Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E451535E403F11EC97C2B62ED8A014CE.roa
File: E451535E403F11EC97C2B62ED8A014CE.roa (raw, json)
Hash identifier: 6mVaEyySjR1JD1hg3r9A7b0VUooMXdnlhKP2EtaMdX0=
Subject key identifier: 60:12:5B:EE:0F:71:C1:C5:28:25:6D:6A:C6:33:2C:C9:12:9E:5F:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E451535E403F11EC97C2B62ED8A014CE.roa
Signing time: Mon 08 Nov 2021 02:59:30 +0000
ROA not before: Mon 08 Nov 2021 02:59:25 +0000
ROA not after: Wed 10 Aug 2022 02:59:25 +0000
asID: 136744
IP address blocks: 156.235.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 02:59:25 2021 GMT
Not After : Aug 10 02:59:25 2022 GMT
Subject: CN=61889292-16a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:44:4d:73:b9:7b:b2:50:16:4b:91:8a:2b:
1e:ac:0d:64:f7:6f:3a:0a:a0:ef:e2:f6:6a:9c:b1:
b6:fb:dd:81:a7:59:10:43:09:8d:82:1c:23:0a:09:
ef:cd:d6:f4:83:5a:87:f9:d8:1b:5c:0c:23:45:36:
6b:1c:2b:c1:51:04:89:d4:96:18:af:21:2e:40:1d:
03:ec:a5:21:ae:3a:13:d3:9e:c8:3d:fd:83:39:e8:
d9:7e:7a:e8:6b:cf:fb:ca:b2:d3:aa:cd:b8:49:4c:
e1:5e:40:11:41:91:b0:b8:75:20:50:72:2c:e1:b4:
79:4d:04:1c:1e:05:2b:49:ee:28:9b:80:c3:54:05:
9e:45:65:b2:ae:80:75:00:11:c8:bc:ca:fe:fb:1e:
c6:60:d6:97:1a:2d:2f:f9:2a:b4:15:88:69:9d:1e:
ce:bc:9a:4f:35:f9:bb:b7:4a:6a:8b:16:ca:61:c9:
7b:b6:4c:da:c4:e8:3a:dc:f1:9e:17:fa:8f:b1:29:
9a:96:83:01:12:90:fc:ff:94:c9:2e:95:85:a3:e0:
e6:f4:c2:bd:28:ba:f6:c7:e7:04:e7:fd:45:66:aa:
e6:52:8c:0b:3d:2d:c6:39:f0:8e:62:ea:04:a6:5f:
03:b0:14:42:3d:79:21:fd:e9:68:59:ba:9b:9c:60:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:5B:EE:0F:71:C1:C5:28:25:6D:6A:C6:33:2C:C9:12:9E:5F:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E451535E403F11EC97C2B62ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.30.0/24
Signature Algorithm: sha256WithRSAEncryption
87:69:e3:e1:b2:44:7a:61:6c:85:0a:c8:bc:af:ca:9a:4c:2f:
09:9d:b9:31:75:a2:cd:a6:1c:17:7e:f6:9e:2b:61:fd:60:d6:
36:53:b1:e5:33:f0:75:ed:85:f5:85:04:4c:f5:4d:06:c0:bf:
c6:43:c4:64:56:5c:a0:29:85:84:a3:59:4d:6d:b3:b5:28:9a:
1b:61:2b:04:b3:22:01:3d:41:c1:c6:11:16:ae:34:1f:e2:36:
96:3d:78:11:d1:1f:df:24:4c:bf:d0:73:06:60:dd:80:66:58:
05:2a:bd:3d:b9:08:9a:6e:10:a9:17:ad:34:6e:2e:93:fb:48:
9e:e8:fe:22:fa:29:3d:84:90:5a:0f:fd:85:d4:cd:c3:50:d5:
bb:52:a1:df:3f:db:a0:e7:3a:52:7e:a0:20:86:e4:1c:e7:10:
7d:2e:51:28:76:37:e0:c5:85:bb:81:b0:83:59:e4:70:c2:d9:
97:06:d4:3c:f6:73:41:72:09:90:be:1e:3f:42:e5:ad:85:a2:
1e:bb:f1:b9:74:98:8e:c8:27:64:72:7a:54:f1:a7:64:5b:a6:
44:c0:82:77:b8:5a:c0:48:dd:73:48:95:73:5a:10:43:0a:1c:
d0:2d:05:e2:9e:8d:dc:70:8b:0f:ab:be:f4:53:aa:85:33:c2:
1e:55:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org