:24:4b:49:8f:b1:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:45:2D:75:5A:A6:7A:3E:23:BB:75:59:CC:22:8C:C3:06:37:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BDA7463E0D11ED885A11ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ff:7b:d5:0e:c0:6f:5f:63:7d:97:b8:76:58:66:ee:ef:30:
de:4c:49:27:66:6d:71:f2:4f:2c:24:94:9f:dc:49:35:af:5e:
e5:33:a0:3b:1c:48:83:f1:4c:39:66:fb:01:ab:c7:e2:64:d6:
e4:0c:94:f1:13:5d:7c:00:18:43:f9:1f:f5:ef:83:26:1e:76:
33:90:03:dd:0c:4b:24:7d:b2:d1:a2:30:30:9d:d6:be:fd:df:
c9:84:04:bb:11:c7:1f:de:65:87:d7:c5:b9:0e:7b:9c:91:72:
c6:3d:86:8d:22:19:85:a4:dc:9a:9e:22:27:e8:24:18:65:6f:
ac:e7:93:61:1b:a1:5d:53:7d:c1:d7:78:31:7d:a0:35:c9:1a:
ce:d6:cf:62:9a:02:e7:47:fc:b4:ee:0f:65:f3:55:4e:4e:d2:
c8:d9:4a:90:c2:00:f2:06:af:c6:81:2d:de:50:f4:93:a0:ab:
82:26:35:79:70:d1:36:0d:3c:8c:f9:86:bc:82:1e:bc:8d:79:
be:da:17:7b:48:8d:b4:f8:26:5c:68:13:91:64:ff:7e:5b:aa:
79:67:66:6c:67:4c:bc:52:94:4c:b7:6f:7e:5b:36:58:36:64:
ae:e4:3f:99:71:61:94:b6:89:ce:7b:22:1b:0f:32:16:9a:d0:
26:4c:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org