Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBFED03832F411ECAB42A23DD8A014CE.roa
File: FBFED03832F411ECAB42A23DD8A014CE.roa (raw, json)
Hash identifier: NboLLXI4ICgnZvQBdlsy00O46hpv46dvvt5VKdQ9ArY=
Subject key identifier: 2F:A4:6D:2F:BE:48:FC:67:6F:47:B3:60:80:2F:1F:F5:1B:44:F8:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBFED03832F411ECAB42A23DD8A014CE.roa
Signing time: Fri 22 Oct 2021 05:00:32 +0000
ROA not before: Fri 22 Oct 2021 05:00:27 +0000
ROA not after: Mon 22 Aug 2022 05:00:27 +0000
asID: 3257
IP address blocks: 156.239.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622 (0xa3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 05:00:27 2021 GMT
Not After : Aug 22 05:00:27 2022 GMT
Subject: CN=61724570-70ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:c7:8f:af:f6:cc:8d:56:62:16:91:a3:a1:
3f:ea:db:2c:a7:5a:1a:23:f3:0b:09:77:a3:a4:0e:
bd:17:1c:2c:64:d2:2c:02:f0:76:9d:68:07:92:7a:
b0:c2:d1:78:3b:ad:d3:24:82:22:e9:91:a8:fb:af:
65:74:9f:7a:c1:7b:45:c1:e5:be:7b:db:f5:91:db:
71:1d:ee:ee:4a:f4:4f:df:07:e8:88:10:e6:c6:23:
99:02:af:af:cc:6b:96:3d:46:a1:6b:d0:cd:1f:53:
58:65:25:93:a1:7f:6b:50:a2:ee:88:82:65:e6:0c:
83:dc:58:79:f1:71:71:4c:24:57:5d:e9:4f:3b:0f:
98:a5:0a:88:a5:6e:d8:1f:56:67:09:31:85:27:10:
0c:32:6f:30:65:00:c9:7e:d4:44:f3:2c:55:a5:0f:
1e:68:51:90:b4:01:70:90:99:07:7b:e5:df:6f:27:
e4:fe:fc:88:b8:61:a4:0e:98:93:98:6f:09:d9:1e:
1d:a8:d5:36:57:40:b3:92:77:b5:e9:39:64:ab:05:
ab:4e:5c:32:63:88:e6:59:c6:a7:99:a2:46:da:62:
ce:a8:34:7c:f4:6a:cf:40:a4:83:63:ae:77:aa:47:
1b:0b:f9:b3:e2:7c:85:29:e8:88:be:d6:27:9e:8b:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:6D:2F:BE:48:FC:67:6F:47:B3:60:80:2F:1F:F5:1B:44:F8:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBFED03832F411ECAB42A23DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/22
Signature Algorithm: sha256WithRSAEncryption
03:36:eb:e9:bf:78:05:15:0d:d8:6c:bb:17:0c:8d:9f:e9:a7:
f8:dc:e8:0c:a9:e8:fe:68:99:8b:9e:38:53:78:f6:bd:44:4a:
eb:ed:17:72:0b:30:a3:65:83:e6:13:08:5f:78:ca:c0:85:14:
d2:cb:46:64:7c:a7:35:d7:05:26:b7:70:89:ed:0e:b6:2d:37:
b9:b0:c2:9f:6d:c0:86:54:d2:91:52:9c:3b:f8:5a:bf:12:58:
aa:31:4c:bd:81:1c:c7:1c:b2:48:a2:79:3f:06:33:d5:5d:0d:
a5:51:fe:13:8c:3b:f1:ed:bd:7f:88:14:2c:7f:e5:1a:43:f0:
6c:26:b1:78:07:4c:eb:9e:e1:83:3e:de:3d:5d:b8:d2:fe:74:
5a:11:61:43:f4:cb:29:50:24:46:37:54:d5:b8:86:e2:0a:dc:
04:2a:38:d1:10:df:b2:22:a5:d7:4d:45:dd:d0:d6:24:78:18:
d3:25:eb:57:36:16:c6:7e:b4:43:2f:4d:55:ba:94:0b:ee:28:
56:84:5e:0e:04:57:bb:0f:79:ae:7b:e1:27:04:ea:35:66:b8:
00:33:50:83:77:c8:df:a0:05:35:70:21:fd:39:7a:d0:e3:38:
ae:b5:b4:21:e3:2b:7f:f0:15:a7:33:85:f7:43:1c:01:d6:e7:
e2:54:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org