Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C634426488A11ECBA0DF13ED8A014CE.roa
File: 1C634426488A11ECBA0DF13ED8A014CE.roa (raw, json)
Hash identifier: FXBdPzj1d9tKF/slqv7jOg0wZUQtBeQhIA3/WuhWwxs=
Subject key identifier: BC:9A:65:4A:5B:7E:13:CA:66:11:D8:39:55:31:67:BE:40:B0:60:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C634426488A11ECBA0DF13ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:10:56 +0000
ROA not before: Fri 19 Nov 2021 16:10:52 +0000
ROA not after: Sat 19 Nov 2022 16:10:52 +0000
asID: 139879
IP address blocks: 156.247.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3628 (0xe2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:10:52 2021 GMT
Not After : Nov 19 16:10:52 2022 GMT
Subject: CN=61967b10-1fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:c8:5d:36:27:92:98:fa:d5:00:ba:a9:34:
2a:77:78:32:4c:a5:80:bd:be:4d:3e:0b:66:4f:87:
46:4e:11:7b:48:67:08:09:c2:76:df:2e:f0:99:81:
ac:7e:0a:11:34:e9:35:c1:63:e2:be:3e:25:2b:d1:
07:9c:84:5d:97:ef:03:de:9f:59:30:9d:e4:69:5b:
46:6a:6c:21:6b:ab:73:32:62:99:bd:74:e9:47:18:
af:8e:b2:58:f5:aa:97:58:53:94:02:ca:1f:c5:64:
79:c2:e7:c4:78:ff:24:9f:51:69:9c:f1:27:e4:93:
02:e6:2a:f8:62:38:8d:b7:cc:b2:ef:c2:e6:7b:ae:
0f:64:a3:f7:b7:61:aa:6f:7a:32:7c:e9:97:1d:64:
15:d3:da:e9:e8:bd:38:eb:11:a0:51:10:be:b6:f0:
e3:33:cf:f1:d9:56:59:ff:2c:1e:b1:25:fe:0c:cf:
5a:33:95:5e:f6:3f:e5:e3:50:04:e5:de:05:ae:6b:
e5:8b:66:f2:00:28:ae:45:a6:cd:59:32:b0:4d:9a:
3e:80:e3:e3:1f:f7:3c:08:96:7f:36:de:1d:8a:bb:
34:3a:c3:35:2e:54:7b:15:69:bf:d0:bb:17:76:a5:
aa:e8:ab:a9:47:bc:2a:b1:cd:34:e3:9e:a2:4b:6b:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:65:4A:5B:7E:13:CA:66:11:D8:39:55:31:67:BE:40:B0:60:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C634426488A11ECBA0DF13ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0c:26:e2:ff:1a:0d:cf:35:3c:03:20:89:48:cf:12:40:f5:
bb:01:d0:f4:c0:88:5d:65:46:b4:86:cc:3e:98:84:b9:23:6f:
9d:f8:1d:f1:c9:02:4e:be:f4:d3:73:24:88:e6:fd:ed:22:74:
68:d0:a4:4d:2d:ca:21:1a:82:8e:35:6c:83:46:c5:aa:35:57:
30:43:00:7d:7f:3a:06:8d:2e:3f:cc:72:97:f6:d6:de:7b:ea:
9e:2f:c4:de:15:39:a5:98:c3:a9:1f:90:1f:35:d7:52:08:99:
50:66:f5:38:c6:d0:3d:44:43:86:f2:49:1f:65:62:6f:e2:9d:
85:89:c4:88:cf:db:45:39:5f:46:26:93:79:cc:8c:7b:4e:48:
95:0c:97:b5:ec:33:2c:4c:b6:cc:da:e8:51:de:bb:3f:b8:bc:
bf:cb:37:8d:2a:5e:46:14:c0:bd:22:0a:f6:90:7d:22:c9:af:
47:13:5a:84:f6:f9:67:2a:92:80:20:c7:4c:90:95:87:71:4d:
d3:14:2c:57:c0:31:28:bb:77:c9:fe:2a:76:72:7f:f5:40:c0:
d3:9d:84:5f:eb:02:cb:a3:06:40:9c:69:d8:f0:c3:54:eb:10:
02:27:23:86:79:d4:ad:e5:77:30:ce:01:8d:ae:f5:43:ce:33:
f7:05:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org