Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148FBA28488911ECBD19A93CD8A014CE.roa
File: 148FBA28488911ECBD19A93CD8A014CE.roa (raw, json)
Hash identifier: HwMra/vqo5h9+3JijF45PukVRShD09kI8sdpHNggJkA=
Subject key identifier: B3:B3:5E:0A:1F:31:2B:68:B2:78:3D:9F:35:77:4B:69:C6:0A:EB:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148FBA28488911ECBD19A93CD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:03:33 +0000
ROA not before: Fri 19 Nov 2021 16:03:30 +0000
ROA not after: Sat 19 Nov 2022 16:03:30 +0000
asID: 139879
IP address blocks: 156.249.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3571 (0xdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:03:30 2021 GMT
Not After : Nov 19 16:03:30 2022 GMT
Subject: CN=61967955-377d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:f4:f6:21:7c:7f:58:01:76:76:cf:8a:8e:
61:97:08:11:ae:8d:f1:97:d5:6d:c4:10:6e:f6:c5:
1e:60:24:1c:2d:26:79:1b:40:a4:4e:21:b0:49:23:
46:91:85:09:b2:6e:3a:61:2a:5c:10:8d:80:7e:49:
75:ac:0a:27:9c:d4:2f:d2:a0:21:07:83:59:df:dd:
6b:36:64:0f:88:6f:98:58:3c:d6:19:bc:37:df:9b:
2b:92:ab:85:d7:f6:43:11:58:29:0b:a8:ea:67:06:
b0:66:f7:94:6a:eb:92:75:94:b2:03:07:41:ab:c6:
f7:46:7f:36:05:9b:5f:bf:62:58:00:80:ca:84:b9:
08:58:9e:60:9e:ff:69:67:f5:eb:9d:af:9c:5c:69:
aa:5c:25:2f:f9:5d:a5:b9:9a:d2:c5:88:b2:61:c7:
a2:b8:f4:e5:9c:53:40:ed:6a:b6:cb:0e:c6:7b:21:
88:c7:a0:c6:fa:6c:0e:77:6b:5e:6f:45:4b:fe:cf:
55:9c:f0:77:83:6a:79:83:38:aa:0c:45:5c:ac:09:
ce:38:3c:3c:95:40:41:2d:b8:63:9c:0a:fb:f7:a7:
c7:24:d9:70:d6:81:8e:1f:6e:08:28:3e:e7:1f:29:
0b:8a:fb:53:27:e1:d0:d6:ea:2a:3f:b6:b7:0d:4a:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:5E:0A:1F:31:2B:68:B2:78:3D:9F:35:77:4B:69:C6:0A:EB:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148FBA28488911ECBD19A93CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fc:a5:37:ac:0c:21:1d:bd:8f:6a:80:dd:9a:ab:f7:db:32:
5b:2f:0d:43:23:21:cf:ee:01:be:e7:7e:da:00:40:85:01:78:
d5:07:1e:c8:b2:c5:c8:b8:b7:03:cd:4d:f4:f1:f1:3d:45:45:
3c:cd:9c:f1:4b:dd:2e:31:c0:22:ac:91:df:5b:ff:c2:29:e9:
ff:e0:98:13:f8:b8:f7:22:eb:86:4e:c9:f6:7f:7b:6d:64:89:
d2:46:a5:3e:f5:63:33:eb:e0:e9:a7:81:d1:92:85:6d:9c:9d:
01:24:c3:b2:e1:67:9d:5f:50:8e:e3:3c:5e:d0:47:1b:4d:91:
2f:94:57:a1:bf:0a:70:59:90:54:78:c5:36:06:c6:83:fd:18:
ee:21:6d:f4:09:68:52:10:92:fc:70:cb:ff:77:27:c3:2c:d9:
3d:97:41:bc:e0:99:0e:d5:23:f3:b5:77:23:9c:b1:92:84:5e:
37:8d:d4:8c:32:97:c9:21:e6:8f:ba:78:5f:d2:2b:c0:4e:d2:
4c:6a:92:86:cc:19:25:ed:5b:da:a6:79:d3:ce:9a:89:e1:28:
19:5e:17:bb:bc:ac:eb:bd:ee:51:39:2d:bf:4f:f6:50:8e:f4:
8e:ac:0b:c9:e6:c5:4c:29:c4:27:2e:f1:01:90:56:ba:11:9d:
7b:50:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org