Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA5E84ECE89611EC928653C7F1222468.roa
File: EA5E84ECE89611EC928653C7F1222468.roa (raw, json)
Hash identifier: /TCjfr0yj/cR5fm5GDhK4CdG6iqmdoas1+ArHhFHsTE=
Subject key identifier: 42:45:F9:8B:7D:4B:C4:F1:A8:50:8B:C7:8F:9D:97:10:43:CD:74:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1478
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA5E84ECE89611EC928653C7F1222468.roa
Signing time: Fri 10 Jun 2022 08:25:42 +0000
ROA not before: Fri 10 Jun 2022 08:25:38 +0000
ROA not after: Wed 30 Nov 2022 08:25:38 +0000
asID: 133199
IP address blocks: 156.245.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5240 (0x1478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:25:38 2022 GMT
Not After : Nov 30 08:25:38 2022 GMT
Subject: CN=62a30006-5783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:76:50:30:7c:42:04:85:08:9f:d3:9f:02:
f9:f6:b4:b5:da:97:9a:bd:ed:e3:ba:d3:24:90:f1:
39:c0:cd:30:96:9a:30:7a:7b:bd:b8:c0:cf:f7:f7:
10:1e:ff:8a:71:c7:0e:ea:16:a4:bc:a3:7d:9c:94:
9c:f5:a2:24:33:a7:dd:62:79:99:8e:31:c7:44:ea:
27:50:e4:63:92:d3:05:ee:f5:2d:72:81:a0:e9:ec:
80:7c:c4:3a:61:43:24:2d:48:36:f0:65:4e:0d:67:
bd:a8:9c:ca:f4:fa:96:2b:9e:04:c2:f1:1e:8d:fe:
b9:04:db:9d:bf:aa:f2:e6:cb:12:e7:8b:40:4c:ec:
b8:fa:1d:86:ca:48:28:51:da:74:6e:9d:2c:68:ee:
58:ad:5c:10:6a:5b:cf:2f:29:f2:97:92:60:54:50:
d0:57:5a:b1:54:f0:8d:61:97:b9:37:fa:07:df:af:
8a:38:2a:61:24:d1:51:46:2e:8f:b9:76:1f:12:9f:
d5:9d:bd:7d:f5:1b:6d:6a:ff:30:b7:f0:e5:97:15:
e3:a9:23:78:28:82:6c:df:5e:a6:06:05:d2:85:2d:
28:80:98:d4:3d:de:5a:06:f5:d2:34:cd:c0:18:f4:
8a:40:1b:99:62:ba:ca:a9:81:22:22:9a:e3:49:39:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:F9:8B:7D:4B:C4:F1:A8:50:8B:C7:8F:9D:97:10:43:CD:74:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA5E84ECE89611EC928653C7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:68:72:56:fc:4f:ef:c6:7a:b2:25:c4:d6:c3:fe:8b:30:bb:
7a:5d:7e:13:66:ac:62:95:4b:d9:3c:ae:cc:45:2c:63:a0:af:
3d:92:11:46:72:38:bf:35:70:23:e6:e7:ee:17:75:84:fd:c5:
f5:d6:5a:fc:33:89:56:77:c9:d4:0d:de:88:10:c5:76:c6:7d:
f5:e6:ee:ec:b2:9e:6a:7b:51:57:9a:ba:7a:c2:73:3f:5f:af:
b3:76:40:e7:78:9d:b3:8f:f5:86:67:d7:6e:6c:3b:7b:88:2a:
88:e9:59:6f:40:d4:b2:51:1e:2c:3f:a9:8f:e0:53:fc:67:98:
ff:b3:45:ba:c5:de:53:e5:ad:b0:65:94:60:6a:41:c7:12:d1:
cb:6e:50:32:64:49:a8:3b:14:b7:d1:9c:51:11:15:50:5b:15:
ad:f5:77:8a:d3:ce:0a:2a:53:31:53:5d:5d:bc:76:e5:cf:f2:
5c:86:9b:68:68:86:bf:2d:bc:93:08:c6:59:77:0b:04:96:45:
c7:79:f2:a7:44:0e:fe:38:be:de:59:e0:5d:df:00:40:fa:fe:
b8:5d:40:2c:4b:8c:f0:87:75:96:93:d8:16:ad:dd:09:90:e4:
de:ee:59:aa:cf:6c:a5:c7:c4:20:fc:48:88:6a:90:79:df:f2:
0a:54:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org