Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F84BB08ABC6D11EB80BE6F7AF8AEA228.roa
File: F84BB08ABC6D11EB80BE6F7AF8AEA228.roa (raw, json)
Hash identifier: GO45R88++JFDiONI5ueQMB7JTPzfrNgaJriALP1Hpio=
Subject key identifier: 8E:E2:05:5D:2B:BC:9D:EA:C4:2A:BE:FF:4A:9F:18:24:E5:79:46:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F84BB08ABC6D11EB80BE6F7AF8AEA228.roa
Signing time: Mon 24 May 2021 08:56:47 +0000
ROA not before: Mon 24 May 2021 08:56:43 +0000
ROA not after: Sun 24 Jul 2022 08:56:43 +0000
asID: 1239
IP address blocks: 156.235.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:56:43 2021 GMT
Not After : Jul 24 08:56:43 2022 GMT
Subject: CN=60ab6a4f-89fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:3d:61:b2:f5:f1:fd:e5:d9:4f:15:7d:81:
6a:ec:43:dc:85:08:31:64:aa:65:8a:06:e5:0b:7b:
95:15:35:1c:ce:93:85:7d:d1:82:04:8b:4e:71:4a:
e9:4c:b1:d6:39:3b:99:4a:13:1a:bf:45:89:68:27:
31:17:5c:a8:b7:50:17:d3:fc:c4:e2:2f:0c:4c:af:
e9:cc:77:a1:bf:4a:ac:e6:ec:38:c5:3f:c2:6b:0c:
88:33:36:c6:4c:b0:7e:67:07:05:5e:42:25:9b:26:
4d:28:52:50:85:13:1e:52:12:d4:cb:a9:83:8f:8d:
0b:c7:a5:02:37:9d:d6:f6:11:37:77:8c:fa:11:80:
23:b0:c4:2a:44:35:a6:85:23:c6:36:82:f8:c0:2d:
61:2d:c9:35:b7:c1:3d:be:74:7e:70:8b:19:7f:cd:
55:fa:8d:98:3a:ab:a3:30:f8:9d:4d:3b:7c:60:49:
6b:f2:aa:0b:73:b0:17:bc:ab:5c:15:78:ce:44:be:
16:54:09:41:b4:5c:74:dd:97:40:55:bf:05:15:cc:
9a:f9:57:63:29:1c:0f:2f:02:71:35:b0:ef:85:6a:
4b:af:81:6a:35:2c:7c:6e:ca:27:30:c5:bf:86:d9:
bd:05:52:0c:0c:11:42:0c:01:35:d8:02:9b:19:10:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:05:5D:2B:BC:9D:EA:C4:2A:BE:FF:4A:9F:18:24:E5:79:46:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F84BB08ABC6D11EB80BE6F7AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7d:ad:64:24:92:31:e4:e2:29:ab:ad:ee:ec:f0:f3:02:c4:
d3:d4:b0:2e:0a:0b:b7:ec:04:95:c9:ae:a0:b5:f7:d1:8a:56:
11:21:41:36:cf:83:66:2c:13:e2:07:ac:6a:07:5d:3d:8a:94:
65:43:60:3c:d1:ac:a2:f2:26:7a:24:0d:30:95:75:7b:6c:3c:
a0:9e:14:af:7e:1d:de:ca:6d:2f:c9:2d:9c:d8:86:e2:90:a1:
da:dc:b5:62:50:db:fb:a0:32:c7:59:57:79:aa:b7:f2:2f:66:
c4:16:1e:a4:a7:ce:18:f5:d1:3c:48:c2:23:7a:e1:5d:cb:0e:
cf:58:c7:b7:5c:d5:f9:dd:7b:a8:b6:47:22:d3:23:bf:79:af:
23:21:60:c1:22:64:e6:9d:11:7f:11:a2:fc:cf:76:e9:ff:fa:
74:f2:57:17:86:61:f4:f3:e5:43:c3:ca:d3:4c:f1:3a:20:4b:
13:f5:12:8c:46:26:00:a2:a2:c0:38:35:0e:5b:eb:52:8e:75:
c3:43:f3:32:15:76:f7:f6:82:af:ee:0e:ad:97:01:f5:00:0e:
d0:ee:de:58:31:54:12:1b:4e:bc:f4:82:82:00:d9:c6:3a:45:
85:9e:9c:7d:7f:96:61:c3:8b:81:f2:07:29:85:d6:22:6b:a2:
f2:6d:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org