Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/8A239E7C042D11EBBD07F010F8AEA228.roa
File: 8A239E7C042D11EBBD07F010F8AEA228.roa (raw, json)
Hash identifier: RYzK7KIq7049nDZDN9NoRu18OF6AzTk5we6C9tm40DE=
Subject key identifier: E6:9C:AB:78:0E:FF:AC:43:75:4B:EE:7E:BE:79:33:B3:DE:A6:2C:95
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 06E5
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/8A239E7C042D11EBBD07F010F8AEA228.roa
Signing time: Thu 01 Oct 2020 21:32:01 +0000
ROA not before: Fri 02 Oct 2020 21:31:56 +0000
ROA not after: Tue 31 Oct 2023 21:31:56 +0000
asID: 204136
IP address blocks: 169.239.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Oct 2 21:31:56 2020 GMT
Not After : Oct 31 21:31:56 2023 GMT
Subject: CN=5f764ad1-ac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:4d:4b:a2:37:20:87:83:10:c1:9e:ad:8f:
8a:92:a8:bf:39:60:91:04:3e:f2:13:d1:b6:4c:96:
7b:24:b2:a4:30:64:44:3b:d0:3f:7a:51:97:c5:1a:
75:11:c2:ed:9a:fc:c2:1b:07:50:e0:f6:d2:42:bf:
35:18:45:6b:f4:9a:32:0d:2e:a5:e1:4f:5d:d4:e4:
8b:3c:99:b3:e6:e3:08:f5:e6:ba:a8:7c:a6:05:e5:
76:83:b0:32:25:7a:52:4d:c6:6f:3c:84:57:7c:6f:
ed:88:44:67:a3:84:c6:13:20:17:d7:a5:b5:69:24:
47:6f:3f:30:10:ac:41:02:6e:fe:4c:73:9b:68:71:
d1:1d:e0:5b:fd:58:8c:5b:b3:4b:da:b0:49:16:37:
8f:0f:23:b7:e6:b0:67:22:0d:d0:8d:53:31:55:5a:
08:e5:9a:5c:c5:c4:71:36:cb:24:14:d2:5e:12:28:
df:3f:cb:c9:97:6c:7c:bc:cf:69:d1:cf:38:6f:3e:
51:c6:40:59:e4:eb:41:ce:e3:c2:77:b7:29:6e:84:
2e:72:5b:17:db:5b:94:2c:1d:97:a4:ae:b3:fc:cb:
32:76:df:58:3f:f0:75:09:2a:55:5b:42:82:85:e4:
f9:91:a4:66:47:7b:ff:1e:4c:95:58:58:73:0f:d4:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:AB:78:0E:FF:AC:43:75:4B:EE:7E:BE:79:33:B3:DE:A6:2C:95
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/8A239E7C042D11EBBD07F010F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:42:0a:79:2b:53:b4:5d:92:84:67:ff:70:9b:5a:1d:69:c5:
5c:b8:5b:79:10:05:4c:13:a2:59:46:ea:22:c9:a0:63:d9:cc:
d4:3a:07:cf:52:8f:1c:6f:89:3e:99:95:d6:2e:07:ce:11:7e:
a0:fa:1a:86:62:dd:c8:8c:84:15:15:51:10:44:06:3a:4c:17:
6b:49:e4:72:31:01:43:b5:c6:bb:dc:4a:ac:95:84:a0:ed:12:
92:47:3e:cf:a4:6e:fb:71:d6:f7:89:30:0c:0f:e9:a9:15:bb:
41:88:f3:a8:09:03:b9:f2:60:4a:3e:22:9a:82:c1:49:41:c2:
b4:5c:c4:33:59:96:6a:08:77:fb:85:0a:ad:a9:1c:7a:ac:4b:
ab:7e:f5:3b:99:ff:ea:10:31:fa:fb:cc:d4:3a:80:60:f3:87:
51:f9:9d:18:11:cc:72:c4:97:33:6f:15:75:95:98:ea:fc:88:
35:87:7e:3a:68:d8:45:d8:82:67:26:b5:66:44:8e:0b:dc:c6:
e2:8f:84:5e:fb:dc:7a:a4:d9:3f:51:df:fa:39:2a:b4:93:28:
fe:41:eb:8e:27:a0:4b:f8:67:69:2b:08:1a:20:4d:13:e6:3d:
2d:4b:e0:e9:94:c2:16:93:51:04:75:6d:84:b3:25:49:76:7b:
a7:fa:b1:69
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 1 01:05:29 2023 by rpki-client on console-fra.rpki-client.org