Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0A3128E89611EC9D2D3AC7F1222468.roa
File: DE0A3128E89611EC9D2D3AC7F1222468.roa (raw, json)
Hash identifier: PM4D6hN/mX+Y6ar8c379lkS3HE2CIAQexC2oIXjZB4M=
Subject key identifier: B0:78:6A:76:39:5C:30:02:C7:93:3F:A9:10:BC:C9:BE:6C:6D:44:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1476
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0A3128E89611EC9D2D3AC7F1222468.roa
Signing time: Fri 10 Jun 2022 08:25:21 +0000
ROA not before: Fri 10 Jun 2022 08:25:18 +0000
ROA not after: Wed 30 Nov 2022 08:25:18 +0000
asID: 133199
IP address blocks: 156.245.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5238 (0x1476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:25:18 2022 GMT
Not After : Nov 30 08:25:18 2022 GMT
Subject: CN=62a2fff1-7e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:54:f8:94:c5:a5:f5:fd:ab:bb:fc:a8:2b:
36:55:fc:84:ee:ab:8e:a3:d3:7a:35:24:1c:60:b7:
41:1f:95:2e:93:72:20:13:75:f5:46:05:26:0d:8f:
a4:4d:60:96:d3:a3:85:af:da:b3:39:84:3e:82:ba:
6a:ad:9c:ee:fa:af:fb:cd:57:d5:30:c6:0b:be:d7:
33:28:56:13:9a:30:8d:0c:5c:71:47:6f:14:9a:84:
ef:87:19:e3:dd:dc:6f:de:68:24:a6:a6:85:bb:6b:
0d:be:b0:f2:80:6b:68:e1:dd:fd:d7:df:c9:89:ee:
89:1e:fe:48:26:61:a6:01:99:75:44:ec:a0:6a:99:
4c:9b:7c:ed:8a:65:fd:22:be:4a:c8:47:cc:59:6b:
47:9e:10:2b:e5:fb:0f:a0:9a:de:eb:dc:cd:2a:9f:
65:7f:ee:30:bd:50:3b:ff:5d:71:cb:d0:2d:ae:4b:
48:e2:77:c0:30:e5:50:49:6f:ca:00:db:f6:4c:68:
44:28:8d:1a:19:b1:8d:2f:33:30:83:30:6d:18:43:
6d:4d:d2:81:35:d0:bf:27:9a:af:e2:18:fa:6d:3a:
a4:15:ae:2c:bc:10:ca:10:e7:13:1a:08:35:4b:36:
a3:94:46:ca:18:3c:37:b1:3b:44:69:87:8f:52:1c:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:6A:76:39:5C:30:02:C7:93:3F:A9:10:BC:C9:BE:6C:6D:44:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0A3128E89611EC9D2D3AC7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.25.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9d:36:b6:67:43:c7:a8:bb:bf:a3:3c:10:ef:15:9b:df:d7:
b2:29:cf:d4:e3:a1:a3:68:16:09:7b:0c:72:fa:5c:26:d7:15:
ab:b2:01:94:52:4b:57:31:72:bf:d4:11:d2:97:ef:ca:40:05:
7e:bd:7e:09:c6:da:4e:c9:de:5b:90:31:46:f8:22:d1:40:15:
fb:91:3b:65:ab:32:37:5c:a0:02:17:66:65:f0:00:66:60:5a:
f6:09:fa:1e:ee:08:23:2a:29:93:ca:76:18:60:f7:d2:f7:bf:
c4:a2:6d:03:04:41:cc:0d:e6:ea:f1:86:39:df:d4:6b:51:6a:
9b:54:cb:48:d5:0c:5b:0e:3b:64:30:ab:e2:b8:ca:64:e0:00:
8c:14:13:4f:c0:fd:13:1e:f3:10:9e:14:e4:50:c1:31:83:be:
65:cf:eb:e5:07:40:58:97:fe:64:e2:e6:ff:6c:68:fe:1e:6d:
cd:13:cb:a4:08:ce:c5:94:ef:7f:51:c8:88:66:9d:c4:19:17:
5c:a6:33:39:cd:68:15:42:02:c0:aa:d5:a3:03:37:56:e2:55:
f9:fe:96:57:1d:ce:e7:8f:7b:8f:99:06:ac:6c:b7:3c:4d:52:
34:3e:0f:99:90:cc:8e:b1:58:5a:04:cf:48:87:e4:64:95:90:
7b:b3:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org