Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A348F94488511ECA9BACD33D8A014CE.roa
File: 0A348F94488511ECA9BACD33D8A014CE.roa (raw, json)
Hash identifier: +08QeTHuXRU+yn1xi35ae1+IdIo2nUyVsQrBfaVdivw=
Subject key identifier: 8A:0D:E6:44:2C:74:FB:4D:5A:B0:E5:1B:4F:C0:9D:DE:84:EC:94:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A348F94488511ECA9BACD33D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:34:38 +0000
ROA not before: Fri 19 Nov 2021 15:34:35 +0000
ROA not after: Sat 19 Nov 2022 15:34:35 +0000
asID: 139879
IP address blocks: 156.247.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:34:35 2021 GMT
Not After : Nov 19 15:34:35 2022 GMT
Subject: CN=6196728e-da8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:33:b2:5e:06:b3:ba:ba:aa:f2:56:17:83:
48:f2:7f:fd:e6:84:7b:46:68:6c:4c:e9:39:2f:db:
d0:65:61:77:b2:bc:8b:b2:e1:5d:e8:3c:25:10:95:
0d:98:e7:fd:3e:e3:93:90:6e:e5:aa:98:d9:41:76:
0c:af:94:95:2e:da:85:89:f6:e9:b2:91:9e:d3:1c:
f1:1e:7c:9c:63:3f:81:4c:17:64:c9:59:7e:50:3a:
a1:f1:a1:3c:47:5e:11:67:a5:f5:f6:69:e7:15:ce:
7d:05:45:de:41:4f:7e:58:44:9e:1b:e3:97:b6:dc:
02:89:6b:4e:47:75:6b:b1:0e:d9:bd:d9:b7:dd:83:
e4:3f:54:78:bd:f9:6b:71:68:a3:7b:e2:84:45:e2:
5c:61:fd:4a:3c:2e:b7:4e:6f:92:2e:e5:cc:95:3b:
31:30:af:9e:93:56:e6:87:5d:b3:2c:3c:d6:d3:30:
f0:8b:fc:e3:aa:32:40:19:76:18:21:d6:85:a4:20:
5d:2e:10:68:af:28:d3:36:ad:29:73:07:87:0d:3e:
af:08:34:80:39:b2:41:eb:03:b5:89:4d:21:d3:83:
47:1e:6d:81:1b:19:1a:3b:ff:29:b7:ea:46:d5:a0:
f6:6f:64:cd:2c:b6:8c:39:ee:8b:1e:87:de:af:c0:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:E6:44:2C:74:FB:4D:5A:B0:E5:1B:4F:C0:9D:DE:84:EC:94:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A348F94488511ECA9BACD33D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.146.0/24
Signature Algorithm: sha256WithRSAEncryption
23:11:29:8a:f8:9e:bd:07:ea:41:9c:d7:d3:9a:cd:c4:9c:d5:
4f:be:91:03:fa:8b:61:d7:8a:01:3c:63:fa:29:a3:ab:25:f8:
60:91:75:eb:10:9b:15:ac:00:a3:a3:fe:53:6f:f3:20:62:29:
f0:5d:3f:3c:2c:29:e1:26:31:39:ba:a6:14:23:f8:f5:4b:2b:
af:e0:50:27:d1:06:49:59:c8:e8:7a:f0:be:0a:71:3b:fc:2b:
ad:60:55:36:64:bd:8e:62:c6:fc:8c:2a:dc:53:f8:19:9d:5b:
c9:19:80:a8:fb:7a:7d:5d:f1:04:85:74:17:3a:9c:63:31:c4:
f1:96:c3:7b:24:e2:7d:80:e5:55:24:a0:ab:4a:25:c7:3a:78:
2a:00:73:e7:f1:ca:59:21:cc:22:17:89:9b:90:b7:61:a0:0c:
2d:ef:16:97:53:e8:d1:4d:6d:d0:66:9e:4b:f0:dc:57:34:12:
b3:37:0c:89:a1:eb:ea:6f:bc:33:11:44:ef:6c:a2:86:71:f4:
a4:4c:ec:de:d5:f8:71:07:30:fc:10:e3:6e:9a:39:ea:72:ba:
0a:85:19:48:28:3f:04:8d:28:8c:f8:f3:5e:fc:e4:4d:7a:5a:
31:5b:8d:16:8c:f1:60:06:37:10:60:30:55:35:02:2e:0d:78:
50:09:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org