Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8FC9010E90D11EB9584006BD8A014CE.roa
File: D8FC9010E90D11EB9584006BD8A014CE.roa (raw, json)
Hash identifier: LZlI7q+CnOguKp1zDwWgRuMHm24w2LM1J3v/s1fDz68=
Subject key identifier: D6:53:45:51:EC:7D:76:50:AB:8B:2E:5E:E5:F5:71:79:D8:72:80:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0796
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8FC9010E90D11EB9584006BD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:52:12 +0000
ROA not before: Tue 20 Jul 2021 03:52:07 +0000
ROA not after: Thu 15 Sep 2022 03:52:07 +0000
asID: 1239
IP address blocks: 156.233.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:52:07 2021 GMT
Not After : Sep 15 03:52:07 2022 GMT
Subject: CN=60f6486c-ada3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:96:85:18:30:64:82:90:f2:ee:34:4c:7a:
0d:ec:0f:0d:4e:5c:44:18:45:5b:14:3d:c8:d1:29:
55:dc:e4:53:6a:ba:31:c1:15:b0:78:11:3b:45:57:
44:3a:eb:45:00:75:79:45:f3:4b:e5:29:93:87:41:
5d:a9:71:f3:ea:2e:a1:bb:25:ca:b6:c7:b2:c7:9c:
e1:f3:f5:98:e6:ba:f1:44:95:05:6b:1c:53:68:6d:
c6:b5:51:9b:4b:33:cf:8c:05:76:33:21:da:18:1c:
36:4d:87:c2:1d:a3:48:e1:c8:9f:48:1a:fd:48:77:
24:91:89:eb:3c:98:4b:81:c3:6e:32:d6:7f:28:7e:
92:aa:39:9d:f2:ad:0e:b2:46:54:dd:ff:82:15:da:
bd:68:95:59:df:18:52:c5:2d:f3:2c:ff:28:f7:82:
bb:f6:87:69:d3:40:1a:9d:df:38:15:5a:fd:2d:9e:
9b:e3:dd:02:50:63:a3:7e:bb:43:f9:af:d1:0a:9c:
c6:6a:87:00:b5:a1:08:a1:33:d0:05:03:90:02:b5:
f2:90:a3:52:67:9f:75:62:6e:c8:60:19:45:af:88:
a2:7b:1f:9e:ea:3c:dc:36:66:69:a4:de:4a:68:04:
9c:f5:f8:ec:da:e5:85:4f:43:41:df:a3:cc:2d:d5:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:45:51:EC:7D:76:50:AB:8B:2E:5E:E5:F5:71:79:D8:72:80:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8FC9010E90D11EB9584006BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/20
Signature Algorithm: sha256WithRSAEncryption
af:fb:01:79:d5:50:5b:a0:71:66:c5:cf:2b:01:38:11:ab:4a:
ef:11:6f:e4:95:da:80:d4:77:2c:18:73:d8:53:b8:d2:45:d9:
57:f0:cb:9d:4a:7f:8a:e8:2d:2a:fd:59:8c:41:2d:c4:27:4b:
79:cc:28:26:b2:89:3d:79:a3:38:17:e3:af:8b:52:8d:6e:83:
c8:e0:55:39:f2:7c:e1:9e:9b:c6:c7:6f:b1:60:7b:b7:76:f4:
3c:ca:7c:1b:6e:20:83:ac:75:b9:c3:8a:b7:37:88:3c:00:c7:
da:53:64:17:0a:20:55:81:27:85:a7:d2:df:13:d3:c0:05:41:
8f:0b:84:e7:ab:24:b9:b2:09:8c:2c:7e:03:b7:0c:13:4d:66:
76:06:ef:ce:65:64:fa:3d:67:a9:de:fe:f2:db:39:b2:84:b5:
22:4d:6a:15:65:ec:c1:ae:87:dc:2c:b7:27:ee:1f:78:2b:ae:
cc:10:b3:5b:90:f0:b6:ac:85:96:7b:c4:62:07:f3:c3:17:0f:
1b:fa:a5:58:98:e6:d9:a3:4a:ee:a4:49:dc:1b:40:4a:e4:87:
ef:ee:79:bc:55:3a:be:75:80:6c:c5:dc:36:66:9d:c7:bc:77:
c9:a2:be:5b:58:a7:74:57:46:2e:f5:b4:c0:66:95:dc:00:4a:
0d:b3:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org