Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6410CC6327411EDAD21FFD2F1222468.roa
File: F6410CC6327411EDAD21FFD2F1222468.roa (raw, json)
Hash identifier: MJczGOSeWv+D+gLxUe0jKiF19DmeU/kXfYc8Ke0UTww=
Subject key identifier: EE:87:17:FE:6A:73:2D:FF:81:57:DE:BA:A4:E3:D4:C6:86:B6:60:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6410CC6327411EDAD21FFD2F1222468.roa
Signing time: Mon 12 Sep 2022 08:29:05 +0000
ROA not before: Mon 12 Sep 2022 08:29:01 +0000
ROA not after: Sun 15 Jan 2023 08:29:01 +0000
asID: 1239
IP address blocks: 156.243.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6059 (0x17ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 08:29:01 2022 GMT
Not After : Jan 15 08:29:01 2023 GMT
Subject: CN=631eedd1-d6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:5e:01:0b:ce:d9:34:b3:89:18:02:fb:a0:
7a:69:be:80:18:49:34:90:cb:a6:9e:8b:34:4e:bd:
b7:0f:2c:10:f3:df:55:97:28:5b:5f:e3:19:e3:c1:
1b:2c:ab:86:fc:39:fb:ac:f7:b0:a7:6a:66:05:48:
f6:f2:5d:b4:82:31:bf:8b:d7:5f:e6:bd:29:ce:a5:
8f:fa:fb:63:60:1e:0f:d3:d4:ff:e7:39:29:24:0e:
c4:f1:e9:c3:88:8b:fe:a1:b8:24:ee:51:44:41:e3:
e1:ac:7a:94:32:35:35:75:aa:b1:c1:42:b2:c7:fd:
60:e8:c0:14:ad:86:df:f4:0f:d5:c6:0a:e4:d4:8f:
c8:db:93:ec:69:34:fc:e9:7a:09:04:cb:3a:d0:2c:
e8:87:86:94:03:9d:94:f0:28:fc:46:ed:aa:53:12:
a7:16:e9:2a:b9:f1:36:25:1d:21:9c:52:7f:06:9c:
2a:a6:7e:ed:8b:b7:5d:f3:e9:b2:14:66:a0:11:e2:
f0:76:fb:b2:ae:7e:7c:5f:f2:01:b2:bf:3e:f3:8a:
ba:75:48:9d:1b:6f:1f:32:1d:50:69:6f:0a:2a:7e:
65:96:00:50:ec:c5:28:a6:73:0a:a8:e5:68:89:de:
77:35:39:9c:23:1f:c3:4d:bb:61:8f:10:36:45:6a:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:17:FE:6A:73:2D:FF:81:57:DE:BA:A4:E3:D4:C6:86:B6:60:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6410CC6327411EDAD21FFD2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:e8:d6:49:63:31:f2:4f:70:c2:92:b2:50:28:aa:fb:62:62:
d6:f3:04:3d:f6:46:d6:cc:0a:61:f0:14:49:51:79:38:09:a7:
74:43:16:30:c3:9b:8a:6f:f0:db:68:ef:f8:2b:7d:db:8b:c4:
bc:5b:05:5c:b6:6c:3c:40:20:bf:8f:40:14:a6:f8:bc:f6:0c:
69:a2:67:8a:a4:64:82:70:10:ad:70:ff:66:3f:e7:e4:4b:57:
12:8f:76:25:80:24:87:58:1e:d2:0d:75:af:0e:7e:4f:8e:5c:
e7:e3:8d:7b:9e:c1:4f:10:61:32:07:1e:9f:4a:c1:8e:11:40:
63:c4:79:3d:ad:08:da:81:60:85:13:6f:51:bb:eb:1b:77:6b:
7a:e0:a6:bd:b0:dc:f6:bd:e5:b1:02:84:03:0e:89:eb:db:d5:
60:02:6d:08:da:36:85:71:8b:f4:fc:e5:01:2e:9f:fb:28:41:
ab:26:41:80:c4:93:c9:b2:67:64:eb:cf:88:ff:ed:c7:f3:69:
b3:00:49:d7:04:7a:15:02:65:3b:83:70:65:ad:48:24:db:cf:
48:7c:81:4e:1b:f5:b3:da:c1:90:25:ca:9a:28:4f:35:5c:88:
68:c9:6e:c1:c5:4a:a5:a1:53:e0:b3:29:da:aa:72:5e:0c:ba:
9d:4e:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org