Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA216F765EE011EC85E1C5A35A40D577.roa
File: DA216F765EE011EC85E1C5A35A40D577.roa (raw, json)
Hash identifier: vHF1IaM95ZRf3a/m/XnmFGu1SYt1+wtZKd/jeSus26U=
Subject key identifier: 02:C6:F5:03:18:E0:28:7F:F2:76:7C:D9:2E:CA:6C:1B:FA:42:97:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA216F765EE011EC85E1C5A35A40D577.roa
Signing time: Fri 17 Dec 2021 02:27:17 +0000
ROA not before: Fri 17 Dec 2021 02:27:12 +0000
ROA not after: Sat 30 Jul 2022 02:27:12 +0000
asID: 272018
IP address blocks: 156.235.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4338 (0x10f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 17 02:27:12 2021 GMT
Not After : Jul 30 02:27:12 2022 GMT
Subject: CN=61bbf585-646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:4e:1c:3e:49:7c:19:cb:af:9d:e1:d3:f1:
a8:4a:76:c0:2e:76:58:78:36:a7:22:57:4a:90:a6:
f8:ac:4c:e9:b5:3e:e8:24:a7:15:5a:83:89:96:c6:
3c:4b:19:0e:3c:45:60:be:ee:8d:a3:71:55:9b:bb:
05:43:16:82:d2:70:c9:69:d7:de:e3:80:bc:36:69:
32:81:a6:cd:63:f2:09:e2:64:5a:93:11:96:a3:b0:
25:cf:dd:32:ed:c5:4e:16:4d:8c:80:8b:a8:99:1e:
40:44:45:2d:7c:43:4b:fd:db:cb:11:98:09:f2:66:
62:ee:da:ab:34:a8:c4:dc:38:fc:50:97:af:77:ee:
32:50:2e:da:ab:0d:21:8b:2d:40:75:67:01:6f:4d:
fe:c5:53:c8:98:af:3e:ab:9c:40:ad:cf:d6:87:32:
db:51:e6:9a:69:a1:cc:25:33:00:bd:d0:d3:f5:13:
e6:0e:3a:e4:11:6b:16:97:61:b9:1a:11:c1:80:d0:
56:07:4a:83:39:fc:af:4d:f6:48:06:7b:31:e9:e1:
7e:f0:28:ff:0e:d8:cc:e4:1e:af:39:26:3a:ae:47:
3c:df:8f:56:ea:05:58:f9:3b:6c:d5:6a:d0:d7:fe:
5f:86:b4:7b:b8:34:ec:75:9b:bc:9d:c9:f8:6d:55:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:F5:03:18:E0:28:7F:F2:76:7C:D9:2E:CA:6C:1B:FA:42:97:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA216F765EE011EC85E1C5A35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.91.0/24
Signature Algorithm: sha256WithRSAEncryption
27:23:85:ee:1a:bc:99:21:af:d4:50:17:57:0a:96:dd:56:fb:
45:f5:9a:c9:8a:fc:5f:6f:f6:70:9d:73:cd:37:24:5e:65:1f:
18:ca:bd:6a:12:de:89:07:31:b5:98:98:da:29:05:4e:a7:5a:
be:b3:30:8f:de:18:82:3c:9f:f1:6c:2b:27:2d:04:38:bf:e8:
da:79:98:5a:5b:0c:61:74:34:bb:d8:b2:6f:ec:36:6b:c0:da:
ba:f0:eb:df:89:07:1f:a0:9b:81:43:fb:ad:1f:4b:97:66:4b:
a0:03:73:f9:3b:99:4c:83:23:0a:d4:94:2b:1a:a0:da:f1:b5:
51:f3:1a:e4:f4:35:92:49:82:07:26:29:bc:74:83:4e:a7:23:
87:e6:58:8d:8b:86:fa:cd:45:7d:9a:b5:ce:d2:37:2a:05:18:
c3:e2:8a:02:8e:2b:52:a0:9c:2b:80:c4:05:2f:ce:76:5e:05:
98:6e:69:fa:24:a7:cd:ad:2f:18:7d:69:3c:f8:81:a2:3f:db:
64:24:54:08:40:73:03:0a:ca:bb:17:0b:c6:21:be:9e:de:9e:
8b:1a:5c:14:6c:83:a4:78:0e:03:92:4f:0c:86:12:27:93:46:
96:ee:5b:c0:3e:95:97:42:d2:b6:92:30:5a:96:3f:bd:bc:1d:
d5:92:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org