Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C04E416C411EC8EDD3971D8A014CE.roa
File: F38C04E416C411EC8EDD3971D8A014CE.roa (raw, json)
Hash identifier: D54iVmWa8C0rllW8KHKkHNnPtcj2JZVpRiDZFB/AbGg=
Subject key identifier: 5F:5E:6B:EA:01:46:54:8F:DB:73:E6:F7:E7:BD:58:96:A9:8F:B6:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0963
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C04E416C411EC8EDD3971D8A014CE.roa
Signing time: Thu 16 Sep 2021 08:06:10 +0000
ROA not before: Thu 16 Sep 2021 08:06:06 +0000
ROA not after: Wed 16 Nov 2022 08:06:06 +0000
asID: 135097
IP address blocks: 156.250.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 08:06:06 2021 GMT
Not After : Nov 16 08:06:06 2022 GMT
Subject: CN=6142faf2-b4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:33:5f:db:f6:8b:e6:91:47:03:db:46:7d:
0c:a5:0c:93:9a:f1:10:eb:2a:f0:b3:57:35:64:24:
ca:b5:ed:df:6b:25:4d:ce:e4:61:92:20:3b:2b:cd:
9f:e5:0c:ec:f4:44:3b:79:a4:3a:04:34:d2:6a:68:
75:e4:af:b1:e6:7b:2c:6f:74:36:d4:c7:57:e9:8f:
ad:4a:f6:e4:f7:7f:e5:98:43:1a:86:a4:61:a7:06:
9d:71:de:05:a1:a6:6a:f7:ce:0d:04:84:8a:5b:65:
5a:a5:2c:25:9b:23:c0:19:ea:74:b1:b0:c1:e9:d2:
49:bd:85:4c:d7:56:2c:ac:dc:50:bc:1d:33:48:40:
d0:df:cb:8d:51:88:4a:4a:fa:dd:20:b9:79:a3:c0:
53:c9:22:77:38:98:f8:61:64:a4:1e:eb:be:67:4b:
c1:01:d0:cc:53:cd:53:fd:17:86:dd:c4:73:3f:2f:
55:27:2e:3e:37:23:70:af:23:20:dd:a3:12:01:c1:
de:75:43:54:19:2c:cd:f5:f4:79:5b:4b:bd:53:f2:
23:c5:e7:86:89:cc:88:13:26:f0:7f:a0:70:1e:19:
8b:98:38:b2:ce:c5:77:70:fe:16:cb:08:68:66:de:
83:f4:5e:13:04:ad:9e:99:4b:30:d0:e2:28:9d:10:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:6B:EA:01:46:54:8F:DB:73:E6:F7:E7:BD:58:96:A9:8F:B6:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C04E416C411EC8EDD3971D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:64:98:6c:73:21:3a:25:03:b4:29:50:a0:b7:83:48:4b:7a:
89:d4:46:43:61:4d:36:cc:18:b8:76:f5:0c:55:4e:74:33:2b:
03:8a:e3:ba:7e:32:19:7c:53:33:5a:28:0c:c2:60:b0:cb:95:
ab:4b:19:9d:db:60:1c:45:98:10:63:82:c4:96:31:da:8f:54:
5c:bc:c5:64:b0:14:08:71:4b:02:f3:46:d8:7c:4f:92:a3:10:
9a:0d:3e:7f:ce:1c:7f:20:39:2d:52:0f:bf:9a:b3:a9:46:dd:
1c:32:47:03:83:c0:ac:78:9a:ca:54:88:e9:88:e0:7f:18:3c:
f7:6d:47:69:59:48:d0:7f:f4:b7:1d:7a:f2:0e:7e:21:5d:cc:
16:dc:5c:51:6a:40:45:ad:92:5f:90:02:67:e0:2b:cb:06:02:
a4:3b:53:ea:68:14:46:bc:cd:4a:bf:23:b3:ff:86:5b:98:0d:
7a:be:32:fc:af:07:e1:ec:29:62:c3:e7:4a:95:7b:15:de:c4:
eb:d8:0f:76:e8:e3:44:f7:56:46:83:e1:8f:99:c4:4e:fe:3d:
c7:f6:c3:b8:a7:b6:8f:e1:72:a4:c7:99:86:fd:a4:e3:8a:e2:
f8:9d:1c:ad:e3:cd:4f:54:b4:ce:7c:c2:03:14:91:16:f1:64:
4e:2f:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org