Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039015B8488B11EC9C4CE540D8A014CE.roa
File: 039015B8488B11EC9C4CE540D8A014CE.roa (raw, json)
Hash identifier: e6Nnmf3n7cGa/8HhnL4RfLcvYg7eH7B4zbSUoOmvvzk=
Subject key identifier: FC:DB:78:7B:1E:9F:FE:23:B9:29:37:0F:A5:DD:31:AD:23:27:EE:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039015B8488B11EC9C4CE540D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:17:24 +0000
ROA not before: Fri 19 Nov 2021 16:17:21 +0000
ROA not after: Sat 19 Nov 2022 16:17:21 +0000
asID: 139879
IP address blocks: 156.247.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:17:21 2021 GMT
Not After : Nov 19 16:17:21 2022 GMT
Subject: CN=61967c94-3e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:5e:1f:8e:aa:ec:0f:47:45:cc:17:a2:e5:
2d:f2:bc:15:3b:ec:f3:32:e6:56:7b:92:83:4c:bc:
0b:b3:cd:26:a7:b0:1e:a4:af:10:1b:3e:95:43:50:
2f:5b:39:88:fa:12:93:79:48:ee:e6:71:c2:94:b5:
87:64:9b:f0:22:fc:ad:20:dc:6a:20:30:e4:b0:21:
2b:9d:0c:88:2b:06:0c:bf:c8:cb:fe:7c:d7:91:dc:
18:2c:63:98:24:9f:b7:5f:a8:74:77:9f:79:58:91:
cd:ac:59:d2:8e:7b:ac:ae:ef:5e:c7:ca:90:b1:9d:
11:af:c9:de:f8:ee:a9:e1:20:35:2c:93:c4:e6:25:
b7:a6:94:df:6c:d7:6f:ac:e8:d5:bc:e8:42:bf:81:
ab:8a:4b:01:57:fe:94:07:78:a9:25:b9:06:87:8c:
7a:8e:e6:04:74:f7:95:23:1e:4b:52:56:7f:43:81:
7d:bc:eb:71:2b:6a:30:de:f1:98:9f:57:2d:fe:4c:
fb:1e:29:21:8d:a4:f5:12:fa:7d:df:47:79:00:ce:
02:82:c5:11:22:c6:82:e0:f8:14:d8:fb:bb:ec:c6:
10:70:bb:01:d3:27:5b:c4:70:59:a7:b0:e8:83:77:
af:94:ac:8f:94:b2:57:b4:d8:c1:aa:e1:53:5d:f0:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:78:7B:1E:9F:FE:23:B9:29:37:0F:A5:DD:31:AD:23:27:EE:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039015B8488B11EC9C4CE540D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9a:b0:9f:46:a3:84:d7:a8:5f:3c:ef:02:8a:4d:5d:e0:15:
0d:8d:d0:9b:05:dd:14:cb:fd:ba:fe:c1:e5:68:a6:3c:d2:e5:
5e:f0:59:36:02:ac:63:44:fd:19:b2:49:6b:be:3d:97:5d:32:
74:c9:52:2b:a4:6d:67:2f:81:3b:1f:93:b9:5b:24:d8:64:29:
b1:71:fa:c2:af:02:dd:56:2f:c9:19:b6:4a:ed:c2:37:45:74:
66:04:35:ca:57:86:ed:33:9c:35:2c:bd:b9:33:33:4e:bf:01:
d8:ac:a1:0d:f5:4a:73:41:3d:12:d3:d0:6a:71:a9:ad:81:dd:
31:07:97:e3:7d:aa:af:ac:12:2c:16:6c:55:c7:06:bd:97:97:
2f:c2:51:14:b5:6c:9c:62:c2:f8:8f:11:25:c7:66:85:63:cb:
0e:04:07:1c:8f:24:6b:91:de:62:69:ec:74:f3:a7:ea:32:60:
c9:28:aa:fa:82:ac:ed:42:73:2a:e0:08:29:33:d7:c7:1c:08:
11:f0:ef:b5:30:e7:31:72:44:9d:c1:f1:3e:11:43:b6:d0:2e:
92:a9:f8:f5:62:01:94:43:f7:98:79:a3:19:97:df:2b:d3:08:
ac:2d:83:69:2b:5d:98:f8:7c:44:31:fe:e8:06:d2:e0:60:ad:
8e:53:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org