Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D5DB813DD11EDA42C5ACCF1222468.roa
File: EA8D5DB813DD11EDA42C5ACCF1222468.roa (raw, json)
Hash identifier: xu4d7KxUJgSXdRQZSXHwR1XacmEyaWJGnOojY96HQS0=
Subject key identifier: EC:26:89:A5:0C:B1:B1:A3:83:CD:EA:52:01:8F:47:F8:08:42:4E:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D5DB813DD11EDA42C5ACCF1222468.roa
Signing time: Thu 04 Aug 2022 10:12:16 +0000
ROA not before: Thu 04 Aug 2022 10:12:12 +0000
ROA not after: Sun 30 Jul 2023 10:12:12 +0000
asID: 38136
IP address blocks: 156.241.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5748 (0x1674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 10:12:12 2022 GMT
Not After : Jul 30 10:12:12 2023 GMT
Subject: CN=62eb9b80-5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:fb:c2:9b:99:73:9f:20:a0:09:51:dd:81:
74:6a:bb:f6:e4:af:86:4f:55:78:d5:80:b2:7b:c2:
7e:89:64:e0:45:e7:ce:a4:e3:07:08:82:82:55:99:
0c:b4:c6:72:66:61:62:37:69:ca:d7:b3:90:7e:2c:
3d:6b:03:41:a1:08:72:02:77:cd:25:0d:fb:0b:98:
f7:74:e2:4f:05:72:00:01:51:78:94:e4:bd:fd:2a:
e7:29:56:08:93:e2:5c:3c:7a:ea:12:67:db:75:1b:
e6:4e:11:38:14:b2:24:01:a9:84:83:e9:b8:b8:59:
c3:a8:77:17:ac:cf:e8:dd:e3:35:36:e2:f1:24:99:
18:ea:1b:df:13:dd:b8:5f:02:18:55:37:3b:cb:c8:
33:83:b5:25:9b:8a:19:96:1b:c1:8a:0a:0c:73:45:
7d:aa:ea:c0:18:99:1a:ce:0d:7b:a2:ac:0c:e4:f5:
68:8a:53:95:3b:dc:a4:da:6c:48:0b:a3:21:47:d2:
1e:b4:c6:6c:aa:93:99:bd:47:2f:bf:54:1c:85:9d:
e7:a5:2f:a2:a0:36:ca:2d:1c:4e:17:e7:65:6f:d8:
a6:ef:16:f5:85:0f:92:03:6b:69:78:ca:4a:d1:a0:
c5:35:cc:57:8b:bc:cc:12:95:cf:43:f0:5b:29:99:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:89:A5:0C:B1:B1:A3:83:CD:EA:52:01:8F:47:F8:08:42:4E:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D5DB813DD11EDA42C5ACCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:79:19:b2:8c:f6:af:1b:da:ce:d6:db:c6:5a:c4:6d:91:96:
2c:67:dd:b1:38:65:73:9c:bf:61:4e:f6:33:28:fc:9b:05:75:
fa:f0:5f:f7:43:9a:a9:ed:45:74:ae:47:56:ce:f1:2a:ec:53:
d6:f5:6e:ec:2d:5b:d7:30:53:0f:cf:0e:fe:8f:4f:da:41:bc:
51:e2:41:3c:45:b6:e0:b5:37:9c:0d:e6:f0:09:d2:07:94:75:
31:f0:df:a5:88:ff:a9:70:64:fd:26:86:45:2f:45:c8:c3:57:
a9:86:57:b4:82:0a:3e:f1:43:f8:d9:8f:a3:2c:53:34:50:37:
7f:c2:2c:2b:26:b2:fa:b6:e6:72:6b:18:21:fc:57:3f:18:3b:
ea:bb:51:3e:b1:de:c6:4c:bc:b0:d3:bb:1e:4b:3f:59:26:ac:
ed:22:9f:98:a3:1a:e1:60:9c:3c:38:28:a3:36:f7:3d:e4:86:
14:53:9d:2a:65:27:4b:3c:73:f9:2d:1f:55:e3:19:6d:31:cb:
56:c0:be:e4:6a:77:ed:f3:55:ca:ce:fe:92:c8:cc:69:53:2f:
96:3b:7e:aa:3c:03:01:f9:bc:51:42:b4:76:73:e1:82:85:5d:
b8:ca:d6:c7:f0:9e:0f:e6:74:63:90:3b:c6:41:b0:dd:d8:57:
65:a8:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:14:45 2023 by rpki-client on console-fra.rpki-client.org