Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFB793005F311EEB9025C314AD9E6FC.roa
File: FDFB793005F311EEB9025C314AD9E6FC.roa (raw, json)
Hash identifier: wJMDgg1ZiKesN+fE0SrwUpXvNCM+69g255Yx/bY4WDU=
Subject key identifier: 36:F7:C8:B3:B3:F3:93:A4:CA:07:3C:CB:FF:F8:72:BD:88:71:18:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFB793005F311EEB9025C314AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:59:59 +0000
ROA not before: Thu 08 Jun 2023 11:59:55 +0000
ROA not after: Wed 01 May 2024 11:59:55 +0000
asID: 137443
IP address blocks: 156.227.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10860 (0x2a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 11:59:55 2023 GMT
Not After : May 1 11:59:55 2024 GMT
Subject: CN=6481c2bf-3dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:76:1a:18:9a:44:a0:6c:ea:4f:84:75:55:
9a:35:3c:47:d0:89:5e:6e:c6:91:d4:ba:e5:45:d1:
12:14:66:38:b1:71:44:67:30:43:c2:01:15:7c:60:
ec:e3:92:ee:7b:e5:ba:6e:61:1e:cb:5b:a3:8b:22:
57:a7:a8:e6:b5:1a:a1:d1:e2:c4:ac:d2:8b:3a:0d:
62:86:ac:c9:55:6e:22:74:0a:36:c8:24:cc:62:a4:
b8:d4:17:5f:15:7e:9b:5b:26:74:d3:8e:e2:8d:69:
b4:ed:3b:ec:7a:d5:41:db:a2:b9:c0:13:fd:8e:a4:
e3:6b:a2:47:8e:3b:7d:ee:ef:09:32:04:bf:58:e8:
84:6f:48:52:11:af:c5:fb:03:27:c1:b5:a4:89:ae:
47:2e:d3:87:d7:13:83:14:af:25:51:08:42:d5:00:
fa:0f:25:00:c7:ac:8d:3a:01:32:27:58:14:e7:42:
5b:6d:b6:5e:f4:79:b2:df:88:bd:a2:07:5c:0f:68:
99:df:12:44:84:bd:88:de:86:ce:38:ce:b5:6e:25:
ff:3f:5c:92:aa:6a:eb:ad:b8:40:ca:69:ed:f7:26:
c2:fd:ca:4d:be:fe:67:14:8a:d2:9f:5e:bd:9f:f7:
96:42:44:dc:48:b0:e9:cf:52:3e:55:94:13:21:41:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:C8:B3:B3:F3:93:A4:CA:07:3C:CB:FF:F8:72:BD:88:71:18:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDFB793005F311EEB9025C314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:16:05:52:b2:2c:f3:2a:37:d7:79:c4:41:5e:40:87:e6:e1:
ba:ca:41:9a:f9:82:13:a3:67:f2:5b:0c:c3:8e:83:03:39:0a:
1b:76:42:59:16:7f:46:c7:d1:c5:f6:72:c0:0a:a1:54:31:ae:
60:ea:a8:87:59:01:64:ba:73:32:c0:99:87:3c:78:09:ec:7f:
f7:64:aa:39:73:a6:51:1f:03:ac:9e:e9:5f:18:8e:b1:66:f2:
44:c0:94:28:0e:87:ae:50:7c:47:93:13:4c:dd:b9:83:e3:a0:
87:f6:87:d6:ec:7c:08:20:ce:62:f3:cc:35:dc:04:60:42:cd:
93:b5:f5:e6:2f:34:b5:f9:6d:4c:9e:97:f8:5a:78:41:b4:4a:
ff:77:9f:7d:9c:4f:d9:95:69:fe:05:7e:dc:4e:28:d6:e3:b3:
67:af:db:c9:a2:22:5a:69:2f:8d:86:f3:fe:a0:38:36:db:f4:
20:69:75:ab:b2:c9:81:58:24:86:71:76:69:61:72:ca:2d:f6:
de:c0:a7:9f:a1:da:b4:f6:1b:18:e5:1b:ec:cd:71:a5:7f:49:
e0:d1:8c:58:24:d8:ff:67:88:93:e7:60:4f:cd:9e:cd:90:86:
55:96:e4:45:e6:2f:05:3c:77:9e:5d:fb:95:4c:e1:14:30:f5:
6f:05:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:50 2024 by rpki-client on console-fra.rpki-client.org