Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF0385E2D0011EDB3C664C5F1222468.roa
File: EDF0385E2D0011EDB3C664C5F1222468.roa (raw, json)
Hash identifier: z5CqRmbyrfdRdGtheWplg2SJiylUvkOvNZTXsEyQ9ws=
Subject key identifier: 0B:4C:CD:35:AB:6C:CA:5A:CA:50:D0:94:BB:D0:03:01:22:C3:7E:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 176B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF0385E2D0011EDB3C664C5F1222468.roa
Signing time: Mon 05 Sep 2022 09:55:53 +0000
ROA not before: Mon 05 Sep 2022 09:55:50 +0000
ROA not after: Fri 30 Dec 2022 09:55:50 +0000
asID: 328608
IP address blocks: 156.245.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5995 (0x176b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 09:55:50 2022 GMT
Not After : Dec 30 09:55:50 2022 GMT
Subject: CN=6315c7a9-ca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:3a:18:3e:3c:8e:75:69:b8:f5:6f:c4:6e:
7c:32:b7:6a:d5:2f:43:12:a0:0d:6d:a0:c3:6c:4a:
16:ab:d7:97:53:b0:b5:41:f1:61:1b:75:33:a8:61:
8f:f6:b8:ad:ec:c3:68:4e:3e:c4:00:2b:a2:6d:1d:
e1:40:09:fc:18:4e:3b:52:23:8f:0f:bf:65:32:b0:
c7:27:47:e7:85:06:82:9e:48:dd:e7:8a:7a:ea:70:
0b:60:51:29:79:49:8e:30:e9:4e:29:eb:7b:ee:28:
5a:cf:4a:77:db:6d:23:29:49:d2:7e:90:fa:1f:bf:
5e:80:d3:a3:bd:09:e9:db:b3:cc:2c:3a:65:e4:f8:
09:01:12:2b:ec:13:3b:04:f5:9d:67:ac:71:8e:fa:
7d:98:b1:3f:1b:5a:b0:af:bb:68:a5:0f:8a:d7:8d:
09:aa:80:c4:30:61:80:79:9f:b9:ff:e9:57:c1:39:
ce:6a:dd:3a:b5:c7:c7:59:a3:30:82:5e:33:e0:dc:
58:c3:26:87:87:13:e8:60:8d:a7:5a:9f:ac:05:0c:
0d:15:7d:3f:82:12:ef:c8:76:35:c0:3f:62:03:0b:
81:a5:29:2c:42:2d:08:fb:c9:e3:3d:a7:9f:c8:4f:
40:ee:94:22:9a:67:ec:da:52:71:e7:cb:19:5d:6b:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:CD:35:AB:6C:CA:5A:CA:50:D0:94:BB:D0:03:01:22:C3:7E:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF0385E2D0011EDB3C664C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:3c:97:02:8b:6c:aa:7c:c8:25:ed:ab:99:79:10:81:16:c8:
71:4c:a2:6f:3b:fb:b2:85:e8:99:04:59:d3:f8:e0:6f:cd:46:
ee:01:2c:9d:48:b9:c9:a7:d1:e5:18:22:c1:74:ed:68:21:be:
e2:04:c5:9a:ba:0e:5f:5d:7b:ed:98:8b:90:a3:e1:69:be:91:
e5:71:50:c9:8f:ea:c4:8a:52:fe:2c:dc:eb:47:ec:35:29:78:
5e:97:a0:b3:3c:68:cb:45:b4:7a:42:b8:74:ac:2a:cd:f4:56:
66:22:88:43:e2:65:ee:f8:6c:98:be:1c:2d:78:16:2b:54:ed:
f4:7d:2e:3e:ae:7a:44:e3:65:e4:8b:9a:09:37:d5:b2:b6:cb:
d7:97:10:b3:54:3e:3d:1b:c7:09:79:3e:4a:2a:06:a6:73:e9:
72:40:ec:95:4f:bf:fb:eb:c1:90:57:e2:7c:b2:c7:d3:18:be:
b2:76:f0:bf:40:2a:1f:22:e7:ef:ad:3b:77:7c:11:42:0c:cc:
25:47:b6:94:70:90:d2:2c:67:12:f1:fd:65:53:64:71:fb:26:
c3:e2:76:91:68:d7:bb:3a:e5:0b:b6:19:6c:ac:3d:76:1f:dc:
15:9d:8a:c9:fd:91:a4:19:71:91:6b:4f:52:b7:11:05:05:a3:
62:21:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org