Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA964A8488511EC825F0334D8A014CE.roa
File: 1AA964A8488511EC825F0334D8A014CE.roa (raw, json)
Hash identifier: 7QpPnGns8EXcCQiLTwwZJBVrzwIp5DstusJIo/pkRUw=
Subject key identifier: EE:26:90:B9:F3:1D:6C:A4:54:7B:07:44:04:C7:20:09:B3:8D:DA:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA964A8488511EC825F0334D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:35:06 +0000
ROA not before: Fri 19 Nov 2021 15:35:03 +0000
ROA not after: Sat 19 Nov 2022 15:35:03 +0000
asID: 139879
IP address blocks: 156.249.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:35:03 2021 GMT
Not After : Nov 19 15:35:03 2022 GMT
Subject: CN=619672aa-40af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:6f:ca:90:91:8a:81:af:51:2b:83:1b:19:
52:80:70:85:79:db:71:4f:6a:69:77:56:12:2f:2e:
c3:34:c2:d5:43:5f:22:dc:d9:c5:97:df:1b:8f:5a:
43:ec:32:c5:f2:9f:5a:ab:eb:d7:9a:41:7f:b2:be:
82:8b:60:7e:c1:d2:fa:70:25:b0:93:97:f8:a4:fd:
e1:47:e5:63:4d:51:74:e5:ae:d9:78:71:ab:b1:e8:
77:ad:52:fd:c7:06:c5:aa:69:61:9e:27:d7:9a:60:
05:ea:10:bb:03:7d:6b:68:87:ab:2f:53:4d:fa:36:
c4:05:54:67:8d:c2:b6:6a:cf:3f:62:10:74:1c:e0:
35:b7:61:c5:45:2b:12:28:9c:0f:58:63:88:f5:36:
bc:40:57:f1:8b:1b:a3:3a:04:52:7a:f5:2e:d2:97:
b8:2b:d4:c1:f7:90:e0:be:34:6b:27:8b:85:f0:1a:
b3:09:13:e9:7b:0f:fc:ce:8a:a2:73:b4:b9:8e:bc:
0a:b6:7e:d5:83:7d:32:35:3f:65:57:48:da:b7:77:
3a:d1:57:1b:59:c5:ef:5d:a2:2a:c7:66:49:6b:3a:
00:77:54:b9:5d:67:05:05:24:0a:b3:dc:66:aa:96:
c4:99:d1:35:5d:82:c3:01:ed:05:bb:3a:77:0e:0f:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:90:B9:F3:1D:6C:A4:54:7B:07:44:04:C7:20:09:B3:8D:DA:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AA964A8488511EC825F0334D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.147.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a7:ec:d2:97:11:c2:e8:43:5b:1f:e8:2e:f0:ec:b4:88:63:
52:4c:13:24:1e:23:c0:77:fc:40:b3:7b:6e:c4:ba:f3:70:4c:
05:73:16:dc:23:68:d3:8b:80:44:58:e2:cb:ee:d9:87:71:4e:
6b:c2:3a:6a:3f:af:92:50:b0:21:4c:80:6b:57:15:86:12:d2:
b3:aa:72:b7:27:2f:26:58:4a:3b:a0:42:fd:8e:7f:4e:a3:90:
ba:71:39:35:07:91:45:fa:2a:4f:5a:d8:ed:a1:17:82:96:12:
65:8e:8a:2c:46:d8:27:8e:7c:02:29:76:b5:8d:73:2e:3f:70:
19:d5:9c:70:10:ad:85:a0:06:a1:55:aa:33:dd:a8:3d:b2:29:
23:f5:57:6f:9d:53:f7:a3:ec:e4:91:9b:3f:6c:f4:79:6a:8a:
ea:f1:25:19:73:34:fc:5f:67:d0:3f:ab:22:be:3f:bd:2f:16:
b0:e8:33:0f:9b:f6:6f:2d:1e:18:69:cd:bb:d9:72:fa:34:be:
6c:07:7f:59:b3:21:ad:72:91:32:dc:66:06:3c:33:89:59:ed:
84:56:20:27:c4:33:6e:17:2c:9f:5f:cd:93:10:dc:03:1a:b2:
86:ab:c8:85:c0:a4:f2:99:10:20:94:1b:eb:f2:79:45:31:c1:
c6:7b:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org