Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184B6F7A0BD711EC8B015A43D8A014CE.roa
File: 184B6F7A0BD711EC8B015A43D8A014CE.roa (raw, json)
Hash identifier: jFjJDTGii8w6QWF5Lpzc4cAe6tG2eklKTsGwZfb0vZI=
Subject key identifier: 17:6B:E1:BE:EE:DE:E6:44:DD:16:AC:A3:D2:F6:3D:5C:0E:E8:4C:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0914
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184B6F7A0BD711EC8B015A43D8A014CE.roa
Signing time: Thu 02 Sep 2021 10:18:20 +0000
ROA not before: Thu 02 Sep 2021 10:18:16 +0000
ROA not after: Sat 02 Apr 2022 10:18:16 +0000
asID: 22773
IP address blocks: 156.246.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 10:18:16 2021 GMT
Not After : Apr 2 10:18:16 2022 GMT
Subject: CN=6130a4eb-df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:de:5f:9b:39:8c:04:2f:fc:ea:4c:c4:c9:
03:c2:6b:4f:0d:60:23:d6:f3:f4:2b:ac:b2:e7:23:
54:3d:4d:fd:b0:4c:8c:02:a2:f9:93:8d:71:58:f9:
04:03:89:55:d2:37:8f:08:a2:de:90:be:8f:05:95:
01:d6:c8:56:19:51:66:ed:12:82:23:ca:03:09:5f:
71:58:9a:b8:67:54:c5:0d:b4:c9:98:17:72:e9:05:
ad:c8:a9:e0:dd:60:ed:53:c3:12:04:69:43:77:3d:
b6:8e:99:6c:7b:39:0d:e0:3f:ba:98:3d:9c:bd:4c:
96:fe:4d:cb:46:b6:ce:7f:b2:1b:c7:8c:44:da:f9:
08:3a:42:1b:70:0e:cf:fd:ac:a2:dc:91:f9:ae:db:
e5:10:7c:73:47:39:40:6a:6d:f8:5d:e2:1a:5e:e8:
66:6c:e0:f1:d2:df:bf:2b:f6:41:a0:3a:f9:84:ae:
39:c9:ca:8b:53:33:2e:33:81:73:95:3a:be:0f:4e:
f5:bc:2c:6d:b0:76:1e:40:05:67:9b:bc:62:8e:32:
08:00:b0:3b:13:a4:b0:9c:3b:3b:e0:01:73:5e:56:
9f:d9:85:2c:3f:d1:c8:2d:d6:52:ed:97:bc:0f:69:
76:7d:d6:fc:3a:39:7c:76:cd:7b:ff:04:91:f7:69:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:E1:BE:EE:DE:E6:44:DD:16:AC:A3:D2:F6:3D:5C:0E:E8:4C:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184B6F7A0BD711EC8B015A43D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:e9:74:a7:9a:18:27:93:37:75:0a:96:73:8a:60:a1:35:2d:
6b:97:d9:fa:71:61:6d:c3:2d:8f:ae:43:d1:b1:15:02:39:95:
bf:37:47:d9:42:d9:15:75:dd:0a:bb:20:02:0d:36:82:78:98:
44:06:0c:0a:35:5f:49:d1:53:50:c2:5d:88:5a:39:52:1d:af:
1e:25:d5:4e:34:62:0e:24:ae:cd:20:ae:48:28:35:9e:9e:ba:
a6:0a:5d:3f:d9:a8:6e:2b:73:9e:dd:bc:4e:8b:c2:2c:43:07:
e8:39:9c:b8:f4:d1:10:56:bf:94:db:86:81:85:22:9e:4a:95:
81:2e:b1:eb:68:36:55:0a:86:8c:56:66:a9:ff:8d:81:59:0d:
7d:15:f0:38:c5:1b:9a:38:87:96:0d:6a:03:b1:3f:86:bd:16:
27:55:8d:e1:af:59:9c:06:3c:78:6f:16:6e:01:b6:4a:83:3b:
90:6d:62:c0:86:26:bc:cd:10:89:bd:2d:2c:6e:7d:a9:08:d7:
8f:80:03:55:6d:bc:32:76:5e:df:99:b2:15:ee:56:7d:7b:ba:
42:da:b4:5c:8a:eb:ce:d4:d9:d9:0b:44:b1:23:fe:e9:35:2f:
46:7b:9d:14:74:cb:4d:a8:3f:8a:f4:8a:b0:2a:3c:9f:7f:df:
9c:64:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org