Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6578790750011ECB64E8C975A40D577.roa
File: E6578790750011ECB64E8C975A40D577.roa (raw, json)
Hash identifier: K91X3JSIYhj2QdL3k7+4DW+n1mZ1QOxsoA1rIYkH/Xk=
Subject key identifier: D5:D6:16:B5:17:44:42:F1:B4:A9:B1:94:8A:83:F9:39:EB:DF:09:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1187
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6578790750011ECB64E8C975A40D577.roa
Signing time: Fri 14 Jan 2022 06:12:07 +0000
ROA not before: Fri 14 Jan 2022 06:12:03 +0000
ROA not after: Tue 31 Jan 2023 06:12:03 +0000
asID: 139057
IP address blocks: 156.251.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4487 (0x1187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 14 06:12:03 2022 GMT
Not After : Jan 31 06:12:03 2023 GMT
Subject: CN=61e11437-b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:8b:fd:04:7a:d5:1f:a8:55:e2:26:cb:66:
c0:10:5d:b1:4a:89:12:09:ed:91:03:e3:64:01:3a:
f4:d2:17:71:a1:cb:66:73:b0:1c:a2:60:3d:20:5b:
69:97:a4:c7:21:f9:10:03:d8:a2:5e:d2:36:9e:3d:
25:7d:6d:85:31:fc:b1:3b:e4:45:c0:99:9b:14:a8:
69:38:95:a5:ef:7a:40:9f:38:47:df:af:99:dd:a3:
d0:86:69:7a:0c:51:ae:21:cc:fd:4a:4c:64:62:17:
78:f7:16:6a:04:d8:5b:02:7a:60:db:e8:b7:d4:0d:
bd:fa:09:99:58:fe:13:0e:21:cc:5e:9a:ce:1a:ba:
5d:c1:c6:a2:20:91:68:70:47:70:4d:ab:4a:20:a8:
11:f0:a7:20:9b:09:eb:93:d5:df:5c:fa:3b:29:02:
80:02:3b:69:57:e2:a4:2d:55:bd:c2:cf:1c:bc:58:
ac:13:99:19:f4:e1:41:6f:8c:11:06:ab:4b:15:bd:
fb:8c:bb:aa:3b:4a:a2:a5:08:5c:fa:9d:2c:d3:66:
0e:21:18:00:19:ec:7d:13:97:fd:d8:03:47:a4:b5:
e5:be:00:af:93:25:72:b7:62:55:ae:73:dd:47:d0:
f6:7e:2d:eb:09:ef:4a:39:20:ed:91:08:23:34:25:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:16:B5:17:44:42:F1:B4:A9:B1:94:8A:83:F9:39:EB:DF:09:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6578790750011ECB64E8C975A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.64.0/20
Signature Algorithm: sha256WithRSAEncryption
29:48:f6:90:c2:03:9d:a7:83:b5:74:00:e3:f8:a8:2b:21:73:
5d:20:51:fd:e6:41:6d:7d:65:e0:d1:26:8a:34:29:f9:a7:0b:
ef:ad:15:be:99:c4:86:a6:de:f1:3f:2b:5f:14:87:6a:f1:c5:
07:d5:99:e1:9f:8f:3a:92:1f:e2:f1:9a:63:51:86:97:e2:89:
b2:82:59:7d:6e:79:b5:6b:72:10:9a:9a:0f:75:f0:b6:e3:a5:
81:0d:72:e8:01:72:d2:3a:e7:8e:a3:62:02:12:69:cd:4d:cc:
5e:10:1e:b0:ad:2a:44:0e:c2:67:af:99:c2:fb:e3:9a:e0:60:
84:9a:d5:d1:30:44:73:6f:2c:f0:66:16:5e:d9:31:52:5d:8c:
48:11:67:e3:09:1d:a3:fa:c1:2f:09:3c:01:4b:4f:55:fc:15:
29:ea:e0:42:1b:d7:f1:fa:86:a5:69:72:72:97:9e:f1:81:25:
f6:08:4d:40:54:74:92:e5:72:a2:d1:99:0c:98:17:66:f0:cf:
76:5f:a7:1e:44:0f:8c:17:55:d4:43:de:06:71:23:a7:70:b7:
66:eb:78:69:0e:62:de:16:69:62:86:81:ab:a5:95:e5:7b:fe:
30:b2:2f:f5:69:44:39:96:28:f4:59:34:21:6c:36:0e:7b:41:
25:20:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org