Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47D62B6E90D11EB9963056BD8A014CE.roa
File: E47D62B6E90D11EB9963056BD8A014CE.roa (raw, json)
Hash identifier: 0Q4VJokgjRn49kuJsmkPaEZfC35A27u27LjreZJI9jg=
Subject key identifier: 47:72:3C:02:6A:47:41:50:D1:E8:04:75:A0:7D:3C:A7:7E:77:80:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0798
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47D62B6E90D11EB9963056BD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:52:31 +0000
ROA not before: Tue 20 Jul 2021 03:52:27 +0000
ROA not after: Thu 15 Sep 2022 03:52:27 +0000
asID: 1239
IP address blocks: 156.242.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:52:27 2021 GMT
Not After : Sep 15 03:52:27 2022 GMT
Subject: CN=60f6487f-80b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:9f:c0:3f:34:f4:fe:ee:e9:3c:37:9d:b2:
60:de:b7:48:72:a1:b7:1d:e3:ec:f7:c5:eb:33:41:
63:0d:6e:fc:37:40:cf:58:7b:bd:8c:51:ba:8e:0f:
e5:8f:bf:d7:87:e9:aa:1f:10:65:28:a9:1c:c6:0e:
f5:89:68:cf:53:8f:0d:76:f5:6b:70:6f:6a:ac:c6:
0d:47:bf:f1:1e:80:b0:12:85:ff:79:8d:5e:a3:77:
75:de:48:e0:f0:ad:c9:44:e1:e5:dc:76:78:d8:e2:
a0:c8:79:3b:05:7c:fe:62:4c:ea:7e:a3:b9:cd:a2:
cb:c4:e5:51:d0:5d:01:4a:a4:44:7d:53:26:a1:b2:
f2:36:3b:7e:aa:e3:fb:7b:2c:50:df:27:57:6b:23:
89:ef:b5:3e:3c:3c:8b:37:b4:13:a8:20:c8:bf:13:
7b:cd:69:a2:6f:c5:39:0f:d5:65:16:c4:a4:97:3b:
b8:6b:bb:5f:c7:16:17:53:61:60:77:db:ba:66:cc:
33:5b:46:7d:e4:18:c3:65:f2:0c:87:4a:f7:97:02:
70:c8:11:ca:b0:5b:b3:a0:bf:41:29:7c:70:01:9a:
1b:76:2d:75:ed:1c:30:9a:e0:f9:e9:b7:08:ea:62:
ea:7f:35:71:66:75:c4:98:89:f5:e9:7b:6e:8a:9f:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:3C:02:6A:47:41:50:D1:E8:04:75:A0:7D:3C:A7:7E:77:80:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47D62B6E90D11EB9963056BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.32.0/20
Signature Algorithm: sha256WithRSAEncryption
84:8a:03:38:b9:cc:1f:8f:8a:37:b8:9c:50:2e:93:b3:44:08:
96:ee:e2:e4:6b:a8:88:7c:a3:e5:54:01:89:c9:af:b8:e8:3e:
df:6e:29:6f:2b:27:ca:4c:f9:cc:8b:f9:77:60:cb:ea:35:76:
49:96:75:11:ac:d1:64:73:4b:d2:53:81:20:1c:82:02:06:ac:
fe:c1:48:cd:7d:19:08:20:fb:16:f2:de:d7:f8:fe:d0:68:1f:
23:1a:af:23:be:f1:60:a9:e1:1f:0c:c5:e4:24:de:1c:e3:bb:
e2:96:a7:e0:d5:20:0d:3a:22:1e:79:60:00:dc:ce:d0:5b:06:
95:db:e7:cf:19:03:6d:83:90:8a:e9:95:d5:99:ce:02:1d:63:
ae:9a:65:92:bf:8a:19:4e:77:53:6a:27:3e:84:46:32:07:0c:
54:b8:35:c8:33:bf:4b:49:23:db:86:cc:d4:25:6f:fe:4b:2d:
07:fd:7d:f3:43:e7:28:ba:02:a6:94:57:89:1b:d5:59:fc:67:
bb:26:57:ef:db:a1:1a:fd:76:a3:21:a4:08:5c:8c:41:29:9c:
8d:eb:35:cd:1d:b6:ea:65:12:36:26:04:d3:89:95:29:df:e8:
e7:06:42:da:c5:36:7b:03:a7:fc:b7:99:84:7a:34:32:a8:8f:
7f:c8:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org