Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F821F570E90D11EB86D21F6BD8A014CE.roa
File: F821F570E90D11EB86D21F6BD8A014CE.roa (raw, json)
Hash identifier: IFKMycCLYEzgFaWdIhqW4UQYhCCY+PaNmdN6ETE7LyQ=
Subject key identifier: C5:68:CB:18:55:8A:84:52:D0:3B:94:9B:8E:B3:7E:F7:11:AB:D6:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 079A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F821F570E90D11EB86D21F6BD8A014CE.roa
Signing time: Tue 20 Jul 2021 03:53:04 +0000
ROA not before: Tue 20 Jul 2021 03:53:01 +0000
ROA not after: Thu 15 Sep 2022 03:53:01 +0000
asID: 1239
IP address blocks: 156.242.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 03:53:01 2021 GMT
Not After : Sep 15 03:53:01 2022 GMT
Subject: CN=60f648a0-02d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:ff:0d:52:54:ef:68:90:1d:5a:65:0e:e5:
5e:47:cb:4b:9e:b9:9b:61:07:36:fb:e7:3c:50:48:
24:27:8a:ac:33:b1:62:ad:c6:7b:3b:db:f1:a7:10:
b6:61:ea:a1:0c:8c:38:cf:0f:28:79:4b:8e:67:ac:
16:f2:64:dc:c4:0b:44:a0:0f:be:b6:8d:6a:87:73:
28:e0:13:e7:c1:a7:15:c2:87:09:1c:08:5c:70:63:
6d:8f:1c:0e:7b:54:62:58:31:13:96:43:67:fe:46:
16:23:fb:54:13:f6:25:ff:53:9c:62:e5:35:c8:22:
54:15:e1:8b:71:cf:93:12:b8:f0:28:17:63:6b:ab:
5d:19:57:2c:96:cc:62:88:29:6a:d6:56:2a:6a:d8:
a5:fe:85:7e:9f:a1:af:aa:e6:a7:61:75:6c:a5:51:
04:66:9a:61:26:9e:72:b3:1b:fe:81:49:ed:c5:01:
b1:9a:3a:15:d0:36:b7:4b:eb:9d:8a:db:ac:db:db:
53:99:6c:0d:43:69:c7:15:92:b3:58:ca:88:ac:05:
9b:65:ca:6d:d0:d2:61:10:28:91:ac:23:d7:2d:5d:
c4:f7:e6:e8:f5:9b:20:0e:ee:05:0e:73:71:d7:0e:
f2:60:82:9b:5b:0b:50:cc:ac:d9:00:f4:00:13:61:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:CB:18:55:8A:84:52:D0:3B:94:9B:8E:B3:7E:F7:11:AB:D6:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F821F570E90D11EB86D21F6BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.48.0/20
Signature Algorithm: sha256WithRSAEncryption
91:77:5e:54:12:03:04:49:37:77:cf:c4:1a:d2:2e:f2:dd:57:
6c:d3:37:f7:dc:cb:a8:8f:0f:bf:2f:05:31:fc:07:0c:1a:d8:
06:57:7a:6f:70:c9:47:14:ae:fe:28:02:74:8c:d4:69:5f:de:
fb:0e:69:c7:fe:99:2a:ca:6f:0b:a4:3b:2b:c2:17:c1:67:23:
e6:0a:50:a0:fc:5f:2b:88:c2:31:fb:f7:46:e8:ce:5d:0c:11:
b7:b4:23:a6:ad:eb:7d:ce:43:d9:4f:a3:d0:aa:9b:dc:7d:0b:
53:38:3c:cb:35:e2:1f:d8:00:95:70:22:c3:ca:cb:10:e0:53:
20:23:19:6a:9e:6a:77:8a:ea:9a:e7:a2:a4:84:71:de:5e:79:
2c:36:6c:79:21:16:c8:61:b6:bf:40:1a:c1:1b:3b:53:8f:28:
0e:90:db:43:c1:8e:d8:1d:40:eb:26:2a:0e:67:ce:c8:d3:0a:
0b:a9:d0:15:71:c6:bd:2f:c2:03:ed:5d:74:9a:95:7c:3a:0e:
88:f4:f5:41:8b:8c:51:bb:06:6c:4f:9e:6f:5c:c6:55:b1:80:
4f:d4:9a:d9:63:7a:00:d4:67:1c:f0:4d:fa:f2:63:59:73:42:
10:bf:b6:ce:90:64:db:1e:db:93:c2:91:07:b5:15:14:f5:af:
19:49:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org