Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D498F6E488311EC8B56BA2FD8A014CE.roa
File: 1D498F6E488311EC8B56BA2FD8A014CE.roa (raw, json)
Hash identifier: WS3GLRvqHo1dj5aacpOKMqUGyUM7m1pz93vAXhS+Dd8=
Subject key identifier: AF:AE:29:31:DD:E0:8F:AB:6D:08:40:23:2F:29:F5:2D:34:8F:6A:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D498F6E488311EC8B56BA2FD8A014CE.roa
Signing time: Thu 18 Nov 2021 15:20:52 +0000
ROA not before: Fri 19 Nov 2021 15:20:47 +0000
ROA not after: Sat 19 Nov 2022 15:20:47 +0000
asID: 139879
IP address blocks: 156.231.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:20:47 2021 GMT
Not After : Nov 19 15:20:47 2022 GMT
Subject: CN=61966f53-7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:52:35:27:5a:85:91:2e:15:ee:4c:01:e2:
cd:d4:32:ed:2e:52:c9:cf:65:18:13:4f:76:dd:7e:
26:bb:bc:d3:de:e1:76:f0:24:e5:75:0c:e2:38:04:
76:91:6e:19:87:2b:49:c3:9f:71:c9:49:c5:f4:c4:
a5:b4:5e:c7:95:c1:09:ea:cb:c6:70:7d:98:18:ee:
b5:01:70:73:98:9e:53:27:e0:3a:6a:11:18:1e:bc:
f9:c7:72:72:33:97:d4:61:7c:c9:99:a0:39:81:6a:
5f:f8:2e:bb:82:c1:5b:95:c2:47:02:73:cf:ee:7a:
bd:a8:b9:99:0d:f2:81:6c:78:72:02:a8:85:14:0b:
50:3a:25:df:b6:ad:83:2f:07:cb:a4:9b:e7:fd:30:
ba:5e:74:fc:68:b3:56:99:8b:f6:6d:b1:3a:bf:54:
24:e4:3c:42:b0:1d:32:f6:a5:d6:84:8a:60:68:58:
aa:9c:15:cf:d6:00:af:6d:d1:10:84:56:08:fb:23:
7d:7a:c1:35:e1:cc:e9:1a:c1:e8:6d:92:2d:13:11:
a9:dd:e9:42:d7:20:e0:74:86:2d:25:04:66:a1:7d:
6d:a3:98:1f:c6:e7:a8:5a:43:c4:d6:0b:24:73:87:
e5:ed:c9:ea:e3:a9:ab:cb:2b:67:65:a7:e9:b6:03:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:29:31:DD:E0:8F:AB:6D:08:40:23:2F:29:F5:2D:34:8F:6A:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D498F6E488311EC8B56BA2FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.130.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e4:c3:f5:ec:8a:6e:4e:bf:ad:c6:26:37:60:16:c1:7c:d2:
9d:17:e6:b4:a6:85:b5:ba:c5:5e:da:21:3d:48:53:d1:13:05:
aa:01:27:29:54:48:fe:dd:ef:b8:79:21:c5:62:76:87:75:27:
2e:06:c5:a5:d7:f0:64:b9:4c:77:9b:44:9c:eb:88:15:aa:4c:
e8:4a:f3:70:88:d6:dd:0c:9c:6e:4a:9c:68:1f:b3:40:c6:fb:
10:3c:86:c7:68:d8:12:1d:2c:f9:1b:6e:c6:46:72:75:20:ec:
8f:55:60:75:1e:2c:85:93:ef:cd:63:30:61:24:a7:a1:7e:64:
41:96:cf:2e:bf:b1:d3:a8:94:6c:a9:3b:0c:ea:b6:15:99:79:
73:06:50:4f:14:a7:97:cc:e4:d9:2c:2a:29:b3:95:86:ca:97:
06:7c:4e:a4:2f:21:43:d7:42:57:78:cc:eb:c1:45:89:94:03:
7c:d9:82:74:a8:23:60:52:eb:4b:68:49:93:b8:6b:2b:cb:dc:
ef:8d:3b:fe:b0:6a:9a:5e:6f:45:ac:9e:ef:ef:e6:08:cc:d8:
ea:30:6e:03:1d:3d:d1:b7:1f:9c:ae:e8:34:7b:59:88:1d:60:
d5:17:34:04:1b:c1:9f:5b:26:3c:83:45:50:4a:31:7c:e6:87:
23:b4:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org