Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079E85CE488411EC86318F31D8A014CE.roa
File: 079E85CE488411EC86318F31D8A014CE.roa (raw, json)
Hash identifier: pksgwxSyGu2sJ9H5XcdpoIeVUzlbdjEmYZze8o1i8hE=
Subject key identifier: 53:B5:A9:39:D3:F0:A2:FE:DB:AC:C4:AE:92:D1:BC:4D:91:9F:36:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079E85CE488411EC86318F31D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:27:24 +0000
ROA not before: Fri 19 Nov 2021 15:27:21 +0000
ROA not after: Sat 19 Nov 2022 15:27:21 +0000
asID: 139879
IP address blocks: 156.249.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3286 (0xcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:27:21 2021 GMT
Not After : Nov 19 15:27:21 2022 GMT
Subject: CN=619670dc-e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:b3:29:c0:3e:4c:71:77:93:04:49:bb:47:
56:83:ca:9f:29:1f:77:45:5d:9b:0f:f4:41:ff:f5:
ba:e6:e1:f1:00:35:12:80:62:7d:b0:13:73:27:ea:
55:08:48:a4:de:0c:85:68:da:c5:f9:cb:00:4c:c5:
ea:5d:70:3f:51:3a:0b:82:33:2a:81:7b:7c:95:4d:
f8:32:f1:2c:24:93:7d:5a:58:32:dc:5f:26:1a:4a:
63:69:6a:72:31:a8:5d:44:4e:17:84:b7:0f:32:75:
d4:78:f1:64:a9:10:a1:cb:99:95:d6:c8:fe:41:f9:
e6:77:83:4c:a5:c9:3a:22:5c:a7:70:de:e8:88:43:
af:32:42:7f:db:db:11:7e:f7:37:4c:e0:11:aa:b8:
b3:e8:61:b5:58:05:df:7c:25:f6:02:63:56:56:00:
93:27:09:b5:6d:e1:89:2d:81:a5:71:67:5c:2d:67:
e1:da:c4:52:f2:7a:40:01:7a:b1:a8:54:3f:19:3b:
93:9a:25:3d:ff:9a:54:31:eb:ff:a0:64:00:0e:30:
d4:e8:32:59:3d:44:1d:39:06:b5:52:e4:b8:89:90:
7b:63:1f:d6:18:17:43:42:12:1a:ca:ec:35:cc:bc:
cb:9e:04:9c:bf:81:ad:e3:73:f4:1a:fb:00:00:f1:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:A9:39:D3:F0:A2:FE:DB:AC:C4:AE:92:D1:BC:4D:91:9F:36:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079E85CE488411EC86318F31D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:37:05:a9:0d:72:83:ed:ee:20:1c:4d:17:39:29:ca:2a:85:
00:16:29:ca:9e:1c:25:3f:13:dd:d4:1e:c9:e4:98:40:48:01:
b5:a2:d0:ee:65:66:46:2e:fe:4e:47:80:3e:4e:58:24:82:aa:
cb:a7:c4:9d:39:3a:c7:31:2d:6c:0a:ce:98:e4:3d:d7:33:eb:
b9:8d:0e:1c:6b:ea:e1:aa:3e:b5:92:14:a0:1c:37:5b:c3:ef:
ee:bf:9a:60:56:25:be:68:bc:56:21:11:59:59:9c:e2:dc:b3:
30:ad:66:c2:36:2e:d6:8f:d2:53:17:48:e9:89:fa:48:98:a7:
88:63:71:33:69:be:db:47:20:0a:f6:e9:46:87:04:98:3f:a1:
c0:e0:87:39:90:4a:56:cf:c6:0c:72:62:4b:c0:1f:69:e7:ec:
d4:de:0f:ce:53:7d:71:6c:e4:24:84:d6:85:9e:09:54:38:12:
f6:79:28:af:e6:0b:f5:8a:e8:3b:9a:44:31:5d:4d:6f:ee:a9:
5a:a1:79:d8:22:59:ed:a3:12:40:0b:a9:13:77:69:9a:cb:3c:
3f:ce:b8:4c:7a:2f:ba:8b:fd:a7:e4:9e:b7:1a:2b:4b:74:cd:
a0:98:5a:54:fb:29:35:f0:00:e8:a0:c8:ff:23:0f:93:b9:d1:
69:ce:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org