Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
File: 197128C2488611EC9CCD2936D8A014CE.roa (raw, json)
Hash identifier: n15Xq6lfoI981DihhIpqeO54Ii4nPMMXGGanl8oHIIQ=
Subject key identifier: 43:51:44:1E:4A:94:21:D1:34:8B:20:88:C1:36:09:66:4B:73:5F:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:42:13 +0000
ROA not before: Fri 19 Nov 2021 15:42:10 +0000
ROA not after: Sat 19 Nov 2022 15:42:10 +0000
asID: 139879
IP address blocks: 156.231.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:42:10 2021 GMT
Not After : Nov 19 15:42:10 2022 GMT
Subject: CN=61967455-f0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:49:57:73:41:66:3f:f0:24:b3:a7:24:d5:
c4:2f:3a:86:f8:59:20:69:74:50:3e:39:18:2a:5e:
ef:97:af:4b:e0:f2:c5:86:97:b2:31:d6:a2:53:8a:
b3:de:ed:8b:37:f1:99:e5:a3:81:35:6c:9a:aa:3c:
2e:68:66:e6:14:ab:a5:e6:cd:96:8f:05:10:c6:c0:
71:9b:21:80:82:98:c6:23:ed:9e:da:92:53:d4:3a:
fb:f6:a3:aa:d4:be:4a:e3:3c:82:b2:08:b4:b0:be:
53:33:8f:09:d6:c3:01:4c:f3:84:e0:d6:d5:6a:76:
d3:f1:44:08:0d:ef:6d:ac:5a:d3:ad:86:3f:2b:01:
64:6d:51:2a:5f:d2:77:0c:5a:59:e5:5c:a8:42:44:
82:c2:76:13:77:0c:c5:27:b5:91:59:97:03:a0:d8:
d4:02:a4:76:f7:33:4c:07:3e:ee:1f:83:3a:51:a8:
64:31:08:24:2d:13:a3:8e:07:db:4b:c8:c8:f4:20:
cf:ef:3b:29:63:ef:3a:71:64:ab:53:8f:74:47:5f:
0c:7b:fb:2b:a7:9c:ba:22:de:c5:62:f5:14:18:7f:
2d:6e:79:da:d4:f8:42:91:3a:6e:bd:f2:21:e7:35:
b3:38:29:81:b1:5f:16:c6:37:dc:5e:46:03:b3:db:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:44:1E:4A:94:21:D1:34:8B:20:88:C1:36:09:66:4B:73:5F:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/197128C2488611EC9CCD2936D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b1:26:87:43:8a:7d:be:f8:89:e0:12:b9:bb:b1:a7:bb:76:
40:db:98:3f:1d:f2:02:ae:63:27:03:d7:12:6e:95:93:26:5b:
42:cf:57:ca:54:7d:24:04:a5:86:46:b4:df:29:a4:74:c2:78:
a0:2d:22:19:fd:62:26:8f:0c:18:93:40:f0:91:c8:62:77:f5:
a1:a8:fd:b0:eb:57:7c:53:48:50:35:ad:40:be:60:31:b4:ca:
65:07:2a:10:63:44:c0:cb:e5:f8:17:84:b4:a1:12:d9:e5:ce:
70:2a:90:36:d5:e9:f0:c9:9e:a1:84:86:41:34:70:7b:bd:d2:
2b:c0:72:c2:d6:be:ba:1d:40:2f:33:97:55:9b:98:ed:62:93:
ae:c8:45:9d:30:11:1f:ef:76:2d:84:6c:a9:4c:06:5e:ee:18:
36:f9:6b:26:ac:6b:36:91:ee:c8:75:26:c8:5c:1e:de:b8:33:
e3:66:83:3e:4f:95:6f:d2:e5:ba:c2:d1:c4:c0:4d:c2:89:ae:
90:39:21:d2:3d:97:41:b2:e9:79:7e:19:3f:5e:37:77:40:b9:
05:a0:0e:6b:7e:d0:36:e2:c6:5b:82:b7:aa:e6:35:24:f0:66:
eb:06:67:f1:2a:7c:ac:3d:4b:8d:6f:24:13:56:f2:fe:92:66:
ef:23:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org