Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF290BFA0AE911ECAC2CC44FD8A014CE.roa
File: DF290BFA0AE911ECAC2CC44FD8A014CE.roa (raw, json)
Hash identifier: HDa6yvPYxA7WNht+GP/eRZ8mpq8l2VxDouZLPWKrJO8=
Subject key identifier: 5D:96:2D:BD:CD:61:57:E7:19:31:BB:8A:E1:F3:54:53:29:4E:E8:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 08F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF290BFA0AE911ECAC2CC44FD8A014CE.roa
Signing time: Wed 01 Sep 2021 06:00:13 +0000
ROA not before: Wed 01 Sep 2021 06:00:07 +0000
ROA not after: Fri 30 Sep 2022 06:00:07 +0000
asID: 136744
IP address blocks: 156.226.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 06:00:07 2021 GMT
Not After : Sep 30 06:00:07 2022 GMT
Subject: CN=612f16ed-c705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:c0:d8:c6:42:a4:a3:51:b1:6e:b7:93:36:
69:7f:5d:82:4f:23:eb:5d:52:4f:1b:41:e5:7c:42:
1b:de:cb:ed:33:09:86:ef:31:9c:b6:56:dc:a7:ec:
67:25:e8:8d:a1:75:ec:46:83:3d:ca:d0:87:eb:35:
47:1f:f8:74:e1:fa:db:1e:53:5a:80:f7:a0:d7:a8:
cd:7c:01:12:a7:cc:b4:cc:fa:40:63:bb:7d:41:c2:
3a:db:28:f0:9e:a9:8e:4f:c8:93:57:ec:9c:97:60:
ca:3c:ce:11:56:8e:f9:3b:3a:5d:f6:60:96:e5:ef:
15:db:48:d2:8d:09:e1:e6:14:f0:76:e5:df:f0:61:
2e:ac:51:71:de:c9:d4:6f:35:db:1a:33:d6:1c:9e:
a5:13:46:14:79:af:31:c2:cf:61:37:ba:29:21:99:
9d:2a:ad:15:34:16:04:17:b7:1f:c9:aa:43:a5:9e:
3e:4c:b9:4a:4e:82:0b:8b:b4:43:59:7e:42:a8:a9:
c5:71:1d:bb:13:97:19:7e:6f:75:cb:f6:c9:02:fd:
71:ff:b6:06:22:d4:46:bf:a9:7e:2f:e8:ff:9b:98:
80:2a:75:3a:83:07:f7:8f:77:aa:44:8f:a2:82:02:
f1:29:a5:29:51:64:a4:e7:2d:29:7d:04:d4:5f:ff:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:2D:BD:CD:61:57:E7:19:31:BB:8A:E1:F3:54:53:29:4E:E8:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF290BFA0AE911ECAC2CC44FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.1.0/24
Signature Algorithm: sha256WithRSAEncryption
32:18:0a:a5:85:ed:b5:27:da:ef:a4:3b:01:eb:b6:c7:d3:3c:
b1:f8:43:e3:5e:a3:c3:b1:dd:89:98:64:9b:05:13:66:8b:1b:
f3:e5:80:b3:30:2b:73:46:3b:8a:3a:f8:34:fe:65:d6:1f:8f:
1b:6b:57:99:e6:67:e1:93:29:88:59:f9:3f:e1:2b:af:72:0e:
5c:e6:dc:75:60:c7:4a:8d:53:c2:8b:17:0c:6c:f2:81:16:dd:
a7:c6:24:80:06:3e:f7:1f:e8:a6:4b:56:e4:8d:0d:67:64:0c:
9b:53:10:05:55:e3:5b:c2:31:f6:5c:bd:4a:6b:49:5f:b4:6a:
07:37:71:43:92:21:bb:0f:db:0e:27:2d:1b:db:df:5f:56:a4:
4d:bf:a3:da:1e:58:48:a8:37:f5:78:9e:fa:d5:61:ff:95:21:
51:e0:3a:7b:bc:b7:b6:6f:7d:f6:78:9c:c4:df:c9:8f:fc:fa:
17:3b:b6:dc:f4:b9:b8:8e:7c:13:e5:ce:c4:ff:3a:2e:4c:bf:
76:b3:4f:23:b4:c0:83:c2:c9:6c:4d:af:61:01:84:cb:54:3b:
72:b4:29:31:8a:70:9b:77:8b:bb:97:e2:7d:45:87:9a:04:ec:
c5:f8:52:20:c0:1e:85:26:3e:b4:5b:7c:23:a5:f7:10:1c:1f:
32:c7:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org