Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C4BA70E488A11ECA2ABCF3ED8A014CE.roa
File: 0C4BA70E488A11ECA2ABCF3ED8A014CE.roa (raw, json)
Hash identifier: UcdmWQNEraO73Gj6nTfNzMn7/joPvuW7LT1ol+R20Gk=
Subject key identifier: 1C:ED:31:ED:9A:EC:92:02:8E:98:1C:05:18:63:13:E8:90:ED:C4:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C4BA70E488A11ECA2ABCF3ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:10:29 +0000
ROA not before: Fri 19 Nov 2021 16:10:26 +0000
ROA not after: Sat 19 Nov 2022 16:10:26 +0000
asID: 139879
IP address blocks: 156.249.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:10:26 2021 GMT
Not After : Nov 19 16:10:26 2022 GMT
Subject: CN=61967af5-a7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:ef:92:8b:bd:42:46:10:b8:32:15:70:5b:
b9:61:56:a9:52:4d:de:2d:83:c6:cd:09:ba:77:48:
86:e8:e2:75:be:af:6c:e4:ba:0c:57:9f:9f:54:10:
20:be:77:93:a1:d3:84:fa:82:ea:f5:6c:8e:b1:16:
f0:a8:60:0b:3c:84:17:a8:fa:f7:70:aa:9b:95:bb:
d6:54:6e:cd:6f:7e:1b:84:f1:43:44:e9:a5:68:f6:
0f:da:17:9d:aa:a4:6a:cd:d8:a4:10:a2:f7:64:b6:
c6:30:bf:5b:c3:f0:9a:c5:87:55:52:3c:49:ba:bc:
f6:e9:a6:7f:6e:99:48:a0:50:a5:b9:21:34:3e:0f:
3b:4e:be:2e:65:a6:4f:ce:55:9a:f1:1c:ec:03:c9:
ee:09:8a:1d:8f:eb:ce:5a:80:59:c5:c3:44:89:61:
78:b2:70:32:c4:92:d8:a9:6e:1c:c9:ea:fa:d1:8b:
33:26:8b:d8:a8:dc:54:f8:96:06:7e:3d:d0:48:69:
82:9e:7d:cb:d1:3b:35:64:fd:5e:25:7d:ba:eb:5f:
f1:ba:be:e4:9e:98:fb:6b:ae:31:aa:89:64:44:a3:
13:72:3e:1a:52:0a:ea:44:fb:80:d1:ce:09:36:ef:
a8:0a:13:ec:ca:a1:c5:e9:07:6a:de:7c:df:58:04:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:31:ED:9A:EC:92:02:8E:98:1C:05:18:63:13:E8:90:ED:C4:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C4BA70E488A11ECA2ABCF3ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:74:da:93:76:a4:51:16:9b:63:25:d7:a9:25:d1:86:07:34:
7c:7f:e6:80:fb:be:93:50:28:7a:63:86:67:d1:74:35:83:a0:
f5:e5:de:9e:f1:d4:fb:30:bf:c9:ed:c7:f9:47:38:4d:eb:22:
f1:f5:8d:f5:6e:f8:38:14:5e:7d:5e:a0:7f:33:04:6e:cf:a3:
99:cd:0c:72:43:f3:6a:5e:da:4e:18:4a:0a:cd:82:fa:bb:9a:
03:a8:78:a7:5b:2d:a3:35:ab:9c:2c:d4:78:d3:dd:d2:1f:e7:
da:22:17:0d:65:d6:3c:43:3d:ce:19:90:f7:bb:21:77:08:ea:
a3:79:da:59:fb:8f:aa:e5:9e:d2:bc:34:dc:d6:88:de:e3:b4:
44:87:18:7f:73:c4:ad:ac:7e:20:b0:a7:83:01:ae:23:73:67:
07:27:72:0e:08:8c:a6:0c:3b:54:81:7c:9e:78:16:db:55:30:
54:27:8d:df:7b:bf:a5:be:2d:7e:56:66:9a:4f:f7:93:3a:bb:
7d:6d:d1:ed:9c:6a:8b:b7:1c:93:11:79:fd:2a:f4:bf:23:68:
3e:b5:1b:75:ee:ed:ce:05:62:73:21:ff:4d:73:08:29:55:d6:
00:e7:1e:73:c0:8f:fa:34:51:d2:d4:ad:33:18:15:d9:53:cc:
12:0c:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org